Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e4c583e-c0b3-3d19-840e-9b209555157b.roa
File:                     5e4c583e-c0b3-3d19-840e-9b209555157b.roa (raw, json)
Hash identifier:          PZNyHhSqWasxBGkYbITolZOo2icNCfwp/O34xSdJbHs=
Subject key identifier:   3C:A8:84:06:EF:9C:59:02:0A:1F:C4:A2:6C:B8:8D:D4:42:64:B6:5A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EE0C1E5E2FE9DAAB0F0FD8300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e4c583e-c0b3-3d19-840e-9b209555157b.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     22394
IP address blocks:        166.239.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c1:e5:e2:fe:9d:aa:b0:f0:fd:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=0554a897-a036-47be-b80f-8c889d98fce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b0:5d:80:c8:58:e3:29:4f:2d:7e:b5:54:79:
                    85:cd:71:50:f1:26:ea:e4:88:1c:10:1d:31:27:25:
                    a0:99:87:e9:fa:36:a0:1f:c3:56:ea:5b:aa:36:18:
                    96:8f:33:6e:66:1e:bc:ed:0e:96:f5:85:63:ec:4f:
                    f0:d9:8f:c8:7f:63:ce:06:e0:59:5b:50:93:80:4d:
                    b9:12:6e:6c:6f:1f:e7:c1:14:64:8c:2f:5b:09:a2:
                    05:23:0a:7e:4b:79:8c:8c:34:41:83:29:b0:74:0a:
                    ab:1c:09:bd:6d:d0:71:7f:32:b6:dc:02:2d:64:91:
                    81:97:fc:26:78:8b:07:f9:d4:c0:00:fc:00:c0:f8:
                    ca:3b:61:31:e8:df:50:f7:e2:de:99:45:1c:b7:18:
                    4d:18:31:55:3d:ba:28:59:3a:09:e3:e7:36:f7:38:
                    8c:4b:46:99:db:85:88:b8:ff:4f:ec:11:63:12:62:
                    a5:2e:ec:be:96:6d:57:a1:a1:4f:f6:5c:0a:75:93:
                    cb:24:bf:49:50:f1:67:25:1c:bb:fd:dd:61:85:f0:
                    c4:80:d2:5e:15:db:7e:c7:cb:00:8a:62:3b:4e:45:
                    d0:64:a8:73:8c:7d:4c:62:8d:38:dc:4d:dc:47:ed:
                    f0:60:66:d9:95:d2:12:6c:ea:05:29:24:50:4b:8f:
                    e5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A8:84:06:EF:9C:59:02:0A:1F:C4:A2:6C:B8:8D:D4:42:64:B6:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e4c583e-c0b3-3d19-840e-9b209555157b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.239.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:eb:19:1b:ba:92:48:1b:04:55:e9:bc:1e:26:5d:6c:71:2a:
         5f:4b:58:2b:33:ad:f5:3e:42:1f:a7:b8:6f:ea:cf:30:b5:03:
         86:3b:2b:00:86:dd:fe:17:38:c9:c1:78:56:ea:ad:30:18:e1:
         d3:1a:83:5e:8f:2c:99:e1:63:fa:39:85:f9:99:5d:78:fa:bb:
         33:ce:a1:ec:e6:1b:76:7b:04:ab:1b:b2:35:f0:0c:8d:9d:f4:
         fd:1f:c5:bb:4b:36:04:f9:a8:eb:41:77:b4:76:c7:08:9d:d9:
         99:cd:38:b7:9a:87:6c:ce:11:b1:dc:b9:d3:b9:11:32:b7:13:
         f0:00:35:5c:7d:14:ac:3e:12:a4:f6:97:08:e2:9b:a0:e6:43:
         30:9e:0a:40:ef:82:5f:9b:5d:23:42:2b:4c:39:b5:40:fa:1e:
         2d:9f:58:c6:4d:0c:ee:2b:09:85:f6:29:13:92:65:ff:1e:0f:
         91:4e:23:26:ed:9d:88:b6:c2:db:94:b5:c2:5b:27:6a:ed:da:
         fe:85:9a:76:ac:02:ca:3c:3a:ad:a1:b7:8a:f6:f9:2e:a3:82:
         4f:d6:74:eb:b8:f3:38:b3:c6:43:e5:1e:99:1e:59:68:aa:ca:
         e9:fb:e3:35:c0:79:a0:74:54:52:30:a0:f0:f4:aa:8a:77:d4:
         d7:93:37:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 22:51:19 2026 by rpki-client