Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/a1a3ab19-5cb5-350e-85bc-242757f97592.roa
File:                     a1a3ab19-5cb5-350e-85bc-242757f97592.roa (raw, json)
Hash identifier:          KXdib8xmZA5wWUUbisP7On0dos7NFXqs1q4Z/sB6jTQ=
Subject key identifier:   F6:8E:0E:D7:64:AC:96:1E:07:5C:2D:D4:CA:0A:D4:BC:3D:5D:90:A6
Certificate issuer:       /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial:       010D0C9F4328584AD93660BEAC3D7553FD577D80
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/a1a3ab19-5cb5-350e-85bc-242757f97592.roa
Signing time:             Thu 14 Aug 2025 01:00:33 +0000
ROA not before:           Thu 14 Aug 2025 01:00:33 +0000
ROA not after:            Wed 12 Nov 2025 02:00:33 +0000
asID:                     22765
IP address blocks:        72.20.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:36:60:be:ac:3d:75:53:fd:57:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
        Validity
            Not Before: Aug 14 01:00:33 2025 GMT
            Not After : Nov 12 02:00:33 2025 GMT
        Subject: CN=69c64189-8e06-464b-adf1-c1b8bac58844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5c:ce:51:0b:66:8b:64:a2:0d:a5:ad:bb:44:
                    29:5c:f1:72:c4:4b:18:ed:97:90:2a:8a:cb:e6:90:
                    66:e8:e8:de:4a:c6:ea:23:65:4d:f8:ad:b4:3c:c8:
                    08:a1:bc:74:3c:15:c9:4c:c9:1f:0d:84:e2:93:e2:
                    73:30:77:cf:54:1c:bd:b0:78:f5:75:ff:7b:f0:1c:
                    e1:9f:7b:11:c7:5b:7f:98:e1:de:b8:4e:f9:f0:b3:
                    ee:13:27:89:fa:b2:65:7b:cb:64:bc:ab:b7:4c:94:
                    82:97:2a:ab:0f:0c:6b:bb:18:c8:a0:40:28:0c:32:
                    6b:7f:f8:a0:8b:49:3d:fd:9b:3c:73:a6:74:3e:19:
                    8b:fd:90:14:19:28:b6:97:f9:c6:3f:69:b5:cf:c2:
                    5c:fe:02:6b:f9:9b:00:69:1a:b8:5c:18:05:d4:eb:
                    bd:cc:55:f6:e0:ba:55:13:f0:97:e4:62:4e:1d:64:
                    03:a0:ef:99:27:90:f5:11:99:cb:97:77:77:6a:7c:
                    1c:d2:87:d2:7f:b8:f1:85:72:5d:12:ea:bf:c4:d1:
                    fc:70:32:a9:6a:49:30:fb:53:46:e1:c2:1e:8b:7f:
                    e7:bb:e8:a4:dc:90:85:2c:45:3f:55:4c:d8:e9:1c:
                    9f:51:c1:4b:01:a5:49:5e:71:78:d9:b5:69:e6:53:
                    dd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8E:0E:D7:64:AC:96:1E:07:5C:2D:D4:CA:0A:D4:BC:3D:5D:90:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/a1a3ab19-5cb5-350e-85bc-242757f97592.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:24:16:4d:55:5a:40:36:6c:83:9b:d3:d8:69:a3:e2:39:81:
         0e:53:61:ec:b5:7e:ba:6d:32:db:7d:52:6b:0b:b2:72:f8:37:
         4b:e1:75:3f:c1:64:26:a6:9b:50:d9:62:77:be:c4:cf:71:1e:
         84:c1:ae:1b:1e:d1:c6:b9:5e:d5:09:d9:1e:e8:85:2e:80:bd:
         71:b6:cf:54:2f:64:39:ad:ce:b7:58:de:7f:c1:94:62:0e:a0:
         76:3a:4b:c0:7e:04:95:2f:cd:ee:6c:ca:6a:83:cf:61:72:1b:
         17:1e:20:ec:37:e6:4a:77:3b:b1:4a:f8:c5:5e:c9:c4:76:4b:
         a0:88:9d:57:4f:1b:81:41:57:e9:e6:4b:b9:76:04:f4:4e:7a:
         0d:5e:fa:92:ae:7c:91:23:f0:d6:f7:42:fc:83:c2:e1:32:2b:
         04:2d:8b:fe:d8:1f:21:e7:b0:ff:6e:9e:72:e4:87:2b:87:cc:
         f9:df:84:4a:86:94:82:03:f7:3c:78:e8:4e:21:3a:cb:37:cf:
         62:d1:97:f5:be:d9:27:72:dd:e3:cd:c9:c9:7a:ef:88:88:5f:
         b8:d2:2e:4c:0f:e2:e9:5a:40:d5:af:55:74:da:ec:b7:e1:49:
         51:af:15:a3:dd:33:e2:ec:b6:21:f5:f5:86:70:4c:86:1f:0f:
         e6:6e:2e:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNmC+rD11U/1XfYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj
ZmEzMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk
NjljNjQxODktOGUwNi00NjRiLWFkZjEtYzFiOGJhYzU4ODQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlzOUQtmi2SiDaWtu0QpXPFyxEsY7ZeQKorL
5pBm6OjeSsbqI2VN+K20PMgIobx0PBXJTMkfDYTik+JzMHfPVBy9sHj1df978Bzh
n3sRx1t/mOHeuE758LPuEyeJ+rJle8tkvKu3TJSClyqrDwxruxjIoEAoDDJrf/ig
i0k9/Zs8c6Z0PhmL/ZAUGSi2l/nGP2m1z8Jc/gJr+ZsAaRq4XBgF1Ou9zFX24LpV
E/CX5GJOHWQDoO+ZJ5D1EZnLl3d3anwc0ofSf7jxhXJdEuq/xNH8cDKpakkw+1NG
4cIei3/nu+ik3JCFLEU/VUzY6RyfUcFLAaVJXnF42bVp5lPdawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPaODtdkrJYeB1wt1MoK1Lw9XZCmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy
MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvYTFhM2FiMTktNWNiNS0z
NTBlLTg1YmMtMjQyNzU3Zjk3NTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli
MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw
Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk
MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSBTCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIYkFk1VWkA2bIOb09hpo+I5gQ5TYey1frptMtt9UmsLsnL4N0vhdT/B
ZCamm1DZYne+xM9xHoTBrhse0ca5XtUJ2R7ohS6AvXG2z1QvZDmtzrdY3n/BlGIO
oHY6S8B+BJUvze5symqDz2FyGxceIOw35kp3O7FK+MVeycR2S6CInVdPG4FBV+nm
S7l2BPROeg1e+pKufJEj8Nb3QvyDwuEyKwQti/7YHyHnsP9unnLkhyuHzPnfhEqG
lIID9zx46E4hOss3z2LRl/W+2Sdy3ePNycl674iIX7jSLkwP4ulaQNWvVXTa7Lfh
SVGvFaPdM+LstiH19YZwTIYfD+ZuLhY=
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:22:37 2025 by rpki-client