Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a305196-a481-3b1b-847a-6b4ac6d43b65.roa
File:                     2a305196-a481-3b1b-847a-6b4ac6d43b65.roa (raw, json)
Hash identifier:          VmYYQpxeiVCYbVnyiQPEc4+M37qMldAzcPIn5MtzTrY=
Subject key identifier:   8F:10:04:65:CD:FC:8B:8A:C9:A5:43:0A:1F:ED:F2:D3:6D:7E:F3:31
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D5E1A7BDD37F1FDDD38048330
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a305196-a481-3b1b-847a-6b4ac6d43b65.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     6167
IP address blocks:        166.241.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:7b:dd:37:f1:fd:dd:38:04:83:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=18d0881b-4be4-4c1c-b129-9523da3ce920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:77:8f:ee:f4:fa:a3:73:49:ee:ff:d7:3c:cd:
                    a1:b4:d9:bb:66:c0:2e:ae:02:71:35:c3:4c:d1:84:
                    b3:ec:93:ae:93:a9:8f:ba:cc:0c:7e:8c:32:38:af:
                    86:65:2f:24:e2:93:a4:6b:3e:4c:a1:8b:e6:c5:e6:
                    f8:fe:b4:76:49:27:17:49:b1:bb:4e:13:a2:90:a5:
                    d4:07:fe:20:59:09:c9:e1:c4:a7:21:cc:56:28:71:
                    aa:48:14:b9:34:d2:13:7e:27:d3:31:f8:e7:43:55:
                    cf:66:41:b2:80:42:89:15:b0:c7:6c:90:09:2f:eb:
                    6f:b7:3a:f5:4f:5a:4d:cd:40:c0:54:b3:6e:a1:d0:
                    ac:e2:29:21:98:28:eb:d5:ef:3f:9f:8b:9f:d4:6e:
                    f9:19:c1:f3:08:e8:36:d2:5f:2a:fe:44:ce:f0:a9:
                    10:75:fd:90:79:60:a5:06:37:9f:32:3e:d8:20:2e:
                    ea:e2:3e:70:23:4b:2b:2e:eb:10:38:18:63:85:f2:
                    e8:37:c7:4f:8b:83:2e:c4:d5:7b:de:1b:a5:aa:7a:
                    00:49:11:9e:af:b1:18:e9:30:17:c2:12:0b:09:b9:
                    05:74:3c:b3:45:6d:9b:24:52:41:c1:b8:4c:68:a4:
                    c4:72:14:c7:2b:45:c1:72:96:be:e1:89:72:88:12:
                    1e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:10:04:65:CD:FC:8B:8A:C9:A5:43:0A:1F:ED:F2:D3:6D:7E:F3:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a305196-a481-3b1b-847a-6b4ac6d43b65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.241.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:8e:0e:41:40:35:6b:ba:90:06:a9:d8:89:47:aa:d2:04:70:
         d7:a7:c7:0b:e2:f6:5a:93:5e:9b:f4:50:c9:fb:c5:46:1a:c0:
         28:ba:2d:d9:e2:c8:a2:bd:08:4e:6b:eb:3b:37:33:33:6d:e6:
         4a:95:cb:16:e4:8e:37:14:5c:dc:3d:c1:d2:bd:11:ed:cd:d6:
         cb:8a:c9:cf:7b:29:13:01:43:17:80:89:15:50:e9:e7:ce:4a:
         5c:4b:b7:89:03:92:85:05:72:79:70:22:03:11:20:a7:78:76:
         3f:63:15:49:e9:39:59:c6:cf:ba:82:ed:eb:79:18:98:7a:6f:
         06:a7:7c:86:53:53:b7:8f:94:1f:b8:ae:2b:3f:b2:b3:b4:77:
         aa:d1:a4:6c:34:f5:d3:15:8c:08:81:ba:45:f0:00:62:8a:8d:
         64:3b:ae:a9:28:b4:fe:f0:c2:83:77:4c:c3:02:0e:80:cf:8e:
         b5:a1:bf:43:1f:3c:f7:d6:da:4c:d5:73:be:99:4f:77:11:9c:
         33:fc:5f:6e:7a:0b:15:65:17:5f:e4:a0:4d:57:cb:b3:0e:10:
         d8:7c:ae:43:f5:b2:1b:17:a7:e2:cb:50:e0:1f:61:a1:0d:19:
         44:cb:e0:24:96:d3:ce:51:6b:2d:37:aa:17:a0:d7:25:b2:27:
         98:f8:a4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:18:55 2026 by rpki-client