Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/0f338f9f-8d80-3501-ac29-5563e567deab.roa
File:                     0f338f9f-8d80-3501-ac29-5563e567deab.roa (raw, json)
Hash identifier:          BeA/a0tKAhqzGB5rmwAiE8OiN+3yVtRx6VsxyIGnTaU=
Subject key identifier:   52:DF:CD:D6:73:9B:49:BF:21:60:11:5E:D1:30:5A:D1:5B:6F:CF:F8
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F4328584EA79A27F30E227D7E87BDDF00
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/0f338f9f-8d80-3501-ac29-5563e567deab.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     198949
IP address blocks:        169.196.128.0/19 maxlen: 19
                          169.196.160.0/20 maxlen: 20
                          169.196.176.0/20 maxlen: 20
                          169.196.220.0/23 maxlen: 23
                          169.196.222.0/23 maxlen: 23
                          169.196.224.0/20 maxlen: 20
                          169.196.240.0/21 maxlen: 21
                          169.196.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:27:f3:0e:22:7d:7e:87:bd:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=38eb0fd3-bed1-4d64-b34b-cba47a01a9c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f8:1e:cd:22:37:3a:9d:c0:65:fe:2c:8b:af:
                    f2:95:01:fa:c8:4a:7b:08:24:c5:31:d5:c4:70:ad:
                    d8:00:00:13:ea:a5:e1:54:0f:71:a7:98:b9:36:f0:
                    cb:89:1a:28:1b:7f:13:94:cf:1b:e0:83:bb:39:38:
                    43:a5:2d:b3:d7:b3:11:3f:3e:4e:00:d3:20:a9:0b:
                    f6:92:47:e5:5d:51:42:a2:81:8b:18:fe:92:0c:33:
                    7d:a8:e2:bb:32:b2:39:b8:f0:12:ba:ef:46:d4:d8:
                    0d:b8:23:84:eb:e4:93:25:0b:d2:69:62:ad:79:fe:
                    20:1f:93:b4:e1:b6:1b:56:ed:fc:65:26:c8:fd:b3:
                    84:47:8e:35:5d:31:85:06:cc:37:81:8c:78:4f:9a:
                    b5:15:a7:1d:27:d0:d2:3c:94:fd:48:86:d8:67:d1:
                    43:ac:d1:5c:07:fd:dd:22:3c:c2:00:c2:3c:8d:3a:
                    14:9c:be:da:4f:9c:e6:fe:61:65:d8:f8:56:0e:8d:
                    12:01:d5:f7:14:fa:98:ae:5b:f8:7b:98:ae:53:f7:
                    44:2e:d8:f8:ab:56:d6:d1:93:b8:f7:a2:bf:b2:c6:
                    6e:18:05:b6:58:f4:4b:6c:52:33:4f:ed:d2:42:3a:
                    d2:89:04:23:95:52:02:11:92:84:1f:50:99:60:6d:
                    f6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:DF:CD:D6:73:9B:49:BF:21:60:11:5E:D1:30:5A:D1:5B:6F:CF:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/0f338f9f-8d80-3501-ac29-5563e567deab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.128.0/18
                  169.196.220.0-169.196.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:52:23:35:11:61:e0:a1:3e:b8:29:92:aa:1b:c1:b1:b3:63:
         86:23:be:10:79:83:d6:33:2a:7b:dd:ad:64:f4:d2:05:fb:f0:
         0a:d5:63:0f:2b:9d:b6:9d:18:88:4f:54:f6:7b:a1:fa:75:4d:
         28:27:82:ac:ef:7f:da:b1:46:34:23:1d:f3:a3:85:d9:a2:1b:
         2a:ec:32:3c:8b:e0:72:9f:4c:00:e3:fd:bb:d4:c1:7f:0a:b6:
         de:1a:6d:86:6e:08:3e:06:d7:35:c5:05:c8:e0:49:fe:8e:44:
         9c:4e:1c:c8:99:01:bf:df:f7:3e:50:2a:5a:a6:1a:96:05:2e:
         73:15:e2:ee:7f:37:7c:15:68:9c:1b:b7:78:23:3f:38:5d:5d:
         95:ff:7f:01:7c:b7:c5:07:3c:e6:0f:28:22:0f:7d:52:6d:ec:
         63:a0:c6:1d:9e:e0:43:f0:10:bc:de:14:bc:d5:ce:f7:79:9c:
         b6:7a:7e:9f:82:77:39:86:fd:7d:67:ef:e1:d9:b5:dc:a9:d1:
         c1:0c:f9:ae:97:67:48:2a:63:9c:ef:25:7f:b0:1e:4f:a1:02:
         fe:fc:67:83:72:f7:9b:89:9e:ee:d7:92:9c:97:4e:c4:eb:f2:
         04:e3:c5:5c:3c:57:43:fe:23:9d:54:d5:a8:c3:d1:45:5a:bc:
         53:a2:68:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:01:23 2026 by rpki-client