Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78fab221-c022-324f-8f4a-f8e337ab2bad.roa
File:                     78fab221-c022-324f-8f4a-f8e337ab2bad.roa (raw, json)
Hash identifier:          Ip6IiPxSfJYWn3rEiMosIVPc/5atQ5pi+07GD9WtJIE=
Subject key identifier:   A1:69:18:7C:20:65:EC:19:E5:14:D3:E5:8B:0C:A4:21:40:EB:FE:7E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EE0C1E55B7396C9E8770F0200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78fab221-c022-324f-8f4a-f8e337ab2bad.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        166.146.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c1:e5:5b:73:96:c9:e8:77:0f:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=eeaf58a4-9f9c-4fcb-9fa6-db17c73b48a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2e:dc:31:73:fa:c7:bf:15:33:9d:fc:8e:85:
                    56:4d:96:9e:48:1a:ec:d7:e0:0e:40:0c:6e:d7:51:
                    3a:bc:2b:15:30:98:b7:ac:10:d1:bb:ce:b1:99:c7:
                    11:ff:c8:3f:87:66:15:26:26:fc:e2:39:9f:ac:a5:
                    8a:e2:d3:4a:90:1c:5d:8d:2e:9e:d4:0b:b9:46:7d:
                    81:c3:d4:ea:67:fa:35:20:1a:aa:f0:1a:32:2d:b7:
                    6f:72:2f:de:fb:2a:39:05:44:00:27:31:da:e8:ea:
                    c9:f7:e6:4a:5f:f2:39:f7:d8:c3:db:68:b1:a7:9b:
                    04:4c:87:81:80:2b:1f:da:69:3a:c1:36:4d:0e:21:
                    4b:4a:56:ab:94:88:e4:eb:2a:c6:60:09:ee:51:6a:
                    64:c1:7e:0a:94:8b:7b:71:b2:4d:5b:0b:2c:14:9d:
                    8e:d6:31:ea:c4:c9:11:5c:6f:cc:48:1d:a0:83:e5:
                    f0:bf:82:c8:cc:55:8b:60:3f:6c:ff:71:23:8c:d1:
                    c1:6a:d4:5d:e1:d3:d4:89:ed:52:af:08:e8:d5:96:
                    43:6f:93:0e:92:66:6c:73:b0:8e:b7:1a:77:0e:1c:
                    77:7f:7b:2e:5d:52:ca:f6:f2:aa:69:13:3a:a7:e4:
                    7e:86:af:6d:25:55:ec:b6:83:02:f1:d2:45:15:ea:
                    f5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:69:18:7C:20:65:EC:19:E5:14:D3:E5:8B:0C:A4:21:40:EB:FE:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78fab221-c022-324f-8f4a-f8e337ab2bad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.146.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:e1:f7:30:44:c6:4c:48:30:e1:5d:4c:a1:ea:bd:60:3c:b4:
         b5:ca:3f:2d:4a:67:b9:05:ac:ef:f0:82:d5:45:78:82:91:9e:
         1d:57:2b:b3:cf:31:cd:d4:98:69:6f:c0:9b:69:1a:49:73:13:
         ef:16:7a:f2:bc:7b:0e:81:7e:af:b8:4d:91:17:42:93:c1:b3:
         57:d3:1d:e7:0d:ed:fa:4d:8d:c5:45:33:18:12:5c:61:d8:e9:
         a9:28:4c:94:c7:9c:21:b8:d1:6c:99:00:02:73:af:a5:be:34:
         25:ac:08:4b:26:68:c8:c2:c6:c6:ab:83:4b:04:1e:18:d2:a4:
         1d:f1:f2:f7:26:0e:3a:43:03:5a:ca:bd:73:e8:20:81:ec:2e:
         2f:84:64:73:29:68:4b:6e:f0:33:bf:db:55:cc:a4:1b:f3:3c:
         13:a7:8d:fa:e8:1b:1b:61:3a:c7:12:eb:7c:07:f3:90:ad:20:
         63:d9:6b:14:6c:20:65:5e:ae:c7:65:61:df:c0:0f:c6:1e:24:
         9b:b7:6e:8b:d3:27:70:3b:5c:cb:3a:08:5c:46:14:29:b0:04:
         8a:95:89:47:54:ad:30:28:4e:0a:0f:f8:6f:fc:bb:69:82:ec:
         21:9b:2a:c2:b0:50:62:28:e4:27:58:a0:81:cd:03:fc:11:a2:
         0e:a9:4c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 20:55:06 2026 by rpki-client