Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/0f338f9f-8d80-3501-ac29-5563e567deab.roa
File:                     0f338f9f-8d80-3501-ac29-5563e567deab.roa (raw, json)
Hash identifier:          KvLbedqKrGvt67C+QWBDDD7KeloJvW99GgsnX62twvE=
Subject key identifier:   CF:FB:34:88:95:F7:D6:B5:2F:61:33:28:87:95:E5:17:FD:53:98:B8
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F4328584E0005D2BB597E1B5891DDDCF0
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/0f338f9f-8d80-3501-ac29-5563e567deab.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     198949
IP address blocks:        169.196.128.0/19 maxlen: 19
                          169.196.160.0/20 maxlen: 20
                          169.196.176.0/20 maxlen: 20
                          169.196.220.0/23 maxlen: 23
                          169.196.222.0/23 maxlen: 23
                          169.196.224.0/20 maxlen: 20
                          169.196.240.0/21 maxlen: 21
                          169.196.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 01 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:d2:bb:59:7e:1b:58:91:dd:dc:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=33e3279d-78fe-4b8e-b5d6-479bf9b8d25c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c3:2a:5c:b9:c7:cb:8b:90:46:4f:0a:d7:c9:
                    e6:c2:ca:dc:42:68:6c:da:4a:13:ff:17:9e:c1:e0:
                    b9:49:2a:72:c9:76:64:ec:7c:b9:4d:b8:66:4e:15:
                    24:ac:d9:c8:6d:92:c0:8e:84:95:b2:b4:93:ca:ba:
                    07:95:d8:0d:f1:24:01:43:f5:4d:ef:e4:95:15:93:
                    b7:39:22:8e:cc:43:03:60:99:03:53:8f:96:55:15:
                    f3:13:93:1d:61:08:2e:03:9b:d9:42:bc:ef:44:08:
                    c2:24:20:23:c1:33:a1:fd:08:ae:61:f0:34:b5:41:
                    53:09:4c:b1:c5:52:2c:fb:af:23:c6:08:1d:c2:40:
                    77:ae:bf:02:46:53:97:ca:29:5d:e3:93:63:a4:c9:
                    16:95:20:17:8d:73:28:c6:a8:98:30:ba:88:b7:e3:
                    0f:70:d4:81:4b:a6:bf:e8:9d:39:f5:93:57:13:48:
                    71:25:35:10:26:ef:42:77:ad:bf:4a:97:5d:16:42:
                    cb:cd:e4:35:90:18:af:ac:fb:d8:9f:5d:bf:b5:64:
                    ec:9f:04:d4:42:34:eb:fc:d4:16:11:34:3e:fa:0c:
                    54:c5:6a:cf:91:97:00:f3:c0:9a:f0:75:34:d5:ba:
                    e3:d1:87:87:5b:e2:c6:e7:fb:fd:5e:c7:dc:52:4f:
                    65:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FB:34:88:95:F7:D6:B5:2F:61:33:28:87:95:E5:17:FD:53:98:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/0f338f9f-8d80-3501-ac29-5563e567deab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.128.0/18
                  169.196.220.0-169.196.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:55:e2:89:bd:69:44:67:1f:6f:ef:ed:45:c2:00:88:bf:fa:
         53:cc:82:85:b8:33:12:a6:d2:20:0f:67:3f:ba:df:01:93:40:
         e1:be:e6:08:91:46:1e:69:d5:b7:4a:5b:8a:6f:23:6f:17:ac:
         e4:6d:1d:24:1f:97:50:7d:f0:31:d9:8f:9a:0b:b8:c0:d9:a0:
         f4:f5:5e:e6:25:03:40:9f:d2:ad:a5:69:fb:ec:3e:e6:38:6f:
         50:5f:6f:e9:d0:9f:a4:6c:f1:58:25:d6:b6:c1:f9:8a:8f:7c:
         3d:b2:f2:22:2a:0f:7e:90:43:1c:9c:43:20:40:60:6e:62:25:
         7c:92:df:b4:42:a0:f3:af:8b:e2:51:cb:76:14:6a:a8:4d:14:
         2d:86:fb:0b:ad:47:db:09:47:0c:d4:a7:75:77:ad:d0:80:55:
         d8:e8:5c:d8:5e:62:2b:60:52:bf:cb:a6:45:4e:80:58:34:da:
         fb:c5:47:71:58:61:a8:00:69:ba:9c:38:4c:2a:17:56:8e:bb:
         a1:15:f0:25:61:38:3c:94:97:69:00:9a:12:5f:90:8b:14:ba:
         27:05:4e:b4:c9:70:22:21:fd:e6:bd:50:5e:e2:ec:c2:4e:92:
         70:0a:81:59:58:45:dc:f4:33:cd:f7:ad:be:c0:24:fd:76:67:
         b7:a3:7c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 14:58:08 2026 by rpki-client