Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/ba7d59a3-7fa8-34a6-bdac-f08f1be48f56.roa
File:                     ba7d59a3-7fa8-34a6-bdac-f08f1be48f56.roa (raw, json)
Hash identifier:          NH/gP69YlEFJZpdYqL3lP5LEaCfeuZHaVCvcCANLaJM=
Subject key identifier:   5B:6A:F9:09:77:F2:A0:E4:09:A2:D7:74:8D:AC:45:8F:6C:BC:00:72
Certificate issuer:       /CN=567c448b-a401-4208-bd87-aee67852522e
Certificate serial:       010D0C9F4328584A9E96216E6C26038DED9A8400
Authority key identifier: 52:06:E6:0A:BA:F8:AB:DD:36:D0:8B:2A:74:EF:E3:D1:7F:11:16:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/ba7d59a3-7fa8-34a6-bdac-f08f1be48f56.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     19016
IP address blocks:        64.72.199.0/24 maxlen: 24
                          2606:9e40:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/567c448b-a401-4208-bd87-aee67852522e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/567c448b-a401-4208-bd87-aee67852522e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:21:6e:6c:26:03:8d:ed:9a:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=567c448b-a401-4208-bd87-aee67852522e
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=9dcb2a55-cfef-4dce-9d4d-7fad35e2cde4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:91:22:27:64:a0:fd:98:c8:23:37:ff:a2:1f:
                    44:c1:61:23:30:24:35:07:b5:7a:21:1e:1b:40:6d:
                    3d:32:6c:95:0c:58:24:d0:37:cf:60:b6:50:1c:f4:
                    41:a1:79:86:4a:ff:2f:16:ac:77:66:fa:dc:d9:49:
                    75:80:9b:42:27:b1:dd:99:96:9f:4a:b4:21:12:bc:
                    1c:ab:21:f7:02:21:b4:2d:f3:d0:45:24:c4:89:e8:
                    33:52:81:cb:98:0d:4f:d8:f4:9b:bc:42:8b:01:2b:
                    f9:87:f0:61:10:ab:da:bf:9a:ed:67:73:9b:c0:7c:
                    5d:4e:57:64:07:da:ea:c6:f1:a9:b3:92:f8:41:a7:
                    03:af:3f:24:c2:9d:6e:c9:59:be:92:49:f8:6b:b7:
                    29:f2:b4:f8:e0:c8:2e:e7:1b:e2:95:70:dc:0f:e2:
                    15:15:ce:67:07:9a:b0:49:49:64:6b:cf:16:21:99:
                    34:f0:d3:86:c3:09:9a:38:5b:09:37:ce:80:d7:ee:
                    54:34:a7:b4:d9:ac:cf:d0:06:7d:d8:94:bb:f8:2d:
                    fc:60:55:91:31:85:c0:89:88:90:08:8d:67:94:dd:
                    ce:2b:6b:79:28:8d:2e:ed:b0:28:52:5c:9b:b2:da:
                    d7:0a:b9:62:60:61:c1:24:19:dc:a7:6c:a5:ce:fa:
                    0e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6A:F9:09:77:F2:A0:E4:09:A2:D7:74:8D:AC:45:8F:6C:BC:00:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/ba7d59a3-7fa8-34a6-bdac-f08f1be48f56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/567c448b-a401-4208-bd87-aee67852522e.crl

            X509v3 Authority Key Identifier:
                keyid:52:06:E6:0A:BA:F8:AB:DD:36:D0:8B:2A:74:EF:E3:D1:7F:11:16:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.199.0/24
                IPv6:
                  2606:9e40:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:74:a2:d6:82:6e:f7:61:72:f0:88:36:15:96:59:da:d1:e2:
         c5:9c:3f:ba:8b:28:7c:c4:b1:7b:29:7c:41:94:ee:52:ac:d7:
         b8:c8:e6:ce:3f:87:c2:47:c1:c2:0f:f2:ca:10:10:11:eb:25:
         da:9c:0c:1b:c5:be:e4:49:2d:90:36:15:ec:96:5a:74:15:a4:
         ed:7c:ff:a8:47:d0:77:88:71:fb:37:e6:cc:44:b7:df:46:83:
         ee:4a:53:fe:cd:3c:f0:77:02:68:d0:60:bd:3a:b9:be:f2:5f:
         0b:8e:12:6a:f4:8e:24:00:c8:87:70:ce:11:df:23:b9:5d:05:
         36:4a:fc:7f:c1:2e:1a:5f:6f:de:b6:97:e0:d0:0c:2a:3b:cd:
         ab:7b:5c:f3:be:9d:e1:f8:4b:a6:5c:32:18:da:07:3e:ed:8f:
         ad:ec:bb:d5:2f:55:a9:5b:60:72:be:d7:9c:13:27:8b:98:70:
         ae:15:45:b0:81:53:9e:0d:21:66:2c:d1:02:50:93:de:f5:45:
         d9:69:52:10:2d:23:fe:0a:89:d9:ec:95:2a:33:98:90:89:85:
         e9:6b:21:5e:24:f0:d9:26:3e:1f:0f:be:61:86:13:54:2c:39:
         33:b0:a7:87:1d:84:1f:ef:73:29:d0:e6:92:eb:88:c2:00:0c:
         ee:2b:04:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:26:15 2025 by rpki-client