Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/6f722a4e-62ef-394c-80eb-91d1908d71b9.roa
File:                     6f722a4e-62ef-394c-80eb-91d1908d71b9.roa (raw, json)
Hash identifier:          96cOlSJ8k7n4QTbDr6L1g92x+BHfSbk49nfbFkwQg/8=
Subject key identifier:   77:E5:9B:F8:1A:39:36:AA:E6:13:54:C1:4F:D0:96:72:6B:46:BD:F5
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F4328584E0005D2ACBC9629B8F40F4E40
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/6f722a4e-62ef-394c-80eb-91d1908d71b9.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     20249
IP address blocks:        169.196.119.0/24 maxlen: 24
                          169.196.128.0/18 maxlen: 18
                          169.196.128.0/19 maxlen: 19
                          169.196.160.0/19 maxlen: 19
                          169.196.160.0/20 maxlen: 20
                          169.196.176.0/20 maxlen: 20
                          169.196.219.0/24 maxlen: 24
                          169.196.220.0/22 maxlen: 22
                          169.196.220.0/23 maxlen: 23
                          169.196.222.0/23 maxlen: 23
                          169.196.224.0/19 maxlen: 19
                          169.196.224.0/20 maxlen: 20
                          169.196.240.0/20 maxlen: 20
                          169.196.240.0/21 maxlen: 21
                          169.196.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 01 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:d2:ac:bc:96:29:b8:f4:0f:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=d4685441-5967-4052-81e0-3aba47b44414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:da:9d:19:ac:51:c8:32:b3:11:bb:69:7d:10:
                    53:19:c0:e5:e6:59:6e:18:c4:85:25:5d:68:51:9e:
                    52:dd:f8:8c:b7:f8:57:b0:44:d6:0f:01:65:56:67:
                    0e:49:01:c6:2e:f5:e4:0c:d9:64:ea:4b:32:ed:c5:
                    20:29:89:76:f5:e6:d6:14:86:90:be:70:e5:00:90:
                    da:13:64:5d:51:a2:53:e2:c5:69:df:b2:50:51:f2:
                    27:58:19:ab:78:7f:29:a8:8a:66:e4:24:b1:11:b3:
                    54:41:ff:b2:b9:9f:cb:b7:98:6e:e4:74:cd:31:47:
                    8a:82:e1:6b:78:22:9c:14:89:fb:f8:64:37:f7:14:
                    a2:ae:e9:df:6a:a0:36:dd:80:e5:86:9a:97:72:2c:
                    8e:65:a5:58:33:68:20:b7:c5:84:68:f8:cc:1a:c4:
                    fa:fa:a5:d2:c2:67:c5:f2:18:a7:64:c5:7d:8d:ec:
                    2c:08:25:e0:ef:fc:a4:6d:c9:c6:ca:ca:5d:62:8b:
                    9e:27:7b:41:3c:93:fb:e7:1e:c5:5b:df:f3:86:ac:
                    1d:35:41:bd:34:a5:58:ca:b6:7e:c6:13:93:9d:22:
                    d1:84:c9:32:ab:e7:22:9f:f4:6c:e1:9e:f8:2d:60:
                    5b:fa:31:d9:01:34:d8:63:80:5b:3e:87:7b:50:ce:
                    c0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E5:9B:F8:1A:39:36:AA:E6:13:54:C1:4F:D0:96:72:6B:46:BD:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/6f722a4e-62ef-394c-80eb-91d1908d71b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.119.0/24
                  169.196.128.0/18
                  169.196.219.0-169.196.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:c7:2d:22:8e:54:06:0c:43:13:51:c9:bc:12:da:8c:78:86:
         b0:12:6a:da:dd:98:5f:ed:93:a8:b0:69:52:f7:db:94:1c:96:
         b1:00:b3:b6:5b:e0:8f:62:41:60:4a:00:75:30:f1:6c:6f:b7:
         99:be:21:a7:fb:36:6c:a7:cb:9d:70:a7:d0:f0:66:ee:ed:0b:
         dc:58:6a:b0:c5:28:bc:34:6c:2d:df:aa:63:95:14:86:aa:b9:
         e8:a1:d0:e7:e0:b6:11:00:2c:fb:d1:4d:9c:17:a8:38:3d:0e:
         3d:38:bf:0e:f2:cb:1a:aa:e7:b5:d8:7f:87:f4:5d:c0:b5:dd:
         1f:01:23:50:16:65:5a:3d:b8:0d:56:50:63:4a:cc:48:ef:9b:
         b2:27:d0:6b:ef:83:1f:06:4d:79:ff:91:74:54:e0:6f:19:dc:
         00:5b:bd:b3:23:e3:c9:6c:92:e0:4b:20:df:f1:3b:9d:61:e9:
         c8:3b:6c:cc:1c:05:d8:f3:0f:d8:a7:cc:bc:77:ea:bc:bd:3a:
         c3:f3:a6:fb:5e:47:db:a9:12:15:c1:3f:07:cd:a4:bd:16:68:
         4c:25:f7:48:52:63:f0:ea:f3:d5:a2:e4:8d:7e:2b:95:49:36:
         53:ee:e9:9f:c9:b6:a5:5b:3e:db:f4:ef:a3:e5:49:69:d1:8c:
         ea:e8:55:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 14:57:33 2026 by rpki-client