Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24a5329b-f1f9-30d2-a278-edc4fe3f2172.roa
File:                     24a5329b-f1f9-30d2-a278-edc4fe3f2172.roa (raw, json)
Hash identifier:          2QEkELeraNxXzC5R+mP1gMTWtMlN9GqmogZow5HS9Yk=
Subject key identifier:   0D:72:1D:E0:DF:23:E7:A2:84:4F:D4:62:6B:CE:D7:83:BD:DE:18:CF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EE0C21A0B818DF917BE076E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24a5329b-f1f9-30d2-a278-edc4fe3f2172.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        166.239.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:1a:0b:81:8d:f9:17:be:07:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=3c8a5030-0af4-4c1e-96dd-8192c1d9d280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0d:4f:55:2d:e6:71:f7:91:37:b6:38:12:9a:
                    db:a1:f1:53:9d:20:5a:ab:83:fc:e9:c8:11:c0:16:
                    8f:4d:68:2f:dc:a3:33:2d:19:90:71:04:ef:11:a2:
                    3f:e4:aa:98:21:32:ea:87:91:be:57:25:ab:ab:90:
                    7c:70:cc:31:24:4c:86:9c:4a:cf:af:34:f5:66:50:
                    49:4e:bf:12:21:e5:e1:16:2a:81:e5:70:bb:61:af:
                    f6:e3:6a:a9:d7:47:3a:17:0d:c7:64:30:af:f5:4a:
                    17:57:2f:f7:8e:d1:a5:bf:d0:b1:69:7d:e9:ee:47:
                    67:cd:d4:cc:7c:85:02:da:6a:1a:a6:42:55:04:08:
                    b3:1d:1e:c3:b4:fb:41:cf:eb:dd:93:e9:7d:25:e6:
                    d1:f8:00:7c:50:81:bc:e6:15:09:c0:a3:06:27:da:
                    2a:1e:6a:f7:db:7c:87:ce:95:75:b0:a4:6d:7f:ee:
                    5d:10:b0:33:40:31:16:25:89:63:d4:2f:fa:8f:75:
                    c6:47:ee:9c:28:95:35:0e:8b:57:f2:e6:4b:fd:83:
                    45:d0:f4:33:53:97:be:a5:03:03:28:da:13:ed:0f:
                    b6:81:0a:a8:8e:49:56:9e:b1:f2:f4:c3:5e:a2:1d:
                    c1:56:e0:64:09:97:9b:44:eb:29:2e:28:f9:61:cc:
                    ab:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:72:1D:E0:DF:23:E7:A2:84:4F:D4:62:6B:CE:D7:83:BD:DE:18:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24a5329b-f1f9-30d2-a278-edc4fe3f2172.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.239.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:d9:97:22:3e:67:0f:09:e0:44:93:e5:ab:38:80:5e:53:24:
         f8:8b:4c:e9:df:97:55:8a:f1:a2:cf:be:05:3a:7e:76:0d:3c:
         b1:59:c5:4c:79:e2:b2:9b:17:c3:58:4b:7e:1d:80:ec:3d:33:
         5e:67:4c:6b:35:16:e7:4a:08:4e:3e:86:60:94:fd:01:a9:57:
         1d:53:80:98:ec:82:e5:26:87:d6:66:60:ef:26:3d:c8:42:ef:
         2a:b0:33:4a:cb:7c:61:50:63:05:77:71:ec:dc:ed:2d:99:4b:
         fc:9b:3c:22:8f:41:56:3f:c1:d1:ee:f1:22:6d:38:d4:5a:ea:
         b9:23:45:50:50:dc:d8:69:fe:52:b4:6d:7b:4b:96:c8:4d:ac:
         48:b5:b4:14:ee:aa:a2:36:9a:29:4d:ad:77:50:97:35:57:bb:
         d9:a9:34:b9:7d:fa:11:90:ef:47:1c:d8:1b:fa:51:e9:18:f9:
         16:2d:e0:a2:e0:4e:e0:cd:6e:05:08:b5:67:05:db:f6:94:10:
         ce:9f:02:b2:92:5f:6f:31:ec:5c:b3:94:d7:48:a7:e4:ab:d1:
         92:c1:73:f7:e6:fe:47:29:4d:f0:b2:7b:ec:19:f6:1c:a2:0c:
         e1:3e:91:bb:e2:d0:04:32:91:66:17:e1:25:64:22:4f:73:24:
         81:7c:81:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 20:53:08 2026 by rpki-client