Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/fdfe3f12-0830-3239-8ff4-4615da8e7d07.roa
File:                     fdfe3f12-0830-3239-8ff4-4615da8e7d07.roa (raw, json)
Hash identifier:          Sm0kEVfO/o89AzKq7sLv+3U6DYm3bG5kfNo9hW1qSvg=
Subject key identifier:   93:2D:39:09:C6:41:CC:7B:86:A9:09:3B:B8:15:60:B2:70:B9:CF:EB
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F4328584E0005D5AC580379B2CA6FEB40
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/fdfe3f12-0830-3239-8ff4-4615da8e7d07.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     20249
IP address blocks:        169.196.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 01 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:d5:ac:58:03:79:b2:ca:6f:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=8b92257d-344a-404c-b342-956ca9cc79ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e1:f1:c8:71:1d:db:7c:84:c2:e5:55:85:54:
                    ef:f9:95:e4:96:53:92:1d:0c:2c:3f:b3:26:40:63:
                    76:8b:45:42:a3:c4:20:78:9a:7e:d7:d8:61:b3:25:
                    1e:4b:39:79:93:53:4d:5c:0d:01:45:4c:68:fd:cb:
                    72:4b:48:75:e4:c7:34:f3:01:8c:ee:5f:0c:36:44:
                    be:8d:f2:57:74:20:58:4c:b5:43:ab:05:60:80:56:
                    f2:41:ef:7b:88:82:4d:7d:45:86:46:42:33:34:8b:
                    e1:7d:a8:73:8e:d9:da:c0:a2:6f:f1:18:e4:85:33:
                    38:e2:eb:6c:07:cb:6d:43:30:e2:72:24:e8:50:28:
                    43:a4:c9:95:1f:58:5a:af:fc:00:70:7c:50:aa:bf:
                    77:34:04:ef:d0:ea:f7:c5:ef:a5:56:0e:8d:d2:a1:
                    92:94:c5:9d:56:fe:f6:78:af:d5:a6:63:31:4b:1b:
                    e9:5c:cb:83:5a:6b:42:53:73:a8:55:05:c0:b0:19:
                    59:fb:07:ce:cd:45:29:29:43:40:20:d7:0e:ae:86:
                    a7:47:e8:b5:db:ff:6c:c4:a4:d6:4f:93:2d:47:e7:
                    d3:e5:48:d6:71:26:91:89:b4:b5:49:57:fa:fe:52:
                    79:46:d3:bc:a8:c9:72:48:63:df:0b:e7:1d:c6:0f:
                    5f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2D:39:09:C6:41:CC:7B:86:A9:09:3B:B8:15:60:B2:70:B9:CF:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/fdfe3f12-0830-3239-8ff4-4615da8e7d07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:e5:63:9b:d0:be:6c:05:95:97:51:4f:35:41:2c:b2:d9:06:
         98:bd:c4:77:57:e4:c4:9c:76:b7:17:8f:aa:1e:22:b9:76:cb:
         cb:4e:90:db:7f:77:f0:d7:3b:d2:f1:69:83:13:6c:7d:47:e7:
         52:c0:23:b5:53:53:ed:a5:a7:1e:18:6c:68:29:28:bc:4d:f2:
         74:76:14:0b:92:85:20:37:20:ac:81:4b:57:19:3c:e5:01:c6:
         69:2c:6a:2f:e9:85:49:ba:52:b0:ba:dc:67:5e:4d:dd:e1:69:
         7e:ac:9b:5a:d4:52:8e:b8:21:1c:95:f3:e6:4a:b3:2f:7a:0e:
         b8:0f:db:4f:42:08:74:de:8b:bd:9c:fe:69:b1:18:56:d5:18:
         30:65:fe:ed:d5:a7:7d:0f:da:bc:eb:5f:1f:a7:3e:1c:ca:a1:
         ad:f3:b5:39:f1:6b:c7:09:c4:25:eb:3b:a3:e1:39:4e:05:32:
         63:78:dc:97:ff:02:e4:9d:a3:de:a9:ec:31:40:8c:fd:44:09:
         bb:09:79:e0:01:44:45:af:34:da:27:df:0b:08:b3:af:6f:a9:
         58:13:ec:b2:c6:13:26:33:e6:cd:15:42:c1:54:17:cb:7e:fd:
         06:4d:16:1c:da:d4:25:1b:b8:3a:e7:13:45:e2:da:7d:ea:cf:
         92:b4:70:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 14:58:02 2026 by rpki-client