Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72f1b626-c659-3c72-b55e-5f8023ce503e.roa
File:                     72f1b626-c659-3c72-b55e-5f8023ce503e.roa (raw, json)
Hash identifier:          XDfb8Xc+Qt2UIIbPLiItLlcBgDxYZf7oCXOvV4rIQac=
Subject key identifier:   5A:8E:71:E1:04:57:69:68:D8:3A:D5:78:E3:E8:C4:59:2A:E3:91:31
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EE0C1E167E7E5124A90D5B4C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72f1b626-c659-3c72-b55e-5f8023ce503e.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        166.139.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c1:e1:67:e7:e5:12:4a:90:d5:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=cd9e8f29-fc86-459d-b430-de6ff56578aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:38:cd:50:bc:fb:ce:d7:d8:5d:3e:e4:27:56:
                    e8:dc:18:03:d9:01:4e:25:c3:60:eb:cc:11:8f:66:
                    d9:fd:84:5d:a2:14:5f:63:24:bb:c8:d3:be:98:4c:
                    27:de:54:80:9e:dc:ed:85:6c:86:19:32:fc:d7:f4:
                    3f:ac:a8:61:3d:4f:11:18:71:56:c5:48:ef:ee:80:
                    29:2f:bc:51:e1:c6:f3:6a:ff:21:28:e2:a0:9e:9a:
                    c9:8f:57:d2:99:d4:db:96:eb:b1:f9:40:63:76:2b:
                    6b:bb:29:17:66:43:c5:9f:ad:43:59:b7:f2:d8:d7:
                    58:31:98:40:bf:d3:d6:e3:2e:b4:66:fa:a2:1d:dc:
                    ec:a7:f8:95:5c:5b:50:29:95:e2:8d:e6:d2:17:3d:
                    20:c6:74:bd:e8:f4:40:1e:07:5e:2b:75:99:48:d0:
                    89:10:66:d4:ba:06:b5:aa:d1:77:79:99:13:ad:4d:
                    51:92:4f:4a:03:c6:bf:a6:a2:05:b2:0e:b7:e6:e8:
                    59:d8:50:db:b5:95:01:50:87:dd:04:57:62:d5:ab:
                    85:1a:b2:31:d2:e8:c7:be:18:49:70:82:b7:d1:4a:
                    3d:a5:e1:43:15:9e:7b:7a:fb:f7:c3:c2:fa:11:fe:
                    df:dd:a6:0f:ed:1d:62:78:20:73:58:c6:c6:72:f7:
                    ce:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8E:71:E1:04:57:69:68:D8:3A:D5:78:E3:E8:C4:59:2A:E3:91:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72f1b626-c659-3c72-b55e-5f8023ce503e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.139.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:3c:d5:be:86:5e:70:ff:3a:bf:17:bf:67:47:28:08:5d:16:
         d6:fd:15:a9:a9:75:67:2e:86:09:16:27:76:ea:4f:26:a3:37:
         bd:4e:d8:4e:a8:7b:be:d9:2a:e7:39:55:b2:d4:7f:ef:25:97:
         f6:76:48:d6:f2:b1:58:45:ad:dc:5b:5a:23:5f:3b:8c:56:11:
         d2:8e:d7:22:dd:27:75:c7:be:e1:95:25:30:f8:9d:94:72:53:
         33:9a:30:75:88:9d:83:d3:f1:6b:83:01:82:24:fe:86:da:f5:
         91:bd:23:f9:e2:ee:17:63:bd:e5:aa:93:dd:59:0f:06:e8:e7:
         85:ef:63:73:1c:1c:be:d9:e3:72:db:af:e0:e3:58:af:c6:18:
         21:0f:da:0f:29:7b:92:8f:62:be:7a:3f:1c:64:91:d4:25:ad:
         d1:84:f7:73:c1:93:55:90:74:a3:e4:bd:14:76:6b:12:fb:3b:
         22:d3:d2:b1:de:ab:bb:b6:ec:4a:40:d3:fc:4a:bb:ee:cf:d2:
         dc:c3:b2:45:34:6b:e9:2e:dd:f8:d8:6c:91:c3:05:34:29:b7:
         d0:27:47:c0:bb:e5:ad:ce:a7:5f:b3:ec:12:cc:37:97:b7:24:
         f7:62:e8:67:8e:ac:8d:8f:94:d6:d0:43:2e:83:f3:f3:54:f9:
         de:74:f5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 22:53:08 2026 by rpki-client