Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/48ab49b0-698d-3d6f-b500-a91cc1d91ead.roa
File:                     48ab49b0-698d-3d6f-b500-a91cc1d91ead.roa (raw, json)
Hash identifier:          WP3nWuZzFCpbDD3nqFUm59/cUPOlxWCDb+Jl4N/qZ5M=
Subject key identifier:   D3:C4:25:4F:38:D7:CD:FC:1A:0D:81:0E:D2:B4:89:FE:50:D2:B3:E8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D5E1A42E9FD7F88170C4DB580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/48ab49b0-698d-3d6f-b500-a91cc1d91ead.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     22394
IP address blocks:        166.168.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:42:e9:fd:7f:88:17:0c:4d:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=83e678fe-4bce-4d73-adde-c8f42becfce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8b:5a:da:8d:c5:f2:af:71:d9:5a:b1:7e:19:
                    0d:11:1e:82:85:ea:b1:54:7b:8b:0b:22:86:d8:63:
                    4d:9e:a8:ba:28:d6:a6:86:72:79:15:13:12:27:51:
                    67:ed:66:37:7e:63:a7:c0:4e:ed:8e:a4:a7:0f:36:
                    2f:d5:8a:7d:a5:65:a4:8f:f5:09:da:f5:85:bd:14:
                    e0:41:2a:a7:09:34:9d:d3:16:9b:3a:c6:bf:11:65:
                    fb:d8:db:16:78:d0:6e:4a:ef:ce:2e:36:c0:ec:84:
                    7e:6b:a5:b7:c6:18:11:2a:77:5d:55:b5:c1:f2:f8:
                    29:17:b0:b3:06:55:9f:95:3e:fe:5a:50:bf:c1:fb:
                    aa:a9:8e:b1:ef:cb:19:0b:6a:9a:41:1d:bd:b8:ae:
                    41:ca:e3:15:e5:69:94:2c:be:24:36:25:d6:96:88:
                    2a:ba:52:f9:be:4c:95:2b:84:5f:79:cd:6c:c3:ed:
                    fb:05:22:a3:8e:ef:fd:85:6c:99:0c:0e:ee:67:f1:
                    61:8f:7c:b6:15:c1:5d:2a:38:91:b6:71:84:33:64:
                    8a:d7:23:e7:ae:09:b6:32:d4:85:21:65:ee:23:bf:
                    51:0c:21:e0:02:e6:af:45:dc:1a:f1:d5:f2:6c:91:
                    d6:c6:e5:ac:3f:65:72:04:be:5b:ed:1b:3c:02:51:
                    9a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C4:25:4F:38:D7:CD:FC:1A:0D:81:0E:D2:B4:89:FE:50:D2:B3:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/48ab49b0-698d-3d6f-b500-a91cc1d91ead.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.168.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:b9:72:db:d0:2a:71:ce:a5:15:f2:9f:88:49:d3:8d:1b:b0:
         c1:c3:3a:aa:28:6d:3e:ea:6a:8b:d9:da:c7:56:03:90:0c:52:
         ea:5e:e7:44:7d:ed:81:1a:cf:f4:ab:bd:0c:d8:f7:49:06:4c:
         08:75:7c:75:82:bd:a3:fa:2e:8a:dc:4c:83:39:44:a9:b4:fa:
         26:84:67:56:9f:d2:e6:22:b8:aa:75:8f:87:13:c5:75:88:65:
         14:9d:af:84:dc:c2:68:cb:87:9e:5e:88:88:91:95:1a:43:eb:
         10:f9:56:10:e5:48:2a:40:2a:dd:77:ba:12:aa:cb:c7:22:ad:
         97:59:0f:d4:79:c3:1e:ba:f3:e8:3f:44:f7:27:4f:c5:2a:bc:
         c6:22:78:b2:bc:ec:1d:d2:cb:14:88:29:5d:65:46:4d:63:e5:
         d0:ba:cc:5a:3b:24:e1:0a:22:22:0c:51:d1:e6:5c:75:41:9c:
         55:d0:b3:7a:20:94:9f:fd:83:bc:1e:5a:c1:b6:c8:e5:2e:7c:
         b2:7e:f8:c1:0f:11:0f:6c:3f:f6:66:2e:0e:a2:6c:5d:db:8b:
         5c:84:96:da:ed:a9:a7:35:ce:c6:35:0d:c2:9a:03:b7:23:59:
         8d:f5:ed:d8:d0:bb:cd:2e:ce:fd:4b:b3:16:c3:bd:74:f0:78:
         c7:11:fd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 18:26:12 2026 by rpki-client