Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/64c7e664-baa7-38be-810f-425f6e4c11fe.roa
File:                     64c7e664-baa7-38be-810f-425f6e4c11fe.roa (raw, json)
Hash identifier:          vnSUaNemLqYavbKDd6F2YffWOhLlxz2eTWCq9Nl+Ues=
Subject key identifier:   CD:6C:B2:A8:9E:93:F5:4A:B6:A0:30:8B:9D:F1:87:84:E8:CE:31:9B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E4588EB523D459FBC8D11FC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/64c7e664-baa7-38be-810f-425f6e4c11fe.roa
Signing time:             Tue 23 Jun 2026 22:35:10 +0000
ROA not before:           Tue 23 Jun 2026 22:35:10 +0000
ROA not after:            Mon 21 Sep 2026 22:35:10 +0000
asID:                     5650
IP address blocks:        47.160.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:88:eb:52:3d:45:9f:bc:8d:11:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 23 22:35:10 2026 GMT
            Not After : Sep 21 22:35:10 2026 GMT
        Subject: CN=0f4c5ade-9f1f-42e9-baa1-37d193123974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0a:44:bc:8e:d5:fa:e2:09:32:60:5b:99:88:
                    68:03:8d:7c:e6:de:04:e4:c0:07:4f:2d:bc:b4:e2:
                    27:0f:5c:23:9a:13:70:af:89:3f:4c:fc:79:17:49:
                    da:6e:bb:06:9c:82:79:91:26:92:85:d6:94:c5:78:
                    6e:75:b8:0b:d6:89:c2:ff:9d:e1:47:51:40:f1:ad:
                    12:0c:41:c2:8f:51:d5:3e:a3:5a:f4:39:aa:ef:05:
                    c1:ca:de:93:51:05:91:ec:e4:19:aa:32:03:3e:98:
                    63:e9:26:c1:96:b1:2c:4c:ae:83:18:be:39:44:39:
                    51:01:e2:0a:3f:05:2e:b0:d2:00:96:85:37:34:4b:
                    8e:7c:b9:9c:73:16:0d:46:51:4d:a7:76:40:21:c2:
                    1a:bf:3a:e2:17:59:f6:92:21:ab:b0:63:ff:51:c9:
                    36:58:c3:41:a3:44:f4:6a:0e:49:04:f8:60:b4:fb:
                    d5:1b:08:2d:fc:ca:f2:f1:b8:87:78:16:f4:9c:31:
                    ad:00:8e:66:a9:2c:da:d2:24:e3:c4:23:7a:b1:15:
                    58:f2:ce:04:b4:ce:c7:2c:f2:e9:62:e1:67:2c:0a:
                    9a:b7:bd:26:e9:38:3e:b8:18:7f:cb:b8:ac:4e:5a:
                    86:9a:50:05:67:c0:f0:34:61:ed:1f:2c:69:71:fb:
                    ef:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6C:B2:A8:9E:93:F5:4A:B6:A0:30:8B:9D:F1:87:84:E8:CE:31:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/64c7e664-baa7-38be-810f-425f6e4c11fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.160.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:0e:fb:a0:8a:1a:f7:07:de:ed:69:44:bb:e5:2d:cd:0e:b4:
         36:f3:9e:b4:64:9a:9e:99:49:fc:5b:dd:47:bf:c2:cd:3c:7c:
         48:9a:87:56:3b:85:06:2f:c3:ad:ff:e1:40:05:30:46:cb:42:
         24:5a:83:33:7e:48:37:7a:70:56:22:ee:42:31:88:21:66:d7:
         be:a4:5d:36:a4:6a:8c:1d:4b:b6:71:2f:f2:af:9c:c2:30:98:
         bf:27:71:db:23:10:ef:60:91:56:f2:82:b9:4a:3e:e6:70:cf:
         7f:b6:cb:8e:a7:a5:52:21:78:4e:b5:df:ec:db:36:29:35:b8:
         ac:a4:63:e9:46:63:94:77:0f:0f:63:2f:68:e6:8b:a4:62:65:
         6b:16:8b:e6:8b:bb:33:bc:c6:d5:0b:8a:68:6a:f0:05:c0:c3:
         ff:99:8e:81:73:01:d6:46:c2:1a:17:95:f4:68:7a:ec:d7:e4:
         2e:4c:c4:ba:78:63:54:4e:c1:fe:5a:33:c1:12:f6:e5:0e:3b:
         47:27:e2:97:24:6d:6d:7f:42:02:9f:08:64:cc:ea:cf:66:23:
         57:4d:b9:f0:e9:8e:17:50:1c:e3:ca:16:f2:b6:07:a7:3e:9e:
         59:34:ce:49:2c:c1:36:b3:ed:01:9f:bb:06:5f:a3:4d:6e:a2:
         60:ce:0c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 11:32:35 2026 by rpki-client