Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a305196-a481-3b1b-847a-6b4ac6d43b65.roa
File:                     2a305196-a481-3b1b-847a-6b4ac6d43b65.roa (raw, json)
Hash identifier:          DORKSWZJaJNesV6vWgMosxMS8cUCr+DCmJAsIS2Talk=
Subject key identifier:   E7:D8:65:5A:01:04:40:9B:1E:10:1E:4E:19:31:34:F6:B0:87:28:99
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EE0C21B1DC9B600EA6F0FAD40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a305196-a481-3b1b-847a-6b4ac6d43b65.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        166.241.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:1b:1d:c9:b6:00:ea:6f:0f:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=b2219ada-41ca-4a3e-8b66-e7b8a7ae2535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9b:27:5b:1e:d6:ed:93:67:a7:87:c1:ce:31:
                    0f:77:93:9c:b9:7f:2f:7d:0c:ea:f8:15:75:9c:2f:
                    e8:18:9c:d7:5a:54:8e:5b:5d:de:b3:22:fc:cb:1d:
                    41:c1:14:bb:3c:0f:dd:2b:b3:02:f6:90:c1:87:ab:
                    fc:bf:1b:38:e2:ea:28:29:c1:ad:89:95:3f:23:4c:
                    51:dc:dc:f4:10:bf:84:a4:6a:68:0f:23:91:73:52:
                    96:d1:4f:2e:6b:fe:a2:6b:d1:85:1c:ad:e6:ac:c5:
                    7a:69:6d:d6:68:87:b2:28:37:76:27:86:6e:a6:c2:
                    f3:3d:13:67:79:c3:00:32:65:f0:16:93:49:42:0e:
                    87:f0:46:b0:8c:0f:e4:af:36:ac:34:a4:6e:57:d4:
                    b6:79:eb:a9:b9:02:ad:99:de:19:1f:bd:bd:c6:c4:
                    b7:61:83:e2:83:87:62:e1:72:ec:1b:7f:a9:6b:bc:
                    3b:2a:5f:08:48:8f:70:f0:6a:0e:22:30:e0:dc:50:
                    c6:a0:9c:3f:a6:d0:01:b8:be:9d:e0:0f:44:4f:a5:
                    3a:a0:63:ca:78:f9:c3:3f:af:d0:88:28:43:c2:6e:
                    4d:a1:81:aa:b4:25:6c:dd:0a:9e:b9:63:67:a4:c7:
                    b0:6d:87:d6:7f:f4:4b:86:00:81:68:16:a2:95:9d:
                    5c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D8:65:5A:01:04:40:9B:1E:10:1E:4E:19:31:34:F6:B0:87:28:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a305196-a481-3b1b-847a-6b4ac6d43b65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.241.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:15:b2:bf:1f:12:b2:4c:5f:40:d8:98:6c:d2:7a:47:94:21:
         3e:98:09:ba:29:e7:10:c4:c4:9a:0f:e5:d7:66:b8:69:bf:0f:
         66:12:6e:73:02:c3:7f:c1:19:0d:a7:07:7b:46:9d:92:fb:7b:
         52:da:bb:80:a6:fd:ca:3d:85:36:e3:7d:6e:bc:e8:ed:32:fb:
         e8:e4:22:f6:92:b4:74:f5:62:9d:99:9d:8b:db:19:31:9c:44:
         81:9f:da:67:68:89:c3:0a:07:89:9c:56:28:44:64:3e:16:a5:
         3e:c2:21:94:04:d7:5c:9c:f2:68:59:1a:3f:7e:41:50:4c:fb:
         77:3c:5d:32:3d:43:be:ff:16:16:53:40:09:f6:43:0a:82:9f:
         ab:51:19:b2:e5:35:9d:ad:6d:e4:f3:c3:00:98:a4:4e:ca:9d:
         4a:79:c1:cc:d9:06:e8:ca:fa:2e:63:f4:a7:da:2d:5c:5d:da:
         36:b6:23:8a:9a:04:8e:4b:43:68:d2:9c:08:73:61:b4:99:02:
         71:53:d6:db:e6:a8:65:6c:52:f3:7f:6d:94:02:f7:13:f6:4a:
         84:06:5d:3d:cb:06:bc:8a:66:02:4a:fb:d9:22:b2:ef:6e:92:
         8e:3e:90:47:d7:b5:7b:f9:c7:7f:3a:45:94:b4:1d:59:75:d6:
         cd:26:e8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:48:35 2026 by rpki-client