Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4272ca1d-0b7e-3d27-8a51-79139a3ebeea.roa
File:                     4272ca1d-0b7e-3d27-8a51-79139a3ebeea.roa (raw, json)
Hash identifier:          AaojcHjkvNMn4qXnHR+u7k+Zsfx/6VWVigYNPoCucpU=
Subject key identifier:   3C:F8:C2:F3:48:B1:96:F5:0F:E3:B2:3F:B4:97:13:10:E7:63:CC:5D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D5E1A588A76230A94B6530680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4272ca1d-0b7e-3d27-8a51-79139a3ebeea.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     6167
IP address blocks:        166.157.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:58:8a:76:23:0a:94:b6:53:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=e43ee6a9-4a61-4fab-9801-dd6050f22e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:73:1d:88:3b:c6:36:ba:6d:d9:c3:71:a1:58:
                    fa:24:2a:f5:0f:98:bd:ff:2b:c1:80:09:f6:57:7b:
                    07:dd:73:db:9d:0e:15:c3:85:7f:24:35:20:32:34:
                    70:c3:b8:fd:c2:9d:25:e9:b5:1f:75:c2:3e:ea:1d:
                    06:1e:d9:19:7a:4e:10:34:0f:1b:f8:9f:a7:f3:4a:
                    44:88:d8:8d:b9:bf:89:d9:2a:0a:c3:f1:6c:ed:5e:
                    39:73:e0:4c:3e:a6:2d:fc:66:8c:01:52:9c:c6:de:
                    c5:ee:04:a4:14:c6:5d:a7:1b:c7:ec:40:b5:a5:f1:
                    08:e0:c1:9c:d8:04:7c:2d:c4:b3:9d:d4:54:ae:20:
                    a0:30:fe:6c:29:cd:90:31:5f:fc:15:83:c4:f9:6e:
                    c9:f1:bf:32:4b:94:ae:c3:d3:60:e0:46:fd:81:b7:
                    81:f2:01:54:4e:ee:d2:ef:2d:77:f9:90:2b:e1:1e:
                    9c:31:5e:e5:8c:45:54:eb:ed:74:85:96:54:e6:b2:
                    34:e9:52:29:13:53:87:d6:2a:57:c5:d4:00:3c:10:
                    f1:17:a0:b4:92:a6:00:49:c7:cb:76:46:e7:32:c6:
                    3a:f4:85:88:85:5c:a2:75:83:0d:eb:74:52:36:25:
                    80:b5:89:7e:16:c0:b4:18:5e:83:af:7f:ec:0a:6f:
                    57:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F8:C2:F3:48:B1:96:F5:0F:E3:B2:3F:B4:97:13:10:E7:63:CC:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4272ca1d-0b7e-3d27-8a51-79139a3ebeea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.157.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:cf:35:a0:2c:53:67:02:88:10:b3:73:f8:50:9f:e5:24:cd:
         6b:ed:98:a8:9e:c3:4c:3f:f3:29:2b:e3:13:cd:f6:03:f0:24:
         01:76:21:2f:79:92:64:00:0d:75:77:a4:f4:69:c8:4a:e8:e1:
         51:ef:1f:fc:79:36:9a:f7:22:09:dc:17:b5:5d:a2:da:6d:fd:
         a8:33:a3:ff:b6:ce:5e:e7:39:82:47:d6:ea:27:90:b2:b3:86:
         bc:58:50:34:3b:09:16:d7:db:ba:6f:84:22:e2:b3:81:59:dc:
         b0:d9:00:c0:f1:5a:16:c8:eb:f7:a7:a5:ff:3a:07:c1:b0:04:
         59:37:00:e1:df:be:ce:55:66:d6:68:e5:73:a9:99:44:cb:c3:
         1a:bb:64:c8:5e:e1:ae:64:3b:2f:31:9b:f0:0b:b9:d6:fc:b7:
         22:77:6b:d5:c6:83:9e:5f:7f:f1:f2:12:5c:34:c1:ec:c5:3b:
         6f:b5:74:ce:16:29:25:81:fd:3a:3c:ab:68:3c:ac:5b:6f:88:
         e7:99:3a:c5:d5:0d:bb:3e:b1:f1:ce:7a:ab:6f:c1:8f:7b:eb:
         b2:a0:16:a3:71:69:57:68:23:72:64:05:d4:ed:d7:ff:3a:b3:
         0c:92:09:5a:db:78:ad:37:e3:b5:e5:c2:55:eb:dd:42:a2:d2:
         e3:ba:c4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 19:34:36 2026 by rpki-client