Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/0f338f9f-8d80-3501-ac29-5563e567deab.roa
File:                     0f338f9f-8d80-3501-ac29-5563e567deab.roa (raw, json)
Hash identifier:          AKUztrDj1fk3iqeBrvTc2ptWSUu1DCT9SaaKoRZqMOY=
Subject key identifier:   B5:BF:9A:EB:6A:EC:0A:91:9C:E2:10:81:8A:61:11:4A:A3:21:CE:F6
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F432858499DBF286D4A9849D5D9ABB680
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/0f338f9f-8d80-3501-ac29-5563e567deab.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     198949
IP address blocks:        169.196.128.0/19 maxlen: 19
                          169.196.160.0/20 maxlen: 20
                          169.196.176.0/20 maxlen: 20
                          169.196.220.0/23 maxlen: 23
                          169.196.222.0/23 maxlen: 23
                          169.196.224.0/20 maxlen: 20
                          169.196.240.0/21 maxlen: 21
                          169.196.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:28:6d:4a:98:49:d5:d9:ab:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=addb88c3-e8a1-4b38-b9de-aca76bdfc3cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9a:17:d8:55:c6:ff:06:92:34:5c:f0:1c:da:
                    c1:1d:cb:94:85:b9:1e:36:94:78:51:d6:f8:e6:f0:
                    5d:e4:2d:a1:b4:a3:f2:09:a5:57:60:57:2f:c3:45:
                    80:c1:30:63:b5:cd:ca:2e:23:32:b6:80:e6:d5:eb:
                    5b:87:da:3a:b6:28:7f:8b:6e:37:fc:cd:81:f1:96:
                    a3:52:28:96:d4:55:2d:96:37:cd:97:06:43:b0:64:
                    03:85:c6:45:28:7f:39:58:26:21:bd:fb:26:a4:82:
                    38:4e:04:0e:28:29:39:98:80:56:e8:3d:c2:ab:70:
                    d6:e9:a1:17:cc:15:ad:d1:75:43:0b:55:09:41:a4:
                    7f:e2:37:ff:8f:5b:69:2a:c8:5f:d8:2d:ea:8d:d2:
                    51:62:52:dd:9c:dd:e6:60:7b:ef:77:c8:b0:c8:75:
                    4f:42:3e:63:2d:43:61:5f:0a:d1:43:a6:6b:ea:b9:
                    e1:0c:e5:a4:ad:e6:cb:c4:6e:2d:ca:2d:51:23:00:
                    4d:0e:6a:27:60:c3:b4:27:ba:fd:d6:6d:28:00:72:
                    3e:13:0a:73:5a:63:8a:b2:e2:60:5f:45:e6:6d:c1:
                    37:c5:5a:7a:ea:93:79:2a:4c:81:44:81:2e:62:86:
                    63:d4:96:49:e0:61:2a:12:36:51:5f:00:e3:94:70:
                    90:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:BF:9A:EB:6A:EC:0A:91:9C:E2:10:81:8A:61:11:4A:A3:21:CE:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/0f338f9f-8d80-3501-ac29-5563e567deab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.128.0/18
                  169.196.220.0-169.196.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:99:fe:8f:5d:9e:8b:d1:92:ec:ec:70:4d:37:92:ff:f4:0d:
         82:73:c9:cf:25:a6:08:82:28:bc:cf:6f:cc:a4:2b:1e:fa:c6:
         43:bd:01:f7:c1:ce:28:53:58:a6:0a:25:54:ff:02:23:e4:a3:
         10:48:44:f8:17:84:b2:19:46:62:27:8e:60:35:1e:5d:26:93:
         d4:51:f8:90:42:cf:2a:d9:4b:64:8e:d4:08:0f:8d:d5:4d:8e:
         fc:00:76:06:25:46:88:a3:9c:2a:be:24:17:66:1b:02:54:39:
         67:e1:69:c0:58:be:2a:25:fb:73:85:82:4f:ad:c0:98:51:84:
         61:58:55:11:d7:3c:5a:5e:40:bf:d7:52:ae:35:50:7d:d3:20:
         fc:05:69:ad:f5:57:0e:0c:de:b2:86:d6:6d:1c:86:86:63:20:
         da:96:55:bd:f8:b1:62:07:5a:21:0a:a0:d6:b2:c1:a0:98:83:
         36:82:2e:d3:88:86:8b:d4:19:f3:d5:6a:f7:2a:6e:4f:cb:d1:
         b1:91:06:9d:f8:29:87:be:bc:3c:83:aa:6d:91:2f:bb:f3:23:
         a7:23:dd:83:3b:38:ac:8e:02:35:3e:5d:3d:6e:8f:94:1d:0e:
         53:af:f8:39:0d:24:19:da:86:d4:0b:84:04:e2:e0:ed:24:17:
         ee:4f:2a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:50:38 2025 by rpki-client