Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/09db520b-31cf-3c16-9501-2fe36da89b1f.roa
File:                     09db520b-31cf-3c16-9501-2fe36da89b1f.roa (raw, json)
Hash identifier:          cIGFI49hQB3VJZcxwg2kG3lcJ1ssvgor8qEGqTWR9bA=
Subject key identifier:   F3:6D:D4:3A:0E:52:7B:5D:D2:47:47:70:3E:54:21:95:1F:56:00:DD
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F4328584AB650ED9B5E40B784687FF500
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/09db520b-31cf-3c16-9501-2fe36da89b1f.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     13335
IP address blocks:        169.196.0.0/24 maxlen: 24
                          169.196.1.0/24 maxlen: 24
                          169.196.2.0/24 maxlen: 24
                          169.196.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:ed:9b:5e:40:b7:84:68:7f:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=ff0ee16b-6257-46e9-ba0d-8f79840ef186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c1:2c:9c:22:df:cc:55:a0:87:09:40:40:71:
                    ac:e0:05:10:9e:a1:bc:67:69:46:f3:cc:08:63:15:
                    fe:0c:d7:13:54:4c:5e:ec:10:fa:8e:8a:8d:fe:6c:
                    3a:ff:2a:be:ef:3c:63:e2:c7:60:42:37:13:38:71:
                    f8:dd:af:29:a5:fb:23:27:f7:4e:0d:1f:c6:54:0c:
                    a5:9e:de:06:69:04:83:57:23:49:67:04:e3:60:8d:
                    52:c9:79:62:16:50:0c:ce:f0:5a:c6:b1:db:d3:96:
                    70:24:8d:1c:be:f4:39:07:e7:c6:fe:b1:8f:5c:9e:
                    0d:69:40:65:87:8e:7f:c4:b3:73:32:d0:b8:fc:6a:
                    85:be:d6:8b:a7:4a:cf:53:0c:c9:3d:9f:c1:2f:73:
                    33:29:34:f6:33:0f:85:62:c7:06:06:0c:59:49:9a:
                    f7:8b:af:ab:15:c4:d3:e6:68:14:26:62:36:c0:33:
                    a4:f2:00:b2:31:74:d4:36:ca:fe:7d:0c:d0:74:d6:
                    d9:f3:37:07:95:d6:dc:9b:3e:fe:ad:fc:b1:10:0b:
                    90:3b:0c:f1:10:ce:0b:8e:d9:31:23:21:7b:55:a9:
                    9c:21:a8:61:d3:fa:b3:38:49:75:b2:00:63:e2:dd:
                    0d:c4:49:77:ce:c0:e0:46:e4:c8:30:9d:42:7b:97:
                    01:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6D:D4:3A:0E:52:7B:5D:D2:47:47:70:3E:54:21:95:1F:56:00:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/09db520b-31cf-3c16-9501-2fe36da89b1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:96:ba:3e:19:c4:de:ee:46:20:c6:04:da:01:81:42:14:af:
         54:28:e4:67:0d:e2:bb:24:e3:34:0c:40:28:07:4d:d8:da:2c:
         30:5f:df:c3:43:dc:b5:67:35:6e:98:04:5b:d2:7a:03:95:1f:
         04:96:3e:30:9b:f3:dd:3f:69:b1:7c:66:62:70:e2:3a:ed:bb:
         91:62:d5:37:8d:fc:af:50:76:45:82:a3:cf:ae:71:51:67:40:
         57:69:8d:fa:38:2c:c0:f0:3c:b0:b6:73:e2:40:8e:f8:7f:fd:
         09:3b:52:ae:a7:1b:2b:e6:8c:12:88:a6:58:7e:8f:51:7b:8d:
         c2:42:4f:2c:b7:20:4b:ec:8a:b0:91:b8:3f:ae:33:fd:b2:fc:
         a9:08:b2:eb:57:c4:6e:8d:dc:dd:21:fc:33:6e:c6:d9:26:74:
         61:32:27:6b:3f:72:6f:d9:82:99:8f:45:83:cd:c6:f5:46:f9:
         db:fd:bc:76:e0:1d:67:69:93:e7:0b:4b:4a:a5:6c:fd:bf:4d:
         fd:ca:ff:4a:53:88:19:59:b5:8e:24:a3:27:d5:ec:a0:cd:d9:
         11:12:90:17:55:d6:2e:f3:53:14:e0:ee:56:21:10:70:9e:aa:
         29:dc:15:49:e8:42:7b:cf:63:69:fe:31:aa:18:c3:1a:37:fb:
         fa:a1:53:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 01:47:20 2025 by rpki-client