Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/0f338f9f-8d80-3501-ac29-5563e567deab.roa
File:                     0f338f9f-8d80-3501-ac29-5563e567deab.roa (raw, json)
Hash identifier:          wXrcIRwQ5Ch6XJlgAe7xTkBRAC3yIcZMCy6bALFDOA4=
Subject key identifier:   09:19:1C:9A:49:5A:8D:02:99:5E:BF:15:E1:0F:0A:D9:E5:E6:70:88
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F4328584F4973CF1170586F215FB94990
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/0f338f9f-8d80-3501-ac29-5563e567deab.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     198949
IP address blocks:        169.196.128.0/19 maxlen: 19
                          169.196.160.0/20 maxlen: 20
                          169.196.176.0/20 maxlen: 20
                          169.196.220.0/23 maxlen: 23
                          169.196.222.0/23 maxlen: 23
                          169.196.224.0/20 maxlen: 20
                          169.196.240.0/21 maxlen: 21
                          169.196.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:cf:11:70:58:6f:21:5f:b9:49:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=89b983e7-4bb3-49f1-8555-530b53edffcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c1:35:dc:40:c6:5b:bb:7d:c5:a0:eb:b3:85:
                    0f:9c:b5:57:cd:3f:3e:54:46:53:8d:ca:be:86:94:
                    1b:6e:07:66:02:25:b9:be:51:65:ed:86:23:66:38:
                    52:4d:e9:f7:0c:a4:67:7d:1d:e2:b6:91:bd:3e:41:
                    16:e5:07:54:7e:f7:dc:00:58:29:bc:ef:f9:6c:b7:
                    40:ae:95:10:10:d1:44:fa:c5:08:82:96:fa:7b:7c:
                    d7:fe:d3:ff:b8:4c:2e:46:0e:ba:7f:ac:1f:ad:4e:
                    be:58:af:fa:07:6a:81:12:c9:61:52:ef:06:df:5a:
                    1f:1c:58:20:fa:a4:d1:96:86:b1:a3:9f:74:3c:2e:
                    f8:f3:12:df:3e:e6:47:e8:29:c4:9f:36:e3:2a:5f:
                    a3:99:a0:10:30:7d:d5:c1:87:e9:b7:5e:45:82:df:
                    84:89:46:01:69:80:92:d5:5b:d9:5e:3e:7a:0d:2f:
                    62:3c:d7:7a:1d:62:9b:53:82:b1:d4:43:91:0b:0a:
                    92:26:3e:10:85:10:e9:76:03:b2:57:ef:e0:84:75:
                    37:7e:ec:91:df:53:68:20:6d:19:64:1e:fd:25:4f:
                    34:be:9d:53:fc:0e:04:0c:02:70:2c:78:27:84:c8:
                    0d:a7:c2:bb:56:3e:c3:40:3b:ef:1f:05:5f:09:dd:
                    b6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:19:1C:9A:49:5A:8D:02:99:5E:BF:15:E1:0F:0A:D9:E5:E6:70:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/0f338f9f-8d80-3501-ac29-5563e567deab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.128.0/18
                  169.196.220.0-169.196.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:26:54:fe:bb:ce:6a:43:01:3a:0f:a8:b5:38:6f:c1:ed:7e:
         5c:c2:79:9b:88:b5:a9:37:1c:1a:ee:58:5f:aa:34:8e:15:00:
         b5:b6:78:b3:9f:5f:39:86:4f:eb:ac:43:a2:87:cc:af:ba:13:
         41:81:54:3d:e8:f7:6e:5b:4c:ac:f8:43:d6:c4:f8:5e:77:6c:
         b5:61:94:ff:7f:64:01:f5:97:17:2e:7e:a0:7e:a5:e1:74:25:
         8b:66:6e:7e:8d:fd:20:67:72:a5:71:3f:40:d4:0a:a0:b4:ee:
         57:14:13:9f:0b:20:ec:0e:83:fc:12:23:dd:7d:0c:1f:2c:a9:
         c9:b9:52:17:67:9f:05:17:6a:c3:c3:7d:dc:8e:8b:8e:97:c6:
         85:4a:7f:16:cb:ef:77:5d:c3:9c:16:62:b5:df:62:34:76:fd:
         fd:57:ec:3e:89:94:ec:e9:80:e9:47:91:c6:1f:fb:0d:5b:17:
         95:95:08:69:e3:dc:99:7a:75:00:1d:29:90:19:bc:25:ca:96:
         a3:12:b6:0f:b9:ff:4a:8c:11:54:18:80:44:da:72:4d:e6:9f:
         b7:14:ae:e2:d8:ac:f3:63:66:dc:13:96:1c:c2:87:57:ac:0a:
         da:8a:8a:5e:04:20:6a:51:4d:58:95:76:00:d2:67:c3:92:84:
         e1:3d:72:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:58:31 2026 by rpki-client