Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/2c9c7c88-42e4-32a5-9c8d-f2cea4c4b5c8.roa
File:                     2c9c7c88-42e4-32a5-9c8d-f2cea4c4b5c8.roa (raw, json)
Hash identifier:          dOfgOxUN5dJe4s2gKqWATVi2VpEEDPKxqShTARr9kM8=
Subject key identifier:   E7:71:79:9D:E0:73:3A:B7:E3:3A:DE:00:DC:90:66:61:56:57:A5:E9
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F4328584D2644B26DDB600F7C77EFB540
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/2c9c7c88-42e4-32a5-9c8d-f2cea4c4b5c8.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     13335
IP address blocks:        169.196.72.0/24 maxlen: 24
                          169.196.73.0/24 maxlen: 24
                          169.196.76.0/24 maxlen: 24
                          169.196.77.0/24 maxlen: 24
                          169.196.78.0/24 maxlen: 24
                          169.196.79.0/24 maxlen: 24
                          169.196.198.0/24 maxlen: 24
                          169.196.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:b2:6d:db:60:0f:7c:77:ef:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=fe1de3fb-b662-4ecb-801e-c1db07e4855c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2d:c3:86:7f:e0:77:87:80:5d:e5:d5:fb:27:
                    69:bc:29:2e:d2:88:28:53:94:f2:2d:2c:5c:ab:19:
                    52:8c:9c:be:4e:82:eb:e4:d7:dd:30:15:2c:64:ae:
                    75:81:b3:62:27:78:a6:67:f1:6a:84:ae:43:83:eb:
                    6a:99:d1:ee:3a:55:50:25:ba:ac:f9:c9:29:bf:06:
                    bf:b9:c8:81:78:af:c9:22:10:05:1e:4c:02:91:33:
                    80:ef:8b:08:95:f1:ac:e9:af:5b:ca:95:00:0e:0b:
                    e1:15:ce:6c:45:ec:49:ae:5d:fe:88:d8:41:90:e6:
                    27:47:52:69:a4:10:3c:70:e9:92:bb:5f:55:29:9c:
                    2c:89:41:8e:3f:91:b9:78:8e:9f:09:67:dd:cc:57:
                    31:41:85:4f:cb:ae:f4:ca:39:0f:f2:00:da:99:37:
                    40:fb:a2:d2:1d:df:d9:85:aa:7f:f8:d9:be:34:ec:
                    d4:31:e6:00:76:1f:16:b3:3e:89:1b:d0:0a:d6:f1:
                    54:71:66:0b:a7:09:70:19:e8:fc:cc:d3:57:30:56:
                    d9:41:81:57:47:c3:9a:4b:40:f1:3a:14:63:8a:b8:
                    bf:75:b1:03:e5:04:43:47:0a:6a:0d:ab:1f:45:af:
                    98:24:1a:2e:f0:9b:22:c1:29:c2:50:d0:59:3d:95:
                    3d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:71:79:9D:E0:73:3A:B7:E3:3A:DE:00:DC:90:66:61:56:57:A5:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/2c9c7c88-42e4-32a5-9c8d-f2cea4c4b5c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.72.0/23
                  169.196.76.0/22
                  169.196.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:ce:c7:92:63:c5:db:6a:50:77:9b:53:a9:37:45:fc:01:25:
         40:52:13:9b:e2:e3:45:9c:63:9b:75:92:bf:76:59:7b:ba:8c:
         bd:86:1c:b2:6b:7f:aa:b8:a5:cb:11:06:8c:26:38:7d:14:f4:
         e6:a6:2f:45:f4:78:50:ee:d4:1b:7d:48:ab:83:f0:ae:b4:fd:
         32:eb:2c:80:b8:04:15:0a:bd:c3:a3:cc:7e:32:7b:78:de:9a:
         54:c5:1a:5a:dd:83:0c:62:51:28:09:b1:79:54:c4:d3:ad:d6:
         65:8d:3f:a0:ab:8a:13:3f:18:2e:1a:62:70:b9:f3:a8:2f:0c:
         b2:ad:34:09:9c:74:d4:3c:72:50:30:dd:61:46:98:d1:9b:44:
         62:ee:c6:3d:33:72:6f:c4:eb:a0:02:8d:a2:b7:6e:8c:8f:d6:
         6b:6b:8c:08:1f:f5:34:2b:2b:45:61:d0:7b:55:aa:cd:74:a3:
         7d:ed:59:80:dc:e0:0d:8b:be:90:0f:52:01:da:ef:67:d8:f7:
         2a:81:f9:d3:82:61:3b:f8:2e:ea:c7:38:32:dd:a7:ad:80:b5:
         dc:cc:ba:c9:cc:e4:df:80:41:bb:eb:69:12:e2:86:81:77:e8:
         fd:28:1c:14:d2:37:6c:9f:aa:ba:74:76:c5:e0:5b:99:cc:f7:
         1b:52:cb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:15:26 2026 by rpki-client