Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/190f2648-6c3f-3c12-89d1-c6494b8303f2.roa
File:                     190f2648-6c3f-3c12-89d1-c6494b8303f2.roa (raw, json)
Hash identifier:          75dWNgr4ai3sLeeX+vwLBPXItCfh4mTpDDXz/lKl6xw=
Subject key identifier:   12:C1:06:15:C7:4B:0F:15:06:B2:B6:2C:FA:54:0E:EC:67:60:FD:9F
Certificate issuer:       /CN=567c448b-a401-4208-bd87-aee67852522e
Certificate serial:       010D0C9F4328584B7F52162807854BF81F94E920
Authority key identifier: 52:06:E6:0A:BA:F8:AB:DD:36:D0:8B:2A:74:EF:E3:D1:7F:11:16:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/190f2648-6c3f-3c12-89d1-c6494b8303f2.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     19523
IP address blocks:        64.72.196.0/23 maxlen: 23
                          64.72.198.0/24 maxlen: 24
                          2606:9e40::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/567c448b-a401-4208-bd87-aee67852522e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/567c448b-a401-4208-bd87-aee67852522e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:16:28:07:85:4b:f8:1f:94:e9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=567c448b-a401-4208-bd87-aee67852522e
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=8ed30ef9-def5-4140-b683-30ec38acb1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c1:f7:0c:2c:9f:45:41:90:80:92:51:f0:68:
                    bc:72:2b:76:a3:e3:72:43:69:20:e1:dd:cc:ea:ca:
                    62:e8:8f:b3:7b:4a:2a:f8:88:52:5d:b6:18:ed:1f:
                    5d:d4:c3:b7:d7:59:73:46:18:e9:c6:01:cb:26:07:
                    47:f1:65:e1:27:7a:12:d3:4c:ec:96:b1:0a:b7:61:
                    02:e6:ab:e0:54:9c:3b:cd:fe:23:9f:ca:61:e8:a6:
                    8f:6f:76:ee:57:d3:3c:3e:f7:6d:9d:f4:88:50:12:
                    67:b6:64:15:9f:ad:15:13:4e:96:b7:2e:c4:33:ac:
                    04:f6:e5:1d:7e:89:2b:d4:13:ac:9b:de:cb:9d:af:
                    22:04:66:e9:8e:96:47:9c:e6:d3:a0:74:29:87:79:
                    74:5d:c2:f3:23:ff:fb:28:70:92:a9:20:33:9a:dd:
                    e1:78:90:b1:dc:54:10:75:1a:b8:07:ca:d4:e7:ab:
                    9a:08:20:21:ce:35:cf:f4:d3:4f:79:65:9a:de:6d:
                    11:d1:40:6c:a1:ff:af:ac:23:76:ab:f4:f3:03:89:
                    4e:20:3e:a1:29:61:66:47:aa:37:48:1f:ba:54:ba:
                    d9:90:50:73:e9:21:ad:12:72:ef:82:57:ed:60:5a:
                    e3:df:5b:b6:95:26:43:d8:78:15:27:ea:f7:c4:7b:
                    17:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C1:06:15:C7:4B:0F:15:06:B2:B6:2C:FA:54:0E:EC:67:60:FD:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/190f2648-6c3f-3c12-89d1-c6494b8303f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/567c448b-a401-4208-bd87-aee67852522e.crl

            X509v3 Authority Key Identifier:
                keyid:52:06:E6:0A:BA:F8:AB:DD:36:D0:8B:2A:74:EF:E3:D1:7F:11:16:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.196.0-64.72.198.255
                IPv6:
                  2606:9e40::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:91:16:fc:0d:18:00:b9:bf:25:5e:ec:5b:b2:08:12:72:14:
         ae:74:e4:32:a4:3c:a3:12:d1:ad:b9:02:50:86:89:d6:d3:58:
         5f:a0:ff:3e:ba:3a:80:d4:94:b0:71:f1:16:82:7c:4e:de:6e:
         41:d0:c5:38:4c:77:c9:4c:ff:d5:8d:37:de:17:a5:95:27:80:
         5a:c0:af:58:ff:96:a1:d8:d1:09:cc:53:72:07:f8:d1:ab:c7:
         a2:2f:45:8b:1a:23:3f:24:4e:0e:74:44:e8:21:4d:60:c2:9e:
         63:e7:b4:d7:48:11:f5:45:f6:52:c2:a0:b5:d3:8c:6f:00:3d:
         c4:ec:eb:19:76:80:c2:6d:96:3e:c3:12:8b:ba:f7:ca:4f:74:
         c0:e9:9b:24:c3:4c:81:7f:61:8b:27:f1:1c:6e:f5:3d:0d:6b:
         b1:94:22:29:f3:5b:c0:1c:e5:d2:25:f7:c7:83:57:22:09:52:
         4a:ee:5d:6b:25:03:dc:4f:c3:1d:6c:46:1b:5c:64:0a:45:1c:
         4f:3a:91:e9:4a:fc:c0:b6:47:39:ad:cc:7e:2d:23:56:74:d8:
         db:b6:15:eb:b7:c7:73:08:bf:72:6b:43:76:a6:7a:9d:ac:a7:
         04:07:73:e3:a4:97:34:a9:2e:6d:3b:cf:f9:b5:47:72:7e:05:
         61:e3:d5:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:11:43 2025 by rpki-client