Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/09db520b-31cf-3c16-9501-2fe36da89b1f.roa
File:                     09db520b-31cf-3c16-9501-2fe36da89b1f.roa (raw, json)
Hash identifier:          ZwEK00uNSfvbAFLPBmCmmw7d5VtMU69GLSKpLEFbRzw=
Subject key identifier:   BE:71:1A:CA:8E:4D:38:85:25:08:54:14:AA:CC:B2:3B:3C:89:4B:00
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F4328584E37647682B5F97495E58C3E00
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/09db520b-31cf-3c16-9501-2fe36da89b1f.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        169.196.0.0/24 maxlen: 24
                          169.196.1.0/24 maxlen: 24
                          169.196.2.0/24 maxlen: 24
                          169.196.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:76:82:b5:f9:74:95:e5:8c:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=8f7e3fa4-47ec-461d-a388-d8f949aea284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4d:fd:22:a4:0d:f0:e5:d8:56:90:e6:50:8f:
                    e1:ba:0c:62:91:0d:52:5f:83:3d:4e:b9:7b:40:b7:
                    87:44:bf:2c:06:ea:d4:bd:14:f1:cb:b3:2f:88:57:
                    30:df:67:12:c9:b4:1d:8d:be:46:0e:91:fd:53:68:
                    6a:a1:c1:4a:68:7a:54:6b:0a:fd:e5:b4:09:8d:21:
                    e4:8c:6f:36:5b:7b:48:fe:de:5c:c1:b9:6f:41:75:
                    2b:39:4d:84:2d:44:fe:db:e0:c6:fb:23:b3:11:dd:
                    e2:c5:85:ab:31:18:20:14:3f:8d:3d:de:61:9e:eb:
                    ad:ae:74:6e:27:71:f4:80:1b:19:13:b8:0f:78:c8:
                    cf:c4:a7:2f:9e:1d:a7:17:9a:12:0b:96:19:65:4e:
                    fa:55:19:53:62:e8:dc:24:a5:3d:ce:f5:bc:1d:58:
                    af:a4:a1:92:95:7b:a8:b4:38:1d:21:3c:31:a3:f3:
                    10:a2:87:dc:b2:30:da:97:c8:03:3b:81:1a:4b:2f:
                    a9:6e:88:61:0d:bf:88:8a:74:17:ce:18:18:19:14:
                    a2:ca:f4:75:72:80:d4:1c:e2:59:aa:19:87:6a:1a:
                    13:05:13:2b:36:c7:70:e7:cf:1e:b2:59:dd:ab:8e:
                    46:8b:c7:28:e4:d7:c9:bb:0f:7e:36:28:ed:5b:1b:
                    cc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:71:1A:CA:8E:4D:38:85:25:08:54:14:AA:CC:B2:3B:3C:89:4B:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/09db520b-31cf-3c16-9501-2fe36da89b1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:40:37:a0:5b:4e:95:5f:ee:5a:ea:f3:61:e9:53:a8:9f:ec:
         2a:7b:73:8b:35:59:4d:72:b6:ec:c9:2b:72:c6:49:f8:07:12:
         39:f1:2a:a7:02:0e:d7:7b:22:11:e4:0c:cd:c0:e5:f0:56:76:
         04:f9:a6:e7:8f:16:ca:74:16:42:0a:c1:4b:b1:c5:8b:03:61:
         3d:f3:2e:f0:bd:06:8f:ec:a3:a4:cc:25:a3:b5:28:d2:fb:af:
         cc:ed:98:c9:51:97:f3:7a:87:79:4b:c8:2f:85:5c:b7:a9:17:
         b5:d7:d0:8b:6a:e6:5b:ea:7e:6c:48:ce:fe:06:e6:69:bb:eb:
         f9:70:a8:c7:25:8a:0e:30:4b:a2:5e:21:aa:d0:7e:08:ce:db:
         97:69:61:b6:b1:d6:2a:49:0d:95:2a:2f:7c:bc:a1:20:1d:c6:
         59:9c:f2:58:06:45:16:e9:b7:24:2d:c1:d7:af:0d:a0:67:1e:
         b9:c2:08:1e:69:3d:d5:0b:37:62:5c:08:06:de:c6:29:20:e1:
         64:4f:23:cb:28:08:a6:a5:90:c4:16:6e:cb:8f:34:d6:6c:52:
         01:12:3d:f2:53:f8:1e:af:13:d9:b8:84:5f:45:fb:b1:61:57:
         98:41:f1:16:cb:ce:0b:c4:58:68:b0:a8:7e:cb:f8:38:c1:e7:
         74:d2:8f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:46:04 2026 by rpki-client