Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/88e832cf-eff3-30a7-a708-522dcbcbe4a2.roa
File:                     88e832cf-eff3-30a7-a708-522dcbcbe4a2.roa (raw, json)
Hash identifier:          2n2j/NFxQgO5mJ5xCglwrmB2Gb22WMaGeqyO8AbXh9A=
Subject key identifier:   1C:D5:45:3B:A1:6D:9C:F9:74:4B:81:12:01:34:BF:A5:8F:EB:6F:9E
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F4328584EA8EC3BA4C1B0ABC5017D7200
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/88e832cf-eff3-30a7-a708-522dcbcbe4a2.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     13335
IP address blocks:        169.196.48.0/24 maxlen: 24
                          169.196.49.0/24 maxlen: 24
                          169.196.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:3b:a4:c1:b0:ab:c5:01:7d:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=208436db-b792-49fe-a339-f2a128bad934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d0:51:5b:aa:e8:ca:64:fc:58:83:38:f2:a0:
                    d2:75:5c:e5:84:9a:0e:14:73:2d:96:e0:eb:dd:21:
                    bc:5b:38:42:b6:dd:cc:1c:aa:16:c3:c5:52:75:99:
                    9a:c2:78:62:8c:b0:9a:42:15:d5:2e:82:5d:7f:0a:
                    22:eb:a1:4c:12:69:63:9e:af:e1:bf:50:ed:75:6e:
                    55:db:a9:15:ed:98:5a:df:23:87:e4:c3:62:91:99:
                    81:29:a1:6c:28:d5:b8:63:f5:31:e1:eb:00:1a:f2:
                    bf:54:e0:d6:3a:77:97:32:6e:06:3e:4b:f2:c4:f5:
                    04:b2:ff:c5:1f:bc:04:7d:7a:89:20:93:5a:0a:a1:
                    73:3a:76:c7:db:b5:d2:54:1d:71:f4:93:5e:25:82:
                    fe:5c:4a:1a:80:f8:65:d2:36:23:30:d8:68:82:2e:
                    42:6b:c3:e6:c8:80:ff:e5:92:ec:2c:3c:fd:22:d2:
                    3e:1d:83:bb:94:5f:5e:ea:44:90:43:e6:3a:b6:5d:
                    cb:8c:88:22:c1:cd:42:f7:a1:09:5b:7f:0f:fe:93:
                    30:48:a2:7b:6b:f4:3d:9f:bb:42:cc:71:4a:f3:b7:
                    f3:88:25:f1:b0:f4:19:95:1a:2a:ce:c6:4a:f8:84:
                    38:f0:58:3f:a9:54:d7:e0:84:66:dd:5e:b4:24:51:
                    d4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D5:45:3B:A1:6D:9C:F9:74:4B:81:12:01:34:BF:A5:8F:EB:6F:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/88e832cf-eff3-30a7-a708-522dcbcbe4a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.48.0/23
                  169.196.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:66:a9:20:bb:fa:ab:b7:aa:6d:61:59:ca:f7:99:e2:ff:9b:
         ca:89:59:78:d1:57:c6:4f:16:05:56:e1:d2:03:ac:aa:2c:37:
         8c:8d:d6:97:22:bd:9d:b0:77:fd:f0:46:18:fe:65:6a:16:d5:
         df:35:78:bd:1e:7a:c3:05:42:3c:7f:02:7a:eb:08:e7:c3:db:
         2e:c0:5e:e0:a0:52:c4:79:bf:35:db:a2:a9:4c:aa:a1:91:0e:
         f8:93:a9:81:f8:af:93:6e:5c:4d:2f:5d:89:9d:02:0b:f3:cf:
         2f:a3:4f:26:ac:d4:a7:77:6c:25:7b:70:13:1d:6e:ec:97:38:
         71:d1:eb:65:2d:82:14:93:c4:80:3d:8e:3e:70:a5:97:ee:9a:
         0d:40:fc:2a:a8:78:d1:57:5f:60:a1:44:3b:84:4c:e0:74:e5:
         18:fa:21:10:79:6d:d4:dd:f5:cb:9b:4d:5a:e7:7f:8f:07:51:
         7b:6d:85:17:85:67:0e:05:84:fb:f9:5e:60:42:4d:5e:4d:dc:
         f7:6e:a7:be:db:43:08:84:09:38:87:27:88:72:12:bf:a5:2f:
         ee:88:65:34:04:bf:77:cd:8d:ff:37:71:95:40:d8:70:c6:a8:
         8c:e4:22:91:74:44:bc:03:2c:bb:a6:a7:46:cd:be:b1:d0:bf:
         7a:af:c7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:15:31 2026 by rpki-client