Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/6138325a-12e0-32de-b5a9-9d43e094b1be.roa
File:                     6138325a-12e0-32de-b5a9-9d43e094b1be.roa (raw, json)
Hash identifier:          J2FI3gKLDKFXvSqd5QgZvMyFnuOFTNW+tKaXlBEHmeU=
Subject key identifier:   F0:0B:19:DE:E6:A5:B2:E8:F5:0B:6E:5A:8B:87:FB:7F:78:C5:3E:E8
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F4328584B5DD1E57298F7609E62C1F380
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/6138325a-12e0-32de-b5a9-9d43e094b1be.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     198949
IP address blocks:        169.196.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:e5:72:98:f7:60:9e:62:c1:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=40945b70-3719-4994-af89-f217ab5cd0f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:77:2b:c6:3d:2d:86:46:a5:d7:51:08:df:5c:
                    18:a9:72:9b:c4:58:e9:fa:1b:44:21:2c:ec:ab:6f:
                    d3:87:ed:76:00:99:d1:2a:c0:c7:20:51:49:ec:5b:
                    81:dc:0d:52:58:3c:35:63:30:59:f1:e5:43:21:97:
                    01:8c:b3:09:9f:90:ee:e2:66:e5:66:c5:03:c6:77:
                    4c:96:3b:f8:c8:aa:fc:f7:0c:ff:60:b5:6d:3b:55:
                    7f:68:57:6b:99:13:31:67:1d:ac:4a:14:5b:d1:66:
                    ae:b9:ec:80:0d:39:79:95:db:cc:78:aa:6f:c2:88:
                    73:ea:a4:2d:96:95:cf:5d:37:70:6f:35:0b:09:4d:
                    e6:f3:34:ae:84:d6:3d:cb:71:66:6e:7c:ec:84:c1:
                    50:02:c8:76:af:ee:4a:f7:14:1b:21:20:75:49:44:
                    ae:85:45:e5:96:64:10:e5:4e:1b:27:12:29:1f:67:
                    e8:ac:f8:16:5a:c4:b8:f2:bc:5c:9b:df:86:05:c6:
                    89:59:6a:9c:87:6e:10:84:a2:44:08:01:11:63:6f:
                    11:bd:b8:1b:39:35:fd:3a:98:f5:6c:09:91:9f:cd:
                    29:d5:23:5d:6a:6f:4f:f2:a0:4f:ce:e2:f4:dd:49:
                    6d:55:b0:13:c4:c9:b9:ba:8d:f1:8d:e0:a7:44:57:
                    f3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:0B:19:DE:E6:A5:B2:E8:F5:0B:6E:5A:8B:87:FB:7F:78:C5:3E:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/6138325a-12e0-32de-b5a9-9d43e094b1be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f5:21:af:14:18:94:60:25:67:89:20:7b:01:74:cb:27:eb:
         23:e9:c0:38:65:42:33:e2:d0:b6:c7:e0:cc:2e:5c:f4:07:40:
         b2:eb:09:d2:af:53:03:f7:38:b1:d9:d1:76:97:26:f3:63:25:
         82:b1:08:38:aa:05:7c:64:55:fe:cd:d6:8b:f5:65:62:43:22:
         9d:d0:23:a2:79:10:be:e5:a8:3d:5b:24:a8:d3:8b:41:c3:5f:
         1b:8c:41:d1:da:bb:d3:8b:13:d7:97:bf:93:0b:2e:c9:00:d3:
         74:aa:5a:43:c3:e7:3e:08:bc:28:76:8d:6a:71:7c:62:94:2b:
         f2:d9:8e:7c:57:d3:23:bd:3e:18:be:99:24:32:33:9b:2b:4f:
         91:58:c7:bd:d6:5f:5a:c8:01:0e:41:07:37:81:33:cb:96:3f:
         a1:2a:32:10:64:c1:bf:5b:64:3c:91:72:cb:5f:82:44:79:d6:
         38:a9:34:2e:6b:7c:48:43:b5:95:9b:26:e0:2b:ba:e5:a3:0c:
         ec:c4:ed:c3:ba:0c:38:c6:d3:c9:d5:30:0f:a2:25:3d:39:87:
         f5:f6:4f:84:6f:78:d9:12:0e:92:b3:d7:7c:90:90:7e:e9:ce:
         6c:6d:1e:99:e4:82:bd:4b:72:31:ae:22:7a:ad:c1:b2:9b:3f:
         52:93:cb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:04 2025 by rpki-client