Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/531ea1c0-1bbc-3167-b48c-c6a2ed9e53d4.roa
File:                     531ea1c0-1bbc-3167-b48c-c6a2ed9e53d4.roa (raw, json)
Hash identifier:          KDUVJuKL1vexhA/NUG4D9sAdPB4OAbXJILUuAOmT1EE=
Subject key identifier:   13:6A:43:E0:46:5B:76:9D:62:ED:55:89:A2:49:5C:3E:A9:31:07:0F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EE0C21DE3EDCAE545572CEE40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/531ea1c0-1bbc-3167-b48c-c6a2ed9e53d4.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        166.139.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:1d:e3:ed:ca:e5:45:57:2c:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=10deaa5b-7f68-4b20-916d-f60c30725b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fc:c8:cd:b1:f1:c8:d9:f4:14:71:37:70:d2:
                    f9:49:2e:b2:85:fd:a3:65:71:78:ef:3c:42:ef:a1:
                    c1:45:91:e5:41:a4:20:00:51:5e:df:88:c9:de:41:
                    f6:0a:44:f7:0c:4c:b8:55:77:6c:80:bc:6b:47:2b:
                    0d:09:1e:b6:05:df:f6:57:66:eb:1f:1e:cf:b0:11:
                    a6:9b:16:5c:6f:29:12:9e:d3:77:8a:31:2b:b3:be:
                    67:d2:80:75:72:38:8b:79:33:6a:42:73:51:98:5e:
                    d7:01:fc:8b:f6:00:cb:ae:d9:e9:98:22:8d:95:d2:
                    f5:fc:cb:af:19:2c:98:71:a2:36:70:d3:dd:63:57:
                    3b:64:8b:7e:38:90:b3:9d:8f:b3:30:ce:61:4a:71:
                    ab:57:2c:d0:90:c2:e2:47:62:8b:7a:e0:a0:a8:69:
                    2a:53:e8:84:f9:c7:2e:29:86:11:28:58:a8:7a:67:
                    75:29:74:de:48:7c:78:9a:56:57:9e:c0:ee:da:e5:
                    09:72:3b:c7:a7:e4:0b:bb:09:6f:60:81:f6:01:d1:
                    bb:6b:5f:57:04:7a:20:0b:39:19:9d:8f:a7:32:63:
                    f9:a8:d5:9e:f2:28:4c:59:69:3a:0d:11:43:af:82:
                    9e:dc:8e:39:f2:ea:ae:ed:8b:6e:68:b8:c6:87:02:
                    53:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6A:43:E0:46:5B:76:9D:62:ED:55:89:A2:49:5C:3E:A9:31:07:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/531ea1c0-1bbc-3167-b48c-c6a2ed9e53d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.139.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:2f:92:7f:4f:60:cc:b0:eb:20:d0:d6:13:2a:59:78:d9:8c:
         c6:83:98:8a:c2:8c:50:a3:9f:85:1c:f0:d6:cd:90:cd:27:66:
         31:9d:68:60:cb:5e:f2:37:d0:f8:f9:75:d4:f7:69:8d:2d:db:
         ec:c7:bd:94:50:02:7d:85:47:70:05:09:59:a2:b9:91:f9:b3:
         de:c3:57:84:3c:ce:fb:33:ec:42:38:31:00:14:a0:d4:41:92:
         3a:b9:92:db:30:1f:67:ca:0c:0c:0c:b6:a1:cc:12:74:03:43:
         d7:99:8e:b7:52:43:cd:27:79:8b:91:1b:29:05:5c:ae:a9:75:
         03:85:35:f7:bb:7a:e1:b9:7a:39:34:0c:e3:20:1d:22:6c:63:
         56:1a:56:38:80:28:f8:97:e4:73:93:ef:05:8c:4f:64:44:a3:
         29:13:3f:e8:f1:79:4a:3e:50:22:73:97:68:f5:3b:ed:5b:3d:
         f7:cd:dc:c8:b1:9f:39:be:26:82:15:60:46:57:5a:fd:c7:45:
         e3:ce:b1:77:38:47:2c:6e:4f:a7:fe:18:42:82:d3:a8:e0:7e:
         2b:2f:c8:0a:f6:e8:b8:04:0d:fc:12:fd:c2:c3:41:1c:11:2e:
         8b:97:ed:33:39:fa:0c:1e:8b:40:4f:db:dc:27:52:a7:b6:a2:
         a1:79:d1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 23:50:59 2026 by rpki-client