Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/cf657c5a-6c75-3eda-b5d2-714f5ebee426.roa
File:                     cf657c5a-6c75-3eda-b5d2-714f5ebee426.roa (raw, json)
Hash identifier:          1lSERO7uFHfu8Ta5lgoadX2fGWk+sh7fgv/sdU8+HKI=
Subject key identifier:   F3:52:E9:F1:94:D2:74:AB:6D:88:AA:18:96:1C:45:E1:13:99:BE:6E
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F4328584B6631F60DDEEB1F4ACFB11E80
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/cf657c5a-6c75-3eda-b5d2-714f5ebee426.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     13335
IP address blocks:        169.196.66.0/24 maxlen: 24
                          169.196.67.0/24 maxlen: 24
                          169.196.68.0/24 maxlen: 24
                          169.196.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:f6:0d:de:eb:1f:4a:cf:b1:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=482dd569-0262-424b-af39-92f4aac4a228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:55:87:2f:5a:bd:f0:1f:0d:de:f5:6d:ae:88:
                    8f:aa:8d:bc:7e:40:2c:8d:2b:d8:6a:95:c9:46:67:
                    8a:2b:ea:30:4c:f3:7a:09:47:cb:4e:94:de:02:29:
                    99:1d:6e:45:c6:db:0b:ea:c8:3c:49:8a:1a:66:2c:
                    ad:c9:20:d6:3c:14:e7:07:8b:39:2e:95:43:a0:52:
                    7d:b3:21:15:d2:58:71:b7:eb:c5:66:3c:a4:91:52:
                    0a:d1:da:b3:9d:eb:2b:fd:89:cd:cb:39:6d:a4:af:
                    a9:42:71:3a:fe:2d:e6:08:29:14:3b:33:12:2c:dd:
                    da:20:75:c2:27:86:1a:78:e5:b7:a5:52:63:93:b7:
                    ba:a2:30:44:1b:dc:4f:5a:c0:7f:75:fa:dd:0f:b5:
                    d9:f6:24:93:9b:5f:89:16:93:74:0d:c1:63:bc:33:
                    02:23:c3:aa:bd:c3:03:6e:97:0f:3e:3f:bc:1c:a7:
                    4c:92:36:a4:d5:91:32:22:bd:c9:a9:d8:fa:47:7a:
                    3e:93:47:30:b3:52:6b:90:9f:8d:36:e9:56:7f:24:
                    0e:39:44:8a:91:05:2b:13:b7:74:fd:23:e4:5e:8e:
                    25:5d:72:5d:62:22:75:32:f3:16:11:ba:61:70:9c:
                    4a:90:6a:f5:6e:ab:84:f1:7d:0f:52:3d:67:7d:6c:
                    ec:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:52:E9:F1:94:D2:74:AB:6D:88:AA:18:96:1C:45:E1:13:99:BE:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/cf657c5a-6c75-3eda-b5d2-714f5ebee426.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.66.0-169.196.69.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:7c:fa:3e:21:c5:03:d3:c8:d7:c9:5a:7d:73:5d:1c:6c:e1:
         0f:05:22:ce:48:9a:b6:82:e6:ba:bd:e2:de:e5:d4:3e:69:19:
         db:ff:1f:ac:40:ad:48:fa:17:91:0f:b0:f2:74:8a:2d:a0:9b:
         8a:06:9c:3d:21:a4:97:2b:76:78:bd:92:2f:83:fd:60:b1:23:
         c4:0f:f9:73:93:d1:59:57:e0:c0:2e:43:68:bd:c1:df:a1:4d:
         c4:29:e7:87:bb:d0:b3:64:30:06:9b:72:94:e8:8f:1f:a5:2f:
         da:f7:8b:19:6a:7f:39:71:ba:69:5e:51:51:1e:b8:cc:d6:01:
         e3:90:b1:09:b5:b1:ef:29:b3:8e:b3:86:7c:10:b3:f8:c2:ef:
         a3:5c:e7:8e:2a:93:a5:d2:55:3c:4c:f4:b1:4a:58:89:02:d0:
         df:59:14:f7:b5:42:3a:92:03:8a:7c:60:6d:cc:91:fe:1d:aa:
         bf:91:ef:ee:be:19:bb:1a:4c:99:ce:c9:c6:2c:27:60:7c:99:
         63:1f:34:d6:6d:67:b0:06:75:bd:5d:62:4b:dc:58:e1:f3:8c:
         75:0a:a7:42:70:e4:65:0e:08:60:70:6a:60:fe:3c:75:29:d5:
         a1:83:3a:f5:a8:8d:95:54:25:f1:be:3d:17:52:86:ff:a4:c4:
         e4:63:03:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:24:06 2025 by rpki-client