Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08995c5e-d0b5-3c21-9434-2f0ad6e16885.roa
File:                     08995c5e-d0b5-3c21-9434-2f0ad6e16885.roa (raw, json)
Hash identifier:          JA4QD+ecRIWZkl1iaK0R+hn8kIbIveJNRkLBkw3/TTY=
Subject key identifier:   9C:2B:75:FF:5F:BE:B9:87:70:15:94:DE:25:F8:E5:90:D3:4D:BC:3E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E3E5F59056B998ADBC57BA0C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08995c5e-d0b5-3c21-9434-2f0ad6e16885.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        166.150.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:59:05:6b:99:8a:db:c5:7b:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=d1582349-e16c-4297-a605-6a84712dcf32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8f:d8:11:35:22:10:2d:fb:0c:77:ba:61:d2:
                    b8:d9:e1:13:6e:eb:27:1e:99:21:b1:93:57:b5:c5:
                    d9:e1:ac:be:f9:fc:3c:84:13:b3:31:5d:e5:97:97:
                    a4:7c:1b:04:1c:82:c6:4d:4b:e7:e3:03:67:03:b4:
                    20:7d:f9:b6:16:c8:a4:07:15:34:d4:43:7c:b0:d0:
                    56:d7:15:35:12:d4:b7:3d:eb:7f:ba:44:73:43:f2:
                    ab:61:eb:52:09:23:d0:50:49:ff:38:37:a9:e2:91:
                    9b:f1:66:6e:46:f9:b3:ec:69:df:32:e6:a6:69:74:
                    47:0a:81:b1:a1:25:e2:55:c5:51:c0:da:ec:6c:a2:
                    78:d6:e8:48:be:e5:60:59:48:af:53:01:4e:28:0e:
                    27:8a:1f:d1:a5:88:1e:a1:4d:e2:6a:d2:7c:e9:26:
                    f7:e9:35:10:70:c9:80:92:13:27:d8:50:bd:a0:8f:
                    b7:88:7e:56:17:cd:36:ad:6b:0a:88:06:83:99:7a:
                    45:3e:6e:b2:ec:9c:48:9e:9e:a1:90:a0:ef:01:33:
                    48:87:5c:4b:90:78:6a:fe:cf:1a:76:93:62:0d:fc:
                    fb:b1:f9:70:bb:1d:67:98:11:00:a3:d2:82:70:a0:
                    a8:d9:11:e2:c6:13:7c:65:4b:12:1b:0a:50:c4:33:
                    8b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:2B:75:FF:5F:BE:B9:87:70:15:94:DE:25:F8:E5:90:D3:4D:BC:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08995c5e-d0b5-3c21-9434-2f0ad6e16885.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.150.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:7d:11:d8:11:3b:73:6b:9a:18:e1:48:bc:2e:70:ab:e8:c4:
         d1:4b:81:b9:c9:e4:d9:f1:2d:db:fe:22:db:b3:fb:b2:33:fe:
         ee:d6:67:25:ba:ba:fa:34:c9:a1:04:7c:1c:bd:16:4d:9b:60:
         9d:29:32:d3:b6:69:1d:3d:06:27:5c:5d:dd:eb:3f:38:d1:68:
         0b:17:4a:b5:3e:36:5d:53:ed:8c:cf:44:f5:5f:e5:4f:69:be:
         71:a6:96:fa:76:7d:d8:23:40:e1:96:09:e6:07:83:92:ca:e1:
         30:54:73:48:4d:44:de:a2:cf:32:5f:c9:3b:df:81:2a:bc:ff:
         ef:d2:4b:b7:da:cb:9e:27:a0:51:3c:d4:96:24:07:ce:93:4f:
         72:dd:78:a9:45:4c:08:b0:0b:10:2e:80:94:45:5d:e0:74:92:
         24:30:ab:dd:37:3e:f3:58:8f:b5:9e:92:f0:3d:5f:c1:5f:92:
         d2:b0:51:39:83:21:d4:fb:aa:86:b5:65:a6:3d:75:99:23:3f:
         4f:dc:64:2f:4e:c8:88:54:90:6d:2a:a5:83:cb:50:a4:51:2f:
         4d:ab:f3:02:32:f9:cd:a6:09:f3:e4:3c:ec:25:5b:40:8e:2b:
         86:3e:25:84:55:61:fb:24:aa:9b:33:1b:7d:1e:51:e1:ab:de:
         46:3d:4d:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+X1kFa5mK28V7oMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk
ZDE1ODIzNDktZTE2Yy00Mjk3LWE2MDUtNmE4NDcxMmRjZjMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4/YETUiEC37DHe6YdK42eETbusnHpkhsZNX
tcXZ4ay++fw8hBOzMV3ll5ekfBsEHILGTUvn4wNnA7Qgffm2FsikBxU01EN8sNBW
1xU1EtS3Pet/ukRzQ/KrYetSCSPQUEn/ODep4pGb8WZuRvmz7GnfMuamaXRHCoGx
oSXiVcVRwNrsbKJ41uhIvuVgWUivUwFOKA4nih/RpYgeoU3iatJ86Sb36TUQcMmA
khMn2FC9oI+3iH5WF802rWsKiAaDmXpFPm6y7JxInp6hkKDvATNIh1xLkHhq/s8a
dpNiDfz7sflwux1nmBEAo9KCcKCo2RHixhN8ZUsSGwpQxDOLSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJwrdf9fvrmHcBWU3iX45ZDTTbw+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDg5OTVjNWUtZDBiNS0z
YzIxLTk0MzQtMmYwYWQ2ZTE2ODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFppZAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAId9EdgRO3NrmhjhSLwucKvoxNFLgbnJ5NnxLdv+Ituz+7Iz/u7WZyW6
uvo0yaEEfBy9Fk2bYJ0pMtO2aR09BidcXd3rPzjRaAsXSrU+Nl1T7YzPRPVf5U9p
vnGmlvp2fdgjQOGWCeYHg5LK4TBUc0hNRN6izzJfyTvfgSq8/+/SS7fay54noFE8
1JYkB86TT3LdeKlFTAiwCxAugJRFXeB0kiQwq903PvNYj7WekvA9X8FfktKwUTmD
IdT7qoa1ZaY9dZkjP0/cZC9OyIhUkG0qpYPLUKRRL02r8wIy+c2mCfPkPOwlW0CO
K4Y+JYRVYfskqpszG30eUeGr3kY9TeA=
-----END CERTIFICATE-----
Generated at Mon Jul 13 10:39:12 2026 by rpki-client