Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/cf657c5a-6c75-3eda-b5d2-714f5ebee426.roa
File:                     cf657c5a-6c75-3eda-b5d2-714f5ebee426.roa (raw, json)
Hash identifier:          9Dn3srvTtBkzFps2Qo1YyuACvrQZUe9krDF5wA1UBwo=
Subject key identifier:   46:4C:24:BF:08:10:36:55:EE:DA:41:7C:58:2C:C0:E0:E9:B5:32:D1
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F4328584EA8EC3F32659D90A98406AE20
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/cf657c5a-6c75-3eda-b5d2-714f5ebee426.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     13335
IP address blocks:        169.196.66.0/24 maxlen: 24
                          169.196.67.0/24 maxlen: 24
                          169.196.68.0/24 maxlen: 24
                          169.196.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:3f:32:65:9d:90:a9:84:06:ae:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=195055bd-7c28-4c8a-97bb-1fd9c71e8b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ef:93:93:21:85:74:7b:50:57:60:5d:11:72:
                    ed:08:8b:d3:ce:39:91:95:af:f2:84:f7:79:d2:c5:
                    77:7b:c8:77:a9:10:22:51:35:8c:2f:88:7d:b1:a6:
                    81:02:fe:f3:85:c4:aa:ac:82:e0:55:6a:e7:d2:25:
                    a0:dd:ec:31:f8:3d:9c:b5:56:b1:47:10:ba:c3:c3:
                    26:a0:12:0c:65:f4:ae:45:a2:25:fa:fd:5f:fe:76:
                    38:c0:65:15:34:69:f6:3a:25:20:f8:91:78:3e:59:
                    fe:5b:d0:2b:d0:f3:73:f2:87:6d:37:e2:c6:a3:16:
                    5c:07:48:f8:07:3c:28:89:7d:4d:75:62:0f:de:71:
                    bc:0f:55:b8:19:a4:29:51:f9:02:29:9d:37:c2:dd:
                    05:dd:4c:be:c6:db:3e:89:97:02:af:8b:55:33:29:
                    ff:7a:9b:d7:02:cc:fa:01:e5:3f:8c:dd:bf:d0:5c:
                    c9:5d:86:22:a8:17:60:04:fa:8e:f9:67:5d:80:d1:
                    5c:ad:c4:1b:10:29:d6:56:87:6f:f0:9b:23:62:e2:
                    45:e6:7d:c5:50:5b:2c:ad:f7:7a:2f:11:75:7f:91:
                    9c:d7:cd:90:4e:3f:76:a7:e4:da:ae:38:c2:c6:1d:
                    0a:26:69:61:8d:f3:d7:78:a8:8d:c8:b5:81:4f:0d:
                    c9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:4C:24:BF:08:10:36:55:EE:DA:41:7C:58:2C:C0:E0:E9:B5:32:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/cf657c5a-6c75-3eda-b5d2-714f5ebee426.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.66.0-169.196.69.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:68:b9:35:8a:f0:55:14:05:24:5d:8d:40:34:9d:eb:b8:36:
         54:23:8f:65:e6:5e:66:9a:e3:e4:10:14:bf:a5:d4:45:12:a3:
         bb:1d:7e:84:76:5a:89:c6:18:4b:07:83:bb:04:38:21:35:83:
         93:da:c9:ab:31:ea:31:81:31:ba:23:02:9c:5c:1b:1d:5e:62:
         c2:07:eb:65:d3:09:9b:b4:78:96:bc:cb:68:fc:ac:e3:3e:38:
         28:6a:58:52:51:47:58:41:33:7b:6b:af:da:91:81:4b:92:30:
         cd:82:aa:59:dd:ea:22:bb:b9:d2:a4:53:79:c3:38:c1:4f:bf:
         47:c0:0c:12:49:15:1e:79:a9:c8:5e:cf:ab:f8:c7:81:27:29:
         5a:40:c2:dd:a4:b7:7d:9b:fb:a8:3c:11:2b:e3:15:fc:4a:1b:
         50:cb:78:18:a7:db:b3:69:6e:5b:d6:a8:c5:82:3a:e5:02:e7:
         d8:71:2b:f0:a9:ac:78:d3:bb:a8:15:5b:5b:24:3b:e4:01:6e:
         f7:65:c1:9c:0e:26:b7:01:46:53:27:7a:bd:59:dc:c4:f4:3e:
         40:a1:74:a9:85:17:0c:06:96:f2:ab:d6:88:a8:6d:9b:80:db:
         61:ae:9c:9b:e5:c8:16:dd:ab:fe:bc:9c:10:e6:b1:3b:96:52:
         ca:a4:7b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:21:04 2026 by rpki-client