Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/fd2bc8fe-5928-3c93-a4ef-2eecd23b88ad.roa
File:                     fd2bc8fe-5928-3c93-a4ef-2eecd23b88ad.roa (raw, json)
Hash identifier:          9at6ZuEQ07uV5kBcykYoEDOAJWXoh7oU6HF98cL0NDM=
Subject key identifier:   30:CC:E7:0C:1F:F4:FF:D2:DD:7F:99:66:52:9C:1D:27:3D:81:2E:85
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F4328584B48E1B61B8F2D30D2C151B980
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/fd2bc8fe-5928-3c93-a4ef-2eecd23b88ad.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     20249
IP address blocks:        169.196.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:b6:1b:8f:2d:30:d2:c1:51:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=4a79c7c7-7cc2-4863-9aab-10408d42a8ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:20:c6:d0:59:c3:28:3d:0b:d0:fd:a6:d8:5b:
                    ba:4c:de:c9:67:a5:e2:77:06:78:a3:46:92:7e:ea:
                    de:f7:8c:80:8a:8f:bd:0f:ef:6c:47:70:f7:b8:98:
                    da:de:7a:3c:52:50:9f:74:a6:79:16:44:b1:46:18:
                    51:28:1f:4e:d0:51:cf:b3:25:7f:57:1f:19:bc:19:
                    88:5b:c6:17:dd:8c:45:fc:c8:a6:25:2d:75:30:8c:
                    e8:78:01:a2:83:02:fc:98:85:7d:7c:fc:94:ef:f8:
                    8e:59:a2:21:4a:54:bd:42:9a:58:4f:d3:18:c5:1f:
                    21:2f:8a:61:c0:43:1b:b7:5c:bd:ee:f5:bf:8f:ac:
                    2c:66:24:0d:c7:56:e1:94:85:86:50:3a:d7:d5:0b:
                    6c:c8:ff:c1:46:44:f4:39:a5:64:ff:02:0f:f1:87:
                    69:56:50:f9:46:dc:e9:f0:0e:ff:87:49:00:3d:fb:
                    da:34:6c:06:f9:b3:bb:69:26:e3:69:13:6f:09:d1:
                    96:cf:44:2d:92:ce:56:18:f8:d4:67:63:a1:51:b9:
                    65:86:79:2f:b9:f2:c6:78:a5:e7:25:33:b0:78:a8:
                    5a:64:11:53:0d:be:de:a7:90:a4:40:12:bd:d9:52:
                    b7:f7:94:04:8b:5b:de:f0:25:fe:a2:47:5f:41:56:
                    c9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CC:E7:0C:1F:F4:FF:D2:DD:7F:99:66:52:9C:1D:27:3D:81:2E:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/fd2bc8fe-5928-3c93-a4ef-2eecd23b88ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:b8:70:a6:dc:42:f2:f8:34:5b:ed:2b:2f:c5:a6:f3:9f:db:
         90:80:1c:c0:d6:9c:92:88:e7:df:1e:39:f8:15:42:cf:c2:a3:
         e0:1f:72:07:f5:ac:bd:d5:6e:44:f0:bf:ff:f5:38:e1:89:47:
         1b:17:78:22:c7:ef:5b:5c:06:99:2b:9b:5c:3b:21:d3:c6:57:
         d0:28:83:85:da:38:c4:e8:5f:bb:7b:31:9f:ec:10:b7:47:b1:
         75:a3:3c:04:c0:75:0a:3f:c3:b1:90:6c:ce:3b:a7:e9:df:99:
         c1:b5:c1:7c:d7:25:18:77:72:83:65:90:40:54:91:0a:c2:6e:
         fe:bb:42:2e:a9:7f:84:35:92:97:04:b6:fe:ba:c9:9f:5f:49:
         54:df:1e:0b:07:da:55:40:c0:cd:a4:94:bf:68:67:0a:20:38:
         2d:e3:8f:8d:13:44:2d:88:d3:80:d8:ab:2b:69:71:1a:a3:27:
         54:b0:1e:f3:19:a2:8e:9d:c7:31:02:79:c9:16:a9:9b:23:9e:
         a0:7c:cb:3b:d7:bd:b0:65:d1:37:15:99:40:60:1b:20:a3:d5:
         18:5e:cb:e6:10:42:16:77:8e:79:77:e4:7c:33:41:b0:f9:f3:
         51:fb:06:fe:19:f8:82:52:7c:f3:0d:94:d2:09:ff:d8:7b:14:
         7d:1a:39:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:14:25 2025 by rpki-client