Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/fdfe3f12-0830-3239-8ff4-4615da8e7d07.roa
File:                     fdfe3f12-0830-3239-8ff4-4615da8e7d07.roa (raw, json)
Hash identifier:          3oJb/Vq3yZdCgKz5akFK3Fb9N3HRwI7VXSXst34cvoY=
Subject key identifier:   3B:36:8E:7B:C2:07:74:66:98:D9:61:C3:1F:6D:F5:B9:D3:25:A7:71
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F4328584D1F4A11C11516AFABE51FA100
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/fdfe3f12-0830-3239-8ff4-4615da8e7d07.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     20249
IP address blocks:        169.196.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:11:c1:15:16:af:ab:e5:1f:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=4d57de19-2e1a-4e8a-8ab1-f48c4ba9f3ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f2:07:24:c7:28:ef:ee:26:fa:15:e1:f0:af:
                    b1:71:c6:7f:a0:7a:1e:f2:8b:b4:fc:c7:2a:85:59:
                    91:d5:bd:72:db:0b:fb:b5:da:87:38:19:bb:98:b8:
                    96:0d:b7:38:3f:a6:95:cb:e1:8d:24:4c:9e:f2:41:
                    09:bc:6b:2b:4e:84:d5:27:25:03:e5:75:49:05:7c:
                    94:45:d2:8b:3c:6c:a8:38:52:8f:bf:b8:fb:fd:6e:
                    03:22:1e:a3:63:0c:43:31:a1:c4:19:21:5b:d1:2f:
                    f1:2c:55:c8:df:e2:f4:e0:1b:9f:a8:b1:ac:e3:84:
                    0e:a5:2d:7a:ef:4a:b9:0e:72:9d:b9:15:d3:8b:95:
                    a4:d8:7f:a5:54:3b:73:b1:4d:63:3e:e8:83:ae:48:
                    62:9a:e6:67:38:71:62:fd:16:6c:51:4a:e4:01:26:
                    7d:e4:43:00:83:70:79:af:f3:34:09:d2:5d:0c:6a:
                    64:a5:11:98:d6:c2:be:2f:c6:f4:04:b9:0b:6a:75:
                    68:ba:34:24:c5:52:11:7d:fd:76:13:33:2a:80:d5:
                    38:99:6a:1e:eb:b9:30:ed:bc:d2:41:99:f8:63:20:
                    7c:e5:b7:8f:b5:81:ce:af:48:b5:2f:0b:e5:82:1e:
                    b3:4d:8a:ad:4a:1a:5a:9f:08:27:4a:c2:a3:9d:aa:
                    78:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:36:8E:7B:C2:07:74:66:98:D9:61:C3:1F:6D:F5:B9:D3:25:A7:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/fdfe3f12-0830-3239-8ff4-4615da8e7d07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:39:b8:3a:d6:20:b9:4f:3b:d1:b2:f4:2e:7e:4b:7a:19:ae:
         a1:74:8b:39:4a:53:c6:d4:51:78:63:8f:ca:c1:48:75:be:62:
         ed:8f:f6:90:41:be:d6:c7:dd:4b:c7:38:07:a0:e0:26:7f:fc:
         fb:cf:be:ef:45:be:04:39:09:c3:2f:7a:5a:5f:5a:14:d2:0c:
         48:05:2b:4e:55:b8:c4:0d:d1:b8:45:0c:b2:6c:de:cb:10:0d:
         14:44:04:81:ed:ae:64:8b:80:73:9e:fb:bd:d6:f6:45:b1:7b:
         af:99:bd:13:24:ba:0e:2f:79:10:0f:16:ab:27:1f:99:35:47:
         37:d5:5b:da:73:d7:5c:62:d9:c9:21:27:db:83:ba:54:69:12:
         aa:de:2e:60:e6:46:c1:fe:6c:18:d5:3c:da:85:86:02:ea:2e:
         ea:ed:af:f6:31:b0:7b:db:f1:d9:cf:37:51:57:bc:1f:dd:a5:
         50:d4:65:ea:d3:c2:2a:bc:f2:17:de:4d:35:08:2e:38:09:7d:
         43:33:c1:a4:4a:58:ac:c0:6f:eb:95:6e:be:8c:dd:67:9f:fd:
         ff:bd:79:c9:67:0c:48:07:bd:69:27:14:3d:90:65:fb:d5:a8:
         b5:01:4f:87:2d:54:87:b6:db:c5:cd:9d:96:ee:c3:5e:92:53:
         21:8c:2b:f4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0fShHBFRavq+UfoQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTczZWUxYmItYmI2Yi00Y2M2LWJjYTEtNGMxNjIyZGM0
ZWRiMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
NGQ1N2RlMTktMmUxYS00ZThhLThhYjEtZjQ4YzRiYTlmM2NhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfIHJMco7+4m+hXh8K+xccZ/oHoe8ou0/Mcq
hVmR1b1y2wv7tdqHOBm7mLiWDbc4P6aVy+GNJEye8kEJvGsrToTVJyUD5XVJBXyU
RdKLPGyoOFKPv7j7/W4DIh6jYwxDMaHEGSFb0S/xLFXI3+L04BufqLGs44QOpS16
70q5DnKduRXTi5Wk2H+lVDtzsU1jPuiDrkhimuZnOHFi/RZsUUrkASZ95EMAg3B5
r/M0CdJdDGpkpRGY1sK+L8b0BLkLanVoujQkxVIRff12EzMqgNU4mWoe67kw7bzS
QZn4YyB85bePtYHOr0i1Lwvlgh6zTYqtShpanwgnSsKjnap4kQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDs2jnvCB3RmmNlhwx9t9bnTJadxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NzNl
ZTFiYi1iYjZiLTRjYzYtYmNhMS00YzE2MjJkYzRlZGIvZmRmZTNmMTItMDgzMC0z
MjM5LThmZjQtNDYxNWRhOGU3ZDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTczZWUxYmItYmI2Yi00Y2M2LWJj
YTEtNGMxNjIyZGM0ZWRiLzU3M2VlMWJiLWJiNmItNGNjNi1iY2ExLTRjMTYyMmRj
NGVkYi5jcmwwHwYDVR0jBBgwFoAU5bcwnII1o67jk7VvPhVOUUksQ+AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NzNlZTFiYi1iYjZiLTRjYzYtYmNhMS00YzE2
MjJkYzRlZGIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqcQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAVzm4OtYguU870bL0Ln5LehmuoXSLOUpTxtRReGOPysFIdb5i7Y/2kEG+
1sfdS8c4B6DgJn/8+8++70W+BDkJwy96Wl9aFNIMSAUrTlW4xA3RuEUMsmzeyxAN
FEQEge2uZIuAc577vdb2RbF7r5m9EyS6Di95EA8WqycfmTVHN9Vb2nPXXGLZySEn
24O6VGkSqt4uYOZGwf5sGNU82oWGAuou6u2v9jGwe9vx2c83UVe8H92lUNRl6tPC
KrzyF95NNQguOAl9QzPBpEpYrMBv65VuvozdZ5/9/715yWcMSAe9aScUPZBl+9Wo
tQFPhy1Uh7bbxc2dlu7DXpJTIYwr9A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:22:53 2026 by rpki-client