Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/05f30e9f-6ebf-35c4-9b34-331d4b41c014.roa
File:                     05f30e9f-6ebf-35c4-9b34-331d4b41c014.roa (raw, json)
Hash identifier:          /KCZvw1sB+Ar9S9eSZpQeZafCsgB/eZvUL822UlfkIM=
Subject key identifier:   86:7F:D1:0B:4B:DB:35:F9:B6:5C:35:16:51:4C:7B:3D:5B:B6:EE:C6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E3E5F31CDBD8EACE9CCEBA300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/05f30e9f-6ebf-35c4-9b34-331d4b41c014.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        166.152.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:31:cd:bd:8e:ac:e9:cc:eb:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=1d6599e8-7a09-498e-ae66-416acdd157d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c8:d2:77:f1:ce:e5:22:33:a4:4e:ec:43:2d:
                    00:26:37:fa:4f:06:48:8e:dd:b5:8d:ad:5b:dc:c2:
                    36:e4:6d:3f:c8:3d:75:90:d1:19:df:ca:ae:87:bb:
                    5d:d3:ce:90:0c:ab:2f:b1:60:6d:cd:82:80:7e:8a:
                    88:26:c1:6a:b3:d4:e2:b3:15:e4:e2:83:e3:3b:52:
                    c4:33:47:c9:e1:df:0f:84:ea:bd:b6:e6:91:a7:1d:
                    8c:56:f7:07:39:9d:71:46:6f:ce:7b:db:79:35:00:
                    b4:ea:19:09:a2:53:52:f6:d8:ae:20:84:a7:62:28:
                    a9:db:b7:82:68:cd:89:c0:67:e2:6a:21:9e:bc:94:
                    49:e9:9c:60:20:16:eb:95:69:e9:42:07:d0:cd:2c:
                    16:79:49:6f:23:1c:46:20:7d:03:f3:a5:45:ed:8f:
                    cb:c3:37:28:6f:f9:0b:72:1c:3f:02:a9:ff:bd:fc:
                    09:70:29:27:bc:b2:c7:44:26:72:f6:db:0e:e2:4f:
                    ae:82:32:65:dc:c1:a3:51:95:02:c3:00:ec:2e:27:
                    6e:72:a2:03:1a:9e:25:5a:9c:ff:a0:b7:38:c2:a6:
                    c8:52:9a:a1:43:6a:08:47:52:be:09:88:e8:2a:83:
                    a7:9c:63:62:96:65:6a:c4:54:f6:65:77:8d:45:aa:
                    8f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7F:D1:0B:4B:DB:35:F9:B6:5C:35:16:51:4C:7B:3D:5B:B6:EE:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/05f30e9f-6ebf-35c4-9b34-331d4b41c014.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.152.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:82:98:e5:83:58:cd:c9:f5:1b:8b:22:80:9e:89:a7:4d:6d:
         02:da:9d:e0:1e:90:b4:09:a0:fa:db:70:6a:ac:61:35:39:68:
         4b:76:3f:35:9b:c6:1a:d3:ce:2e:32:06:14:e9:be:ce:42:58:
         63:b2:5d:6b:6c:54:b2:4b:a9:f2:cb:48:d0:71:1f:26:4f:a4:
         de:c3:26:b4:7f:c7:9e:86:f3:ab:bc:3f:44:c7:6c:28:a3:29:
         44:92:ce:e1:7c:ad:00:d3:a8:4f:29:83:c1:0d:64:6e:01:7e:
         a6:f4:18:80:28:24:1d:c2:23:15:56:0c:1e:9d:51:f9:b5:cc:
         74:5e:71:59:22:74:34:ff:1c:aa:95:16:b6:a0:db:8a:2b:bc:
         4e:28:e7:c2:fa:d2:f6:f2:14:89:d8:c9:ec:7b:cb:ac:f3:d3:
         2a:48:24:d8:65:21:6b:b4:05:c0:d1:69:d0:b8:c6:bf:bc:a2:
         3e:3b:2c:18:ff:c6:0b:89:32:6e:40:e9:ef:95:61:fb:9d:05:
         f5:4d:04:e8:4a:df:2a:15:89:52:d9:65:c8:f4:8a:12:61:02:
         67:30:6b:63:af:96:4f:b0:36:13:7d:1b:dc:96:8b:b8:06:c1:
         43:6e:8a:8f:d5:40:e2:4c:8f:af:56:08:76:60:d9:5a:c0:f4:
         40:21:07:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:35:01 2026 by rpki-client