Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/5b3192a0-eb72-332c-bbdd-a021ad76267f.roa
File:                     5b3192a0-eb72-332c-bbdd-a021ad76267f.roa (raw, json)
Hash identifier:          kh5Rav6zvN/39ckt41MktK7MA9anI1gS2UPjh2hK/eo=
Subject key identifier:   75:76:AD:66:4C:95:C1:29:8B:45:87:98:61:8B:23:B8:CB:ED:DF:A5
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F4328584D1F4A0C09EA6DEBE6FD861B00
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/5b3192a0-eb72-332c-bbdd-a021ad76267f.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     20249
IP address blocks:        169.196.66.0/24 maxlen: 24
                          169.196.67.0/24 maxlen: 24
                          169.196.68.0/23 maxlen: 23
                          169.196.68.0/24 maxlen: 24
                          169.196.69.0/24 maxlen: 24
                          169.196.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:0c:09:ea:6d:eb:e6:fd:86:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=a8595a2f-680c-4b54-af23-fe4413d0076a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b6:1e:55:86:94:ff:f0:4d:2c:90:fb:93:aa:
                    52:9c:18:64:76:88:10:54:7b:cd:9c:ca:f0:6e:2d:
                    87:ed:19:2d:b9:81:8e:0f:c2:f8:2d:93:6c:76:89:
                    3c:87:60:5e:a4:f4:ef:2f:8d:2d:8b:69:cb:92:5d:
                    2e:2e:23:a9:27:ba:05:84:8f:3a:64:4f:48:7d:e3:
                    bd:d3:6d:65:50:0e:4b:07:db:12:8b:72:73:39:30:
                    90:46:d8:b3:57:ff:7e:2d:ee:40:d9:7f:c9:80:dc:
                    ad:d7:97:10:56:75:7f:14:37:ff:0c:1a:65:92:8d:
                    cb:ae:46:0a:27:3c:69:99:7c:80:4c:3e:fe:75:70:
                    34:67:65:05:c8:aa:ad:8b:3c:57:26:af:b9:a1:a6:
                    71:6d:5e:cb:fe:b0:c9:1c:d1:24:de:ca:58:98:98:
                    8c:29:b3:27:56:dd:39:9e:9d:e1:eb:b1:c7:e0:b0:
                    56:cc:0f:80:85:fe:1f:17:ed:6e:56:2b:87:3a:9f:
                    2d:ed:ee:69:b6:0d:56:2c:ee:35:53:d2:fc:3c:f2:
                    31:b1:c7:74:ed:4a:32:2f:51:7a:7b:3a:91:71:de:
                    8d:ee:dc:75:de:aa:2c:22:1a:8e:b6:73:74:0b:36:
                    20:23:61:7c:90:62:e0:68:e1:0c:1a:f4:c2:94:e4:
                    02:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:76:AD:66:4C:95:C1:29:8B:45:87:98:61:8B:23:B8:CB:ED:DF:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/5b3192a0-eb72-332c-bbdd-a021ad76267f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.66.0-169.196.69.255
                  169.196.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:90:87:07:20:33:aa:25:01:03:43:6e:6a:ba:b1:e2:15:8e:
         e0:b0:cd:a2:7f:d2:b7:1d:25:f1:34:10:30:b5:95:38:10:0c:
         c2:23:d9:e4:04:12:fe:7b:c1:03:1f:71:3b:86:2c:7b:13:9f:
         7b:9e:93:0f:c6:d0:fa:3a:1a:1f:0f:fc:37:9d:c1:43:bd:f2:
         70:ca:24:de:c3:e7:8b:d6:c7:47:a3:3c:af:2c:1d:b8:a3:79:
         d4:c4:ae:86:78:b2:7a:a9:6d:44:88:ea:ee:7a:ef:88:da:6e:
         32:fa:6a:ed:fe:2d:6a:b2:71:49:26:29:fd:5f:27:b3:df:a7:
         e1:10:0e:21:76:b6:00:b6:1c:9d:be:64:e5:ce:75:43:78:69:
         46:18:35:1f:cd:aa:9f:29:77:e1:23:61:3c:af:2b:19:34:71:
         91:d3:bc:19:6c:57:c3:31:41:87:d5:7f:15:7c:fc:b4:c9:f0:
         f5:20:4c:7f:46:71:4f:b5:fe:e9:d6:0f:6d:5d:67:f4:41:a2:
         9a:9c:66:c5:5a:bd:cd:7f:cf:a0:22:b8:23:d1:3e:da:c3:5a:
         de:04:e7:86:b5:64:de:66:f5:19:93:68:9a:f1:bf:b8:51:b1:
         8e:72:16:de:db:56:fe:36:14:da:9b:d0:d2:5f:3e:d2:a1:8d:
         f5:22:ae:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:21:01 2026 by rpki-client