Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/8378b3c9-0a0b-3d3e-b6a2-5eddccaeeb51.roa
File:                     8378b3c9-0a0b-3d3e-b6a2-5eddccaeeb51.roa (raw, json)
Hash identifier:          6mChRHsABM9sCPvAqTcLTlPGycViRdOpp6d2CvuiRz4=
Subject key identifier:   C1:F3:88:F0:78:87:55:D5:E6:69:00:85:77:E8:4D:F9:70:3A:23:8E
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F4328584D571FB136E881115F75898040
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/8378b3c9-0a0b-3d3e-b6a2-5eddccaeeb51.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     13335
IP address blocks:        169.196.18.0/24 maxlen: 24
                          169.196.19.0/24 maxlen: 24
                          169.196.96.0/24 maxlen: 24
                          169.196.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:b1:36:e8:81:11:5f:75:89:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=55c313b4-fc22-49e2-9077-d1d523a936f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:24:1d:f0:c3:96:8b:02:c6:5c:1e:2d:44:74:
                    c6:d5:9f:ec:a6:f6:89:21:b1:de:24:8a:40:ea:46:
                    21:74:dc:be:be:8c:d4:c9:ae:76:f1:b6:de:fa:98:
                    bf:5b:14:eb:8a:98:19:1f:fe:20:94:8e:4a:bf:fd:
                    08:e2:9c:a0:35:d2:c4:a9:ff:c2:ae:da:3e:93:37:
                    6f:29:f1:0b:53:2e:96:55:20:17:29:1a:80:5a:62:
                    be:95:a0:55:3e:a6:6f:f3:f8:e9:64:f5:21:31:3a:
                    55:8a:96:a7:d4:e3:9f:36:b5:70:07:9e:61:9b:85:
                    73:b6:3e:bf:0c:23:a7:9f:de:10:c3:89:3d:36:c6:
                    47:9c:da:6e:a3:60:56:fd:72:9d:9a:0e:2f:17:78:
                    6b:51:0a:ec:5c:7e:ea:29:9c:f5:a4:32:b8:e8:0e:
                    81:5e:05:09:18:e1:78:34:99:47:37:c3:38:87:31:
                    d1:59:0e:e4:31:ae:11:f6:70:b9:cb:43:56:a2:05:
                    a7:af:be:6f:19:a3:08:67:ca:c5:84:7d:82:04:6e:
                    be:22:32:09:96:a1:a6:4a:b8:54:65:ad:56:0e:92:
                    c3:2f:39:4c:26:a2:20:ba:f2:a2:cf:fe:9c:67:b3:
                    aa:93:2e:a7:66:73:8f:27:0c:54:31:81:9c:d9:6f:
                    1a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F3:88:F0:78:87:55:D5:E6:69:00:85:77:E8:4D:F9:70:3A:23:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/8378b3c9-0a0b-3d3e-b6a2-5eddccaeeb51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.18.0/23
                  169.196.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:7c:cc:47:32:32:4d:98:dc:ef:52:4d:1d:ec:d9:7b:ad:f2:
         83:8c:79:bd:0f:61:99:75:6c:38:a4:9c:b6:9e:43:06:15:36:
         74:f7:2c:74:a6:1e:64:e7:23:23:ab:a0:5b:8f:14:92:a8:ba:
         05:18:fa:17:99:ab:1f:03:84:89:84:38:95:04:97:e4:8e:fb:
         9b:c9:bd:31:5d:7a:65:b7:77:a8:7d:63:d4:b3:57:7c:eb:c1:
         ef:bb:2e:6a:24:76:42:2d:a6:9d:bc:a8:77:63:21:75:17:75:
         c6:b4:04:1c:05:0c:a3:75:78:6a:54:19:60:68:bb:de:ca:4a:
         70:65:53:6d:f7:df:fd:28:4f:e9:ca:ca:70:09:a3:7c:ca:0a:
         40:b9:0a:e9:ae:10:ec:2d:d6:89:8d:14:42:35:3d:0b:dc:7f:
         fc:a3:a3:77:77:c7:da:16:48:4f:20:fc:cc:f0:6e:1f:41:ae:
         7f:00:48:6d:0a:6b:27:e4:0e:a3:78:df:58:d5:14:f0:d1:31:
         3c:2a:b8:00:e2:b6:36:43:b0:8c:4b:e1:22:73:76:23:e4:a0:
         99:b0:b4:83:76:6f:c9:ef:ed:23:11:88:35:bf:44:87:54:8b:
         0a:bd:e7:9f:d1:26:83:8d:26:56:f9:07:90:74:db:14:9b:9a:
         0f:db:ff:63
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1XH7E26IERX3WJgEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTczZWUxYmItYmI2Yi00Y2M2LWJjYTEtNGMxNjIyZGM0
ZWRiMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk
NTVjMzEzYjQtZmMyMi00OWUyLTkwNzctZDFkNTIzYTkzNmY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCQd8MOWiwLGXB4tRHTG1Z/spvaJIbHeJIpA
6kYhdNy+vozUya528bbe+pi/WxTripgZH/4glI5Kv/0I4pygNdLEqf/Crto+kzdv
KfELUy6WVSAXKRqAWmK+laBVPqZv8/jpZPUhMTpVipan1OOfNrVwB55hm4Vztj6/
DCOnn94Qw4k9NsZHnNpuo2BW/XKdmg4vF3hrUQrsXH7qKZz1pDK46A6BXgUJGOF4
NJlHN8M4hzHRWQ7kMa4R9nC5y0NWogWnr75vGaMIZ8rFhH2CBG6+IjIJlqGmSrhU
Za1WDpLDLzlMJqIguvKiz/6cZ7Oqky6nZnOPJwxUMYGc2W8aHQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFMHziPB4h1XV5mkAhXfoTflwOiOOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NzNl
ZTFiYi1iYjZiLTRjYzYtYmNhMS00YzE2MjJkYzRlZGIvODM3OGIzYzktMGEwYi0z
ZDNlLWI2YTItNWVkZGNjYWVlYjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTczZWUxYmItYmI2Yi00Y2M2LWJj
YTEtNGMxNjIyZGM0ZWRiLzU3M2VlMWJiLWJiNmItNGNjNi1iY2ExLTRjMTYyMmRj
NGVkYi5jcmwwHwYDVR0jBBgwFoAU5bcwnII1o67jk7VvPhVOUUksQ+AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NzNlZTFiYi1iYjZiLTRjYzYtYmNhMS00YzE2
MjJkYzRlZGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBqcQSAwQB
qcRgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAH58zEcyMk2Y3O9STR3s2Xut8oOMeb0PYZl1bDiknLaeQwYV
NnT3LHSmHmTnIyOroFuPFJKougUY+heZqx8DhImEOJUEl+SO+5vJvTFdemW3d6h9
Y9SzV3zrwe+7LmokdkItpp28qHdjIXUXdca0BBwFDKN1eGpUGWBou97KSnBlU233
3/0oT+nKynAJo3zKCkC5CumuEOwt1omNFEI1PQvcf/yjo3d3x9oWSE8g/Mzwbh9B
rn8ASG0KayfkDqN431jVFPDRMTwquADitjZDsIxL4SJzdiPkoJmwtIN2b8nv7SMR
iDW/RIdUiwq955/RJoONJlb5B5B02xSbmg/b/2M=
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:01:43 2026 by rpki-client