Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/190f2648-6c3f-3c12-89d1-c6494b8303f2.roa
File:                     190f2648-6c3f-3c12-89d1-c6494b8303f2.roa (raw, json)
Hash identifier:          EC4UYnYNREJxCdrWgbwAYLoSsnLpp4rSe4rJqZuIMXE=
Subject key identifier:   44:14:88:B0:27:C6:37:54:E5:79:4C:8F:1C:2D:F9:B5:5D:A4:4B:F0
Certificate issuer:       /CN=567c448b-a401-4208-bd87-aee67852522e
Certificate serial:       010D0C9F4328584A9E962183084AC6B69DDD1E80
Authority key identifier: 52:06:E6:0A:BA:F8:AB:DD:36:D0:8B:2A:74:EF:E3:D1:7F:11:16:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/190f2648-6c3f-3c12-89d1-c6494b8303f2.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     19523
IP address blocks:        64.72.196.0/23 maxlen: 23
                          64.72.198.0/24 maxlen: 24
                          2606:9e40::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/567c448b-a401-4208-bd87-aee67852522e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/567c448b-a401-4208-bd87-aee67852522e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:21:83:08:4a:c6:b6:9d:dd:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=567c448b-a401-4208-bd87-aee67852522e
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=a61b268b-dfdd-4b35-be6f-501d9eddc53b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5c:de:2a:11:20:ab:89:ee:28:86:84:df:82:
                    21:86:48:e6:af:39:f8:5d:0e:7c:ea:25:38:04:8f:
                    f1:87:a9:1d:c1:87:76:34:3a:f8:65:61:75:21:78:
                    ce:67:e2:ad:09:00:66:86:cc:c4:d5:1d:b2:4c:78:
                    8f:7a:03:af:f1:46:ec:ab:c5:78:a6:cb:46:1c:3d:
                    d6:fd:00:7f:e1:5c:bf:22:cf:77:84:6f:8c:b2:c3:
                    c8:1a:3a:6a:d9:5e:05:79:38:c0:51:12:0b:15:f3:
                    cc:ee:01:89:06:60:f1:11:3c:dd:24:d4:30:9b:23:
                    3d:f9:22:72:b2:e6:90:d1:97:48:6f:1b:a1:aa:f8:
                    33:e2:06:f6:b9:be:15:ae:c9:9e:18:5a:d9:a0:df:
                    6a:43:0e:74:73:95:48:e8:f4:65:ea:48:a7:46:4b:
                    4b:d6:61:2a:81:77:f0:07:3b:ef:09:8c:be:ad:98:
                    d8:cc:d7:7a:3b:33:74:6c:00:12:bc:60:44:f1:24:
                    0f:80:6d:ef:0c:ae:bc:38:e3:59:db:9a:1d:3a:28:
                    52:14:1c:a2:8b:bd:73:22:37:b9:c3:c5:27:5a:6b:
                    b0:4e:4a:12:17:f9:29:98:54:eb:92:6b:ca:26:ef:
                    71:fd:1a:a1:09:ed:5f:e7:4c:0b:e4:9c:79:d4:ab:
                    58:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:14:88:B0:27:C6:37:54:E5:79:4C:8F:1C:2D:F9:B5:5D:A4:4B:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/190f2648-6c3f-3c12-89d1-c6494b8303f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/567c448b-a401-4208-bd87-aee67852522e.crl

            X509v3 Authority Key Identifier:
                keyid:52:06:E6:0A:BA:F8:AB:DD:36:D0:8B:2A:74:EF:E3:D1:7F:11:16:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.196.0-64.72.198.255
                IPv6:
                  2606:9e40::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:64:59:9f:0f:cd:45:f8:30:1a:e4:ca:4f:0d:82:50:65:9e:
         ff:3f:df:a4:a8:7e:39:d7:b0:eb:0f:2e:00:0e:bd:0f:94:2b:
         36:f0:1a:0f:60:f8:a8:6d:13:6e:ee:ed:dc:1f:77:97:be:a8:
         4d:6f:6f:3d:f1:d9:bc:73:b2:0d:f4:4a:10:d0:16:47:be:94:
         30:22:ad:e8:73:43:7f:02:28:9f:86:5c:5b:de:f8:6f:b0:09:
         91:83:5e:af:82:32:11:2c:83:93:ca:7a:7f:e3:69:a7:99:b4:
         4a:ea:b1:e0:0a:0f:97:c4:15:ac:d3:43:b4:20:96:23:b2:a6:
         d8:74:9e:8f:a6:dd:57:46:50:2d:a6:78:32:2b:7a:00:89:f7:
         55:da:2f:6d:04:6e:dd:23:50:80:2b:d8:85:ee:c7:71:21:da:
         22:aa:08:37:ec:d9:ed:ea:7d:d2:82:c2:1a:36:42:c1:ce:32:
         d2:72:17:68:98:5c:be:f6:0a:d7:5c:7f:73:56:bb:b8:22:54:
         6a:fd:5a:ca:66:b8:6c:2a:52:d9:86:bc:5a:09:bd:4e:5c:cb:
         a5:87:2f:80:4a:54:c6:42:12:ee:d7:26:9d:49:d5:52:a4:3e:
         cb:29:5b:ad:39:d3:e9:78:c4:09:d9:ab:57:80:2f:e8:5a:4f:
         52:98:54:02
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEqeliGDCErGtp3dHoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTY3YzQ0OGItYTQwMS00MjA4LWJkODctYWVlNjc4NTI1
MjJlMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk
YTYxYjI2OGItZGZkZC00YjM1LWJlNmYtNTAxZDllZGRjNTNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlzeKhEgq4nuKIaE34Ihhkjmrzn4XQ586iU4
BI/xh6kdwYd2NDr4ZWF1IXjOZ+KtCQBmhszE1R2yTHiPegOv8Ubsq8V4pstGHD3W
/QB/4Vy/Is93hG+MssPIGjpq2V4FeTjAURILFfPM7gGJBmDxETzdJNQwmyM9+SJy
suaQ0ZdIbxuhqvgz4gb2ub4VrsmeGFrZoN9qQw50c5VI6PRl6kinRktL1mEqgXfw
BzvvCYy+rZjYzNd6OzN0bAASvGBE8SQPgG3vDK68OONZ25odOihSFByii71zIje5
w8UnWmuwTkoSF/kpmFTrkmvKJu9x/RqhCe1f50wL5Jx51KtYiQIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFEQUiLAnxjdU5XlMjxwt+bVdpEvwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81Njdj
NDQ4Yi1hNDAxLTQyMDgtYmQ4Ny1hZWU2Nzg1MjUyMmUvMTkwZjI2NDgtNmMzZi0z
YzEyLTg5ZDEtYzY0OTRiODMwM2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTY3YzQ0OGItYTQwMS00MjA4LWJk
ODctYWVlNjc4NTI1MjJlLzU2N2M0NDhiLWE0MDEtNDIwOC1iZDg3LWFlZTY3ODUy
NTIyZS5jcmwwHwYDVR0jBBgwFoAUUgbmCrr4q9020IsqdO/j0X8RFi4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi81NjdjNDQ4Yi1hNDAxLTQyMDgtYmQ4Ny1hZWU2
Nzg1MjUyMmUuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAUBAIAATAOMAwDBAJASMQD
BABASMYwDgQCAAIwCAMGBCYGnkAAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC1kWZ8PzUX4MBrkyk8NglBl
nv8/36SofjnXsOsPLgAOvQ+UKzbwGg9g+KhtE27u7dwfd5e+qE1vbz3x2bxzsg30
ShDQFke+lDAirehzQ38CKJ+GXFve+G+wCZGDXq+CMhEsg5PKen/jaaeZtErqseAK
D5fEFazTQ7QgliOypth0no+m3VdGUC2meDIregCJ91XaL20Ebt0jUIAr2IXux3Eh
2iKqCDfs2e3qfdKCwho2QsHOMtJyF2iYXL72Ctdcf3NWu7giVGr9WspmuGwqUtmG
vFoJvU5cy6WHL4BKVMZCEu7XJp1J1VKkPsspW6050+l4xAnZq1eAL+haT1KYVAI=
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:10:24 2025 by rpki-client