Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/2c9c7c88-42e4-32a5-9c8d-f2cea4c4b5c8.roa
File:                     2c9c7c88-42e4-32a5-9c8d-f2cea4c4b5c8.roa (raw, json)
Hash identifier:          c6SQkNLc7rLBPG1VA6iael41sZKAuvXiuZ/y6N0hkRk=
Subject key identifier:   31:3D:CE:A1:1C:92:91:CD:2E:88:44:3D:82:4B:CC:4E:5F:E8:13:BC
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F4328584F4C3D45F8FF80A1D41D747300
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/2c9c7c88-42e4-32a5-9c8d-f2cea4c4b5c8.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     13335
IP address blocks:        169.196.72.0/24 maxlen: 24
                          169.196.73.0/24 maxlen: 24
                          169.196.76.0/24 maxlen: 24
                          169.196.77.0/24 maxlen: 24
                          169.196.78.0/24 maxlen: 24
                          169.196.79.0/24 maxlen: 24
                          169.196.198.0/24 maxlen: 24
                          169.196.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:45:f8:ff:80:a1:d4:1d:74:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=e0aacbf3-36f6-4176-8882-fce76ecfaa2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ee:bd:36:1d:fe:6c:e3:e4:99:f2:55:3c:d0:
                    55:e1:08:57:c9:af:65:d4:fa:e7:5b:32:0e:ad:e9:
                    6d:2a:46:ac:6d:35:a4:bf:59:3a:bb:fe:39:2a:1d:
                    67:e1:91:a2:34:78:b6:95:d3:e2:fe:69:b5:1f:2e:
                    56:f4:48:57:40:38:2f:7c:a8:8f:d3:20:f9:e6:5f:
                    54:9b:fe:28:2f:8d:82:6e:f5:e9:5d:f2:5e:1b:11:
                    2f:50:77:07:4c:84:6c:34:cc:d0:87:36:88:03:51:
                    94:5b:bf:8c:de:d0:3f:30:c8:e9:c5:ed:a3:b7:38:
                    65:07:79:5a:30:b2:f9:ca:5e:5b:d8:56:06:05:9b:
                    25:71:b3:1b:05:3f:50:03:bb:5b:7d:de:51:21:14:
                    f9:ac:15:28:f1:82:ee:7e:be:16:8b:8d:41:51:da:
                    1e:d5:24:d1:28:6a:d7:16:9b:e1:48:a4:e1:11:27:
                    7c:c3:28:15:47:72:21:71:0d:01:cd:2f:8f:58:48:
                    ad:85:ec:c7:29:1d:e9:d6:f7:51:07:ab:46:3e:8c:
                    f4:31:55:b4:a0:5a:c7:2b:ed:ae:b8:97:b0:8a:35:
                    99:8a:ed:5e:3c:00:54:05:0b:01:01:c4:29:04:a9:
                    ce:d4:2a:27:20:ff:da:f9:f9:79:84:0a:44:8b:36:
                    bf:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3D:CE:A1:1C:92:91:CD:2E:88:44:3D:82:4B:CC:4E:5F:E8:13:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/2c9c7c88-42e4-32a5-9c8d-f2cea4c4b5c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.72.0/23
                  169.196.76.0/22
                  169.196.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:56:d3:8a:88:e2:15:1a:c0:7a:f6:23:a3:31:bd:2c:fa:68:
         4c:d9:29:ab:bf:fb:89:70:05:af:c7:3e:58:b2:26:a3:a6:a8:
         5c:d4:1b:83:6b:44:85:53:e3:10:cc:ea:c6:e6:ef:09:60:43:
         05:85:26:da:cb:f8:73:ca:dc:60:56:dc:7d:c6:45:bb:10:2d:
         e4:af:77:ba:e1:7d:b8:9d:06:09:da:f9:8b:34:a3:c7:7e:fb:
         e6:e9:c3:43:c2:3f:f2:e4:63:d8:ec:15:f8:14:c6:e4:d9:6f:
         b3:7f:ff:69:d9:39:b2:f2:2b:98:f9:b0:4c:7d:27:ec:2e:15:
         e1:b1:1f:db:ce:34:39:e9:1b:ad:60:b9:63:cd:a8:88:c6:cc:
         18:5b:e6:3c:f9:a1:07:f3:75:f6:a7:4e:83:7e:22:3c:c3:44:
         ce:59:e9:ec:32:c6:3a:83:22:5d:e0:fb:1b:46:d3:47:93:49:
         10:92:3f:a8:28:aa:8a:92:81:5c:3f:a5:5a:9c:70:23:7e:7c:
         fe:91:52:4f:20:e3:cb:bb:06:c0:68:a2:69:2b:fa:c7:72:b3:
         10:9c:27:b1:cc:9e:84:79:10:53:92:31:80:02:9b:b8:a9:c8:
         6a:7e:39:25:7c:0d:ee:56:16:98:97:95:99:cf:00:51:f0:e1:
         cf:f2:61:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 01:42:11 2026 by rpki-client