Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/65588ce4-be96-30c9-8d36-95bf6b465fe7.roa
File:                     65588ce4-be96-30c9-8d36-95bf6b465fe7.roa (raw, json)
Hash identifier:          eFyzEEHvZ4UdAp8WE57RHpcjLfZdLg+VgMcteRumrus=
Subject key identifier:   9A:0E:29:CF:B3:EE:11:54:0E:E1:A3:07:4F:A6:F8:EE:CC:BD:A5:EE
Certificate issuer:       /CN=81565da9-aab9-45ca-b99c-0684053daa09
Certificate serial:       010D0C9F4328584A7E7B5D9002E7781883F04C00
Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/65588ce4-be96-30c9-8d36-95bf6b465fe7.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     188
IP address blocks:        149.64.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:5d:90:02:e7:78:18:83:f0:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=144f5a18-a5ec-4a4d-92e9-949d662ad08c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:35:91:f5:cf:61:b1:b5:31:0c:c2:96:f4:02:
                    24:50:ec:82:3d:a8:d5:b9:02:b7:7f:ff:a7:6e:33:
                    d4:c6:a1:2d:d9:e7:a2:d5:ee:38:6b:6f:b4:98:48:
                    19:19:26:69:9c:33:95:44:01:be:c7:6b:22:15:d5:
                    7b:7d:0b:fa:83:81:09:f3:e5:c2:b5:f8:1a:b1:b9:
                    4f:57:1c:37:f0:7b:b5:ab:67:0e:3f:4b:ab:2e:b2:
                    30:49:73:4d:a8:3c:d0:94:09:68:7c:53:fb:35:36:
                    9f:18:e4:f1:bd:ae:4c:d7:ba:6c:8f:cc:53:94:2c:
                    9f:52:c6:f5:96:dd:93:d0:4e:e7:b5:b4:ca:91:89:
                    40:82:dc:6a:d5:a7:97:fb:a0:c5:60:ce:db:51:17:
                    42:ea:76:30:ff:f4:40:5b:eb:d7:3f:e0:c3:72:46:
                    2a:a0:31:ec:74:0e:2a:da:d1:f1:46:92:c9:26:05:
                    e9:c2:a5:b4:3d:11:07:22:de:bd:1e:41:fe:0d:c1:
                    c3:20:26:fa:de:65:10:74:eb:c0:9e:99:1f:fb:6a:
                    7e:d8:02:c2:57:32:c2:35:d4:28:45:94:08:0f:b0:
                    80:5d:85:ba:aa:da:b2:1c:d8:a8:2b:6e:9a:6b:ec:
                    b2:a4:22:d9:a7:b4:68:00:17:0b:c8:61:4e:a4:40:
                    47:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0E:29:CF:B3:EE:11:54:0E:E1:A3:07:4F:A6:F8:EE:CC:BD:A5:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/65588ce4-be96-30c9-8d36-95bf6b465fe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl

            X509v3 Authority Key Identifier:
                keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.64.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:16:fd:26:88:87:cc:58:c1:11:fb:98:ca:3f:8d:59:03:4d:
         22:59:14:c6:4b:e2:68:4b:91:38:30:44:63:d5:14:9b:f8:9d:
         62:57:40:f1:7a:08:32:9e:46:61:0f:03:ee:f1:9e:f3:e6:eb:
         bb:00:95:34:1a:95:b1:4e:0c:a8:0f:7a:a6:a9:3f:00:f4:c8:
         97:7f:29:76:48:0e:00:9e:fd:ea:6e:2f:7f:72:a6:a4:f2:8a:
         60:38:d8:49:42:2a:c5:98:77:6e:2e:d2:b4:fa:70:0c:ce:2c:
         df:30:c3:e8:4d:5d:28:55:1b:ff:05:18:45:7f:37:36:e4:ae:
         a1:67:bd:e7:2f:e4:32:2e:87:b2:fd:c5:d5:f5:a9:34:86:e1:
         2e:b8:ba:b6:bb:40:e6:5b:eb:ed:a8:86:0b:7e:a4:cf:bc:23:
         25:23:76:0d:d0:07:19:75:f0:2d:74:d8:18:b4:c7:ab:09:22:
         b5:6d:c1:a1:20:52:8e:07:98:80:d6:4f:fa:2b:22:3b:08:3d:
         0d:09:10:5e:59:56:6b:93:9d:4c:76:ef:ae:07:fb:6f:03:70:
         f7:b9:e5:c6:70:78:ae:2d:a1:2f:96:f2:4d:a0:7e:6e:25:2a:
         9f:ae:5c:75:06:8d:fa:b4:6c:96:01:af:bc:1f:96:83:2b:85:
         cc:ed:af:43
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEp+e12QAud4GIPwTAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODE1NjVkYTktYWFiOS00NWNhLWI5OWMtMDY4NDA1M2Rh
YTA5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk
MTQ0ZjVhMTgtYTVlYy00YTRkLTkyZTktOTQ5ZDY2MmFkMDhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijWR9c9hsbUxDMKW9AIkUOyCPajVuQK3f/+n
bjPUxqEt2eei1e44a2+0mEgZGSZpnDOVRAG+x2siFdV7fQv6g4EJ8+XCtfgasblP
Vxw38Hu1q2cOP0urLrIwSXNNqDzQlAlofFP7NTafGOTxva5M17psj8xTlCyfUsb1
lt2T0E7ntbTKkYlAgtxq1aeX+6DFYM7bURdC6nYw//RAW+vXP+DDckYqoDHsdA4q
2tHxRpLJJgXpwqW0PREHIt69HkH+DcHDICb63mUQdOvAnpkf+2p+2ALCVzLCNdQo
RZQID7CAXYW6qtqyHNioK26aa+yypCLZp7RoABcLyGFOpEBHiQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJoOKc+z7hFUDuGjB0+m+O7MvaXuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2
NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0MDUzZGFhMDkvNjU1ODhjZTQtYmU5Ni0z
MGM5LThkMzYtOTViZjZiNDY1ZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODE1NjVkYTktYWFiOS00NWNhLWI5
OWMtMDY4NDA1M2RhYTA5LzgxNTY1ZGE5LWFhYjktNDVjYS1iOTljLTA2ODQwNTNk
YWEwOS5jcmwwHwYDVR0jBBgwFoAU11yQoPbNF8ZEaKnEFmHVfmQjLcgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0
MDUzZGFhMDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlUAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAbhb9JoiHzFjBEfuYyj+NWQNNIlkUxkviaEuRODBEY9UUm/idYldA8XoI
Mp5GYQ8D7vGe8+bruwCVNBqVsU4MqA96pqk/APTIl38pdkgOAJ796m4vf3KmpPKK
YDjYSUIqxZh3bi7StPpwDM4s3zDD6E1dKFUb/wUYRX83NuSuoWe95y/kMi6Hsv3F
1fWpNIbhLri6trtA5lvr7aiGC36kz7wjJSN2DdAHGXXwLXTYGLTHqwkitW3BoSBS
jgeYgNZP+isiOwg9DQkQXllWa5OdTHbvrgf7bwNw97nlxnB4ri2hL5byTaB+biUq
n65cdQaN+rRslgGvvB+WgyuFzO2vQw==
-----END CERTIFICATE-----
Generated at Tue Jul 22 12:27:36 2025 by rpki-client