Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/190f2648-6c3f-3c12-89d1-c6494b8303f2.roa
File:                     190f2648-6c3f-3c12-89d1-c6494b8303f2.roa (raw, json)
Hash identifier:          sApez8NWrEWR19lgihjlMIIdGrcIwL9PMeG3C5f4aM4=
Subject key identifier:   02:BA:10:41:F8:6F:48:CF:B9:62:F5:6B:1D:0B:3F:D7:1F:20:79:C7
Certificate issuer:       /CN=567c448b-a401-4208-bd87-aee67852522e
Certificate serial:       010D0C9F4328584E1E4457AB150525055097A1E0
Authority key identifier: 52:06:E6:0A:BA:F8:AB:DD:36:D0:8B:2A:74:EF:E3:D1:7F:11:16:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/190f2648-6c3f-3c12-89d1-c6494b8303f2.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     19523
IP address blocks:        64.72.196.0/23 maxlen: 23
                          64.72.198.0/24 maxlen: 24
                          2606:9e40::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/567c448b-a401-4208-bd87-aee67852522e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/567c448b-a401-4208-bd87-aee67852522e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:57:ab:15:05:25:05:50:97:a1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=567c448b-a401-4208-bd87-aee67852522e
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=df939fbc-e6bc-4690-8b8a-cffcac4f6454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3e:e9:54:2a:f4:3b:92:61:a5:90:3d:c8:fe:
                    ae:ca:74:b5:4b:c0:54:31:4c:22:0e:7c:28:01:db:
                    9a:df:dc:fd:ef:5f:97:d9:46:cc:55:9a:86:4c:2c:
                    19:d9:f6:f0:30:00:90:34:51:ff:26:73:83:6f:7d:
                    91:5a:1a:b4:81:5d:6a:bf:e1:b2:ef:d9:30:3a:d8:
                    ed:bf:17:45:e8:03:0d:0d:6f:8b:c3:8f:e7:a6:7d:
                    17:ae:ee:de:5f:7b:10:df:90:76:82:e5:6f:32:3e:
                    16:40:1c:04:f2:f3:60:1f:7a:62:06:70:ef:ca:a9:
                    25:24:2f:23:36:be:f1:44:79:01:aa:10:d8:65:ad:
                    66:cd:66:74:22:18:a3:ff:91:60:7d:34:60:73:cd:
                    08:6e:75:bd:aa:e3:43:ff:93:7a:99:e4:e7:29:f4:
                    40:15:95:3c:9c:dc:1d:9d:50:96:6e:27:8d:fb:57:
                    82:30:2e:6f:b3:78:1f:c5:d4:10:8d:e6:e0:25:a1:
                    fa:b9:f9:60:95:f0:a5:0f:73:66:0c:e8:f1:ce:5d:
                    54:c0:08:26:e8:24:2d:45:ec:bc:b4:ae:c7:a3:62:
                    17:2d:a8:9b:db:11:94:01:ff:aa:3e:ee:49:f1:31:
                    a5:18:60:79:b9:66:20:fe:d0:3f:a4:d9:da:57:8f:
                    16:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BA:10:41:F8:6F:48:CF:B9:62:F5:6B:1D:0B:3F:D7:1F:20:79:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/190f2648-6c3f-3c12-89d1-c6494b8303f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/567c448b-a401-4208-bd87-aee67852522e.crl

            X509v3 Authority Key Identifier:
                keyid:52:06:E6:0A:BA:F8:AB:DD:36:D0:8B:2A:74:EF:E3:D1:7F:11:16:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.196.0-64.72.198.255
                IPv6:
                  2606:9e40::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:3e:76:e4:3d:55:5b:1f:41:f0:9e:c1:06:65:a7:0f:76:90:
         69:63:1f:b1:e2:95:6f:d7:fd:e3:7b:5c:ff:02:77:d7:5e:a7:
         8a:a2:63:b3:ac:44:86:44:cf:c8:d8:2d:d1:d1:60:bd:a8:34:
         9a:e1:24:9d:8c:e5:f8:15:44:96:4b:f5:c3:4b:4e:63:12:e0:
         74:d2:21:12:c7:58:70:5a:10:03:e7:78:c7:f8:92:5f:eb:3d:
         b6:fe:aa:0c:29:f5:1a:11:5d:47:66:83:a5:5d:ab:79:4e:ab:
         33:08:8f:7b:42:f0:75:04:c9:b7:cb:ff:1a:7a:77:71:f1:9f:
         44:24:60:52:ca:4f:03:29:f9:95:45:64:f3:66:b9:d9:70:35:
         72:8c:3b:bb:4d:60:88:34:59:b4:04:22:28:b3:ba:d4:ed:26:
         d1:d6:6a:e8:a1:7c:65:d9:e9:ad:e4:f8:7f:4e:56:3a:be:de:
         75:c8:58:d4:8f:00:fc:83:d4:20:3b:8f:d1:ce:a0:31:b1:c4:
         36:ba:01:52:c6:a4:c3:73:60:64:37:ee:70:ec:e1:6a:56:82:
         dd:c6:f9:5a:2a:78:4b:21:aa:bf:77:e1:62:45:94:b5:c4:0f:
         e7:d5:c7:39:34:75:37:ba:e6:3e:55:0b:c7:24:2d:a5:ce:bf:
         a4:4d:ce:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:09:41 2026 by rpki-client