Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/6138325a-12e0-32de-b5a9-9d43e094b1be.roa
File:                     6138325a-12e0-32de-b5a9-9d43e094b1be.roa (raw, json)
Hash identifier:          CPG2u2PEda2xnaoQyhTMQ4+KBUurTtiVW9F/VJpHdH4=
Subject key identifier:   FA:B5:51:3A:85:25:F0:F7:5C:15:23:0D:13:66:DF:78:0A:D1:9D:3F
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F4328584F49740A83DD9E90CE263FB7C0
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/6138325a-12e0-32de-b5a9-9d43e094b1be.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     198949
IP address blocks:        169.196.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:0a:83:dd:9e:90:ce:26:3f:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a4a2ab35-9d06-40d4-8e3b-fe5ab8892c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:10:ef:94:6d:91:93:07:35:3c:7a:e3:53:e4:
                    1b:56:71:97:e4:ba:11:7f:04:d9:bf:61:3d:f6:f8:
                    49:49:93:1d:cf:d8:7e:a6:6b:42:1a:ce:fc:1a:c2:
                    6d:20:16:1a:dc:bc:8b:e1:06:c3:b0:79:32:ea:57:
                    0a:23:57:57:80:5d:e0:ed:14:ea:a0:66:e4:43:48:
                    f0:b3:e1:ef:43:11:46:d0:e1:ec:d8:ad:84:c6:7a:
                    af:87:81:bc:57:38:03:1b:1c:34:aa:da:7b:c9:8b:
                    dc:c9:2c:a2:cf:6f:7d:f5:a6:9e:2c:dc:e0:8a:db:
                    f1:e5:d1:32:12:11:13:cf:9c:97:d9:a1:94:1a:6e:
                    6e:0d:36:a3:d4:3e:0c:25:e1:ef:b0:74:fd:90:4f:
                    4e:bf:bf:18:2e:bc:00:1b:23:38:a1:84:b0:2f:ec:
                    42:e8:fc:4f:01:d8:1e:ec:a9:b1:be:b5:94:07:7d:
                    8f:95:f4:f9:87:36:65:5e:ee:41:86:40:2e:f9:23:
                    95:d0:c6:77:0b:04:62:70:a6:da:d9:c3:31:50:74:
                    98:d7:03:62:04:dc:83:b4:a1:84:cc:eb:71:c5:4e:
                    11:cc:31:82:50:ba:12:98:05:65:d8:da:e9:4b:2e:
                    d0:e4:0e:b1:7b:ea:4b:a7:2a:d2:e5:2e:44:fd:a5:
                    27:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B5:51:3A:85:25:F0:F7:5C:15:23:0D:13:66:DF:78:0A:D1:9D:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/6138325a-12e0-32de-b5a9-9d43e094b1be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:d1:7e:8f:df:d7:dd:d3:2d:41:4b:c1:36:e0:06:8d:61:ce:
         54:fc:5b:d1:11:06:7c:c2:3f:67:57:2a:7d:09:b1:49:61:01:
         06:14:fb:b6:26:bd:33:49:50:5d:10:39:89:bc:7e:7e:6b:9b:
         df:96:86:1b:03:67:ac:01:c4:21:be:c0:08:79:4b:d6:d1:25:
         57:46:0f:df:40:92:dd:1a:e1:6a:e1:fb:44:74:19:de:5a:c5:
         28:13:3c:ee:e7:9f:d4:02:be:84:bb:cd:86:80:ac:9e:ee:9a:
         29:49:24:ab:95:29:9b:11:68:a0:cf:c2:cc:2d:41:53:2f:6d:
         b0:9e:d7:fc:79:df:95:b4:3e:4a:48:82:4a:a7:e7:a6:24:d7:
         49:8f:ce:de:36:e9:01:8e:f8:ae:b9:e5:ea:40:3f:30:74:98:
         42:df:c9:a5:87:8e:f7:ca:86:10:fa:61:48:d5:a9:62:a3:ef:
         ae:67:6a:89:17:6c:1b:bb:c4:39:ce:2c:0d:d9:be:d7:59:ee:
         28:b3:56:7a:cc:61:17:a6:ef:b3:10:a2:68:bc:e8:5c:1c:1a:
         4e:8b:65:b5:27:a4:dc:84:ae:3f:49:08:68:20:5f:60:59:4e:
         66:c1:f5:07:d4:40:aa:0b:b0:86:3a:2b:53:65:a9:d8:bb:09:
         51:bd:8b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 18:42:52 2026 by rpki-client