Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f97ec5d-475b-3515-b1a7-301e5470e728.roa
File:                     5f97ec5d-475b-3515-b1a7-301e5470e728.roa (raw, json)
Hash identifier:          LFaYH26HyFOvvdwAaiYz+VaJcXkXXf/rep4v9OaCL50=
Subject key identifier:   42:51:81:20:37:AF:D4:41:8F:C2:0A:9D:2A:1F:E7:42:20:C3:70:8C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E3E5F53720DD9FB33F90A8580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f97ec5d-475b-3515-b1a7-301e5470e728.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        166.147.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:53:72:0d:d9:fb:33:f9:0a:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=bbe3500d-3359-4660-bf9f-c9c54efa7e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e8:c4:7c:bc:a0:57:bf:d9:49:b5:d8:56:a4:
                    15:34:22:a2:fd:1f:f6:61:7b:c2:18:08:0c:2f:44:
                    cf:8f:90:d2:df:d1:04:63:8e:2c:bc:d6:52:9b:93:
                    d8:cc:bf:fe:07:bb:e8:00:10:60:ab:62:62:63:f9:
                    81:56:47:da:4a:c5:53:9d:85:bd:9a:39:bf:32:00:
                    ff:27:60:a1:d5:e9:0b:ae:2e:ad:40:93:54:f8:06:
                    07:49:c9:f7:1e:3a:26:60:84:11:e5:9a:9a:86:5d:
                    10:64:f1:f2:a2:88:d1:48:0b:c4:ee:59:25:74:49:
                    73:34:a2:df:81:e6:9b:94:0c:da:f1:0d:a4:87:49:
                    bd:db:b0:78:6a:6b:79:36:5a:1f:58:b3:f0:67:1b:
                    81:c7:41:66:fe:8f:a8:a7:d4:20:2b:93:cd:ef:d1:
                    88:11:e1:cf:1c:4f:b3:d6:8c:62:25:b3:f1:2a:a9:
                    d8:84:52:1f:8b:dd:09:00:05:79:ae:38:85:e9:1c:
                    91:d8:72:23:f9:36:f6:b0:45:e8:30:79:7f:12:66:
                    1a:77:33:ac:f9:3a:31:b8:89:35:57:82:59:cb:12:
                    c7:35:8b:60:be:70:6e:05:c1:cb:f0:09:02:73:b6:
                    7d:f7:71:7b:c6:c9:af:b6:8a:94:a6:06:de:fb:37:
                    b0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:51:81:20:37:AF:D4:41:8F:C2:0A:9D:2A:1F:E7:42:20:C3:70:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f97ec5d-475b-3515-b1a7-301e5470e728.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.147.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:91:f3:9a:aa:e8:ea:24:f6:81:e4:18:73:7c:5e:08:ea:87:
         7b:aa:59:d5:de:87:a2:fd:d5:6d:90:f5:eb:2a:ee:60:aa:b5:
         b5:25:11:77:1e:e6:ef:68:35:65:d0:b0:06:2b:61:36:d0:5e:
         f0:30:7a:60:73:5d:85:da:5b:83:89:50:10:6c:db:7a:11:4b:
         71:0f:44:7f:70:d1:45:a4:05:c2:9a:a0:8a:49:ad:44:f5:6f:
         69:6c:59:c9:47:b1:de:86:05:ac:8d:78:48:85:5c:c7:9e:66:
         44:54:8c:9b:b4:ab:bb:d9:d6:c4:7f:e6:4c:ad:2b:9a:db:16:
         ab:df:6e:60:15:dd:d0:dd:99:d3:f9:c6:08:d6:a1:d9:5c:a8:
         4c:a2:c1:9d:47:20:71:27:ca:a2:03:54:09:79:6d:f8:f3:cc:
         0b:08:ff:fa:a2:dd:fe:c0:3a:1d:c0:a3:c5:51:c7:93:e3:d6:
         4c:18:38:a8:fc:1a:43:68:1a:d9:1f:bb:9d:5d:08:5b:7e:98:
         32:6c:c0:22:fa:61:1b:d2:4f:9e:03:1f:14:4a:4d:ce:51:46:
         94:1a:4f:28:25:35:e1:ad:75:0c:47:f2:6b:2a:91:c2:4f:57:
         bd:21:1c:93:91:d5:db:4b:ba:05:17:84:67:40:a4:0c:86:45:
         c6:77:e3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:39:06 2026 by rpki-client