Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/fdfe3f12-0830-3239-8ff4-4615da8e7d07.roa
File:                     fdfe3f12-0830-3239-8ff4-4615da8e7d07.roa (raw, json)
Hash identifier:          2XamsAf+BqD4F3AeBeGgTJL30E+5dKBGZJFvay6v/xM=
Subject key identifier:   5E:6F:D0:23:B9:3F:D8:76:6C:B8:27:53:FF:0E:2F:22:36:B9:C0:2B
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F4328584EA79A30F30596D2408BE31A00
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/fdfe3f12-0830-3239-8ff4-4615da8e7d07.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20249
IP address blocks:        169.196.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:30:f3:05:96:d2:40:8b:e3:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2294af4e-f651-4c04-b74c-87623dd8d07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8b:f6:06:81:33:00:26:f7:50:54:fb:12:00:
                    fb:78:90:be:48:41:81:2a:8d:cb:a8:36:49:9b:72:
                    fe:d5:85:63:17:63:54:bf:9a:46:b0:c7:fe:52:7d:
                    c7:45:af:f2:80:37:d4:57:f7:d9:6c:0c:c5:23:0c:
                    0e:b2:b8:2c:ec:77:8a:c9:c7:f6:f6:9a:84:17:bb:
                    ad:26:88:b0:d4:99:fe:35:2f:6c:6f:ae:df:0e:4a:
                    3d:c1:29:f4:1e:0b:ba:21:d7:b2:ee:8a:a0:de:f1:
                    5d:d6:94:80:17:e7:b0:7d:04:ea:c3:f9:e3:e1:50:
                    fe:1d:f1:55:3b:8d:e2:a3:dc:82:ab:18:93:f4:91:
                    e4:1b:7c:b2:5a:88:a9:39:a4:31:8b:92:9b:c2:73:
                    96:6d:67:f4:f2:a1:3f:32:67:b5:ad:3b:11:9f:0f:
                    95:47:86:b3:24:5c:eb:a5:11:90:1f:f0:c3:89:cc:
                    34:dd:8b:61:b3:06:c3:84:36:a5:03:76:af:32:8b:
                    a9:87:4e:69:d7:68:b1:53:f9:f1:ff:ff:c3:8e:26:
                    a7:43:65:3a:a2:29:7a:7b:b9:10:33:bf:34:ae:9f:
                    d5:25:b5:3e:32:b9:7e:8c:b4:74:db:d2:21:76:1a:
                    ff:85:f0:ba:86:39:04:7d:2b:7e:1a:ec:f4:ae:b1:
                    40:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6F:D0:23:B9:3F:D8:76:6C:B8:27:53:FF:0E:2F:22:36:B9:C0:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/fdfe3f12-0830-3239-8ff4-4615da8e7d07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:7a:1f:7d:da:2e:99:dc:21:52:8c:69:2d:58:ca:a9:70:f5:
         28:37:2b:be:ad:66:3d:43:d6:a9:c0:28:67:22:c2:c0:5f:e0:
         00:77:ac:5f:7c:21:05:6b:8c:ec:e6:e5:e3:83:bd:be:23:0d:
         e0:5d:bc:87:05:9a:05:8e:a9:16:1a:f8:41:8e:8f:56:45:7d:
         2a:8f:35:53:38:b0:39:76:d1:f2:ff:6d:c3:6f:f3:e5:9f:bb:
         c1:53:df:a0:b8:60:14:fa:7e:a8:69:56:c3:3f:89:95:8c:f6:
         b9:07:60:3a:73:f3:bb:b1:16:37:25:ef:1e:b8:12:e5:9d:ca:
         14:bd:69:b5:10:ed:81:fc:14:0e:d5:76:09:95:de:01:cb:bf:
         fd:09:cc:7e:a6:13:6c:d0:5b:e9:c8:3a:37:2e:aa:48:09:80:
         78:4c:41:97:40:48:e9:0a:02:16:91:20:43:f3:e4:c0:77:1d:
         86:d9:aa:ea:1f:57:43:0e:c4:d2:ff:fa:a5:0e:c4:60:b5:12:
         53:88:7e:ab:8b:5e:7f:e1:62:7c:c0:3d:d9:98:fa:d7:b3:32:
         f9:30:e5:f1:21:68:66:3f:63:56:1f:76:8d:4d:7f:4d:b3:3b:
         b8:b7:6b:f7:64:ea:fc:fb:06:15:78:0b:c5:91:8c:62:be:12:
         8e:30:37:47
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6nmjDzBZbSQIvjGgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTczZWUxYmItYmI2Yi00Y2M2LWJjYTEtNGMxNjIyZGM0
ZWRiMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MjI5NGFmNGUtZjY1MS00YzA0LWI3NGMtODc2MjNkZDhkMDdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgov2BoEzACb3UFT7EgD7eJC+SEGBKo3LqDZJ
m3L+1YVjF2NUv5pGsMf+Un3HRa/ygDfUV/fZbAzFIwwOsrgs7HeKycf29pqEF7ut
Joiw1Jn+NS9sb67fDko9wSn0Hgu6Idey7oqg3vFd1pSAF+ewfQTqw/nj4VD+HfFV
O43io9yCqxiT9JHkG3yyWoipOaQxi5KbwnOWbWf08qE/Mme1rTsRnw+VR4azJFzr
pRGQH/DDicw03YthswbDhDalA3avMouph05p12ixU/nx///DjianQ2U6oil6e7kQ
M780rp/VJbU+Mrl+jLR029Ihdhr/hfC6hjkEfSt+Guz0rrFAowIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFF5v0CO5P9h2bLgnU/8OLyI2ucArMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NzNl
ZTFiYi1iYjZiLTRjYzYtYmNhMS00YzE2MjJkYzRlZGIvZmRmZTNmMTItMDgzMC0z
MjM5LThmZjQtNDYxNWRhOGU3ZDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTczZWUxYmItYmI2Yi00Y2M2LWJj
YTEtNGMxNjIyZGM0ZWRiLzU3M2VlMWJiLWJiNmItNGNjNi1iY2ExLTRjMTYyMmRj
NGVkYi5jcmwwHwYDVR0jBBgwFoAU5bcwnII1o67jk7VvPhVOUUksQ+AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NzNlZTFiYi1iYjZiLTRjYzYtYmNhMS00YzE2
MjJkYzRlZGIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqcQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAh3offdoumdwhUoxpLVjKqXD1KDcrvq1mPUPWqcAoZyLCwF/gAHesX3wh
BWuM7Obl44O9viMN4F28hwWaBY6pFhr4QY6PVkV9Ko81UziwOXbR8v9tw2/z5Z+7
wVPfoLhgFPp+qGlWwz+JlYz2uQdgOnPzu7EWNyXvHrgS5Z3KFL1ptRDtgfwUDtV2
CZXeAcu//QnMfqYTbNBb6cg6Ny6qSAmAeExBl0BI6QoCFpEgQ/PkwHcdhtmq6h9X
Qw7E0v/6pQ7EYLUSU4h+q4tef+FifMA92Zj617My+TDl8SFoZj9jVh92jU1/TbM7
uLdr92Tq/PsGFXgLxZGMYr4SjjA3Rw==
-----END CERTIFICATE-----
Generated at Tue Sep 1 05:21:31 2026 by rpki-client