Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/94000a91-5bcf-357f-8271-f114ec50a698.roa
File:                     94000a91-5bcf-357f-8271-f114ec50a698.roa (raw, json)
Hash identifier:          +QtiCQkhACyWkC6oecFmh4wqqaUJyamrKnK+sUGM8wc=
Subject key identifier:   17:8B:67:6D:8C:03:8A:A0:1A:44:C3:CC:2C:9B:6A:C5:0B:7C:83:AD
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F4328584F89A86435995E26CA76724D00
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/94000a91-5bcf-357f-8271-f114ec50a698.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     1273
IP address blocks:        166.63.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:64:35:99:5e:26:ca:76:72:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=ef85a44b-ef11-425b-b90b-0e4ba806200b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:81:b0:82:ad:a6:dc:24:4e:6c:e6:00:a2:18:
                    94:69:42:e1:58:14:27:df:ff:48:be:23:29:a8:49:
                    ac:c9:21:bd:f6:44:da:8a:05:e8:b4:df:de:9e:4c:
                    c2:07:55:e6:0d:ca:9c:f3:76:e8:f5:e6:30:af:2e:
                    88:2a:8f:b2:69:c6:7e:b1:78:f0:52:af:fa:5c:2d:
                    8b:c3:e7:ae:ac:ce:8f:01:52:c9:99:91:6f:e6:4f:
                    db:8f:25:ca:d6:3f:8d:c7:87:49:a1:50:54:91:98:
                    89:b5:42:17:3f:ab:43:c0:ed:3a:2e:ed:8a:de:d5:
                    63:04:84:24:ff:4d:ea:d6:0a:67:03:ed:88:02:b0:
                    0c:ae:d5:68:71:d3:05:95:68:c9:5a:dd:13:11:4f:
                    63:9a:b6:c4:52:84:ce:9e:ee:25:15:98:4e:f4:ca:
                    ff:bf:8c:19:4c:eb:18:e4:05:0f:5c:c6:bd:db:10:
                    ef:a1:39:d0:72:e3:6f:8c:36:e5:45:86:4f:1e:79:
                    b1:ab:4c:c2:5a:97:26:69:4d:5e:e3:00:21:43:c2:
                    4b:6d:0d:f0:f2:8a:0d:81:44:bd:b1:32:99:34:af:
                    d9:17:e8:d5:ec:57:fb:3d:15:aa:80:fd:7e:83:be:
                    22:6f:64:c7:f0:bb:38:6f:fc:e0:2f:3d:d3:e9:66:
                    5e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8B:67:6D:8C:03:8A:A0:1A:44:C3:CC:2C:9B:6A:C5:0B:7C:83:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/94000a91-5bcf-357f-8271-f114ec50a698.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.63.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:b3:e1:f1:3c:7b:42:60:f5:af:e3:22:dd:52:f6:ab:fd:09:
         d4:8d:e9:3f:48:d5:51:b1:7a:c4:55:a1:d0:b0:7f:85:22:06:
         60:62:f5:0f:bb:4e:b8:9b:c0:62:1f:53:62:05:6d:b7:56:54:
         74:26:d9:9c:80:df:79:59:b6:8c:9f:37:84:98:3f:f0:01:22:
         84:e8:00:4e:ee:bd:53:8f:f0:19:5e:2b:3b:7e:b9:49:8c:6c:
         67:f4:5a:73:d4:a0:67:af:51:81:c3:39:b4:9a:6a:f6:19:40:
         46:61:30:67:d1:f7:56:2a:c9:2d:22:62:a7:de:76:2b:5d:11:
         2d:09:3a:3f:67:88:b7:b1:34:0f:ba:99:5f:cd:18:8d:f2:06:
         fd:fb:2f:fb:4f:e7:98:63:6e:df:cd:d4:28:67:ea:55:7a:ee:
         98:4f:9f:45:3a:4a:64:26:7d:77:52:7c:3b:61:c1:b3:4b:e2:
         d7:10:ef:fe:ff:6c:7c:49:75:87:d9:76:2b:90:16:a9:6f:ad:
         1a:fc:f2:49:05:2d:04:01:fc:59:d5:d0:54:aa:72:14:52:b1:
         70:cc:22:d6:49:bb:65:f3:bc:77:1c:10:5b:8a:e9:d6:ab:af:
         cb:a3:32:01:6c:05:e6:44:d7:2c:f4:01:31:cf:21:e7:e6:e6:
         f2:fa:12:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:18:24 2026 by rpki-client