Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/820eb8fd-2cfc-3c79-9a20-b2ae6129b4a6.roa
File:                     820eb8fd-2cfc-3c79-9a20-b2ae6129b4a6.roa (raw, json)
Hash identifier:          o0yjz95yZ+EwCZ0ne0flj4QJ99mUawQaDY/MwgLMl0A=
Subject key identifier:   C6:8C:3B:14:A8:60:0C:A6:00:35:F3:23:B9:B2:8D:CD:28:8E:49:5A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EE0C2247DACE4788AF0686E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/820eb8fd-2cfc-3c79-9a20-b2ae6129b4a6.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        166.161.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:24:7d:ac:e4:78:8a:f0:68:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=f15c36d9-d2ca-4678-9821-03001ec60ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cd:64:7b:f0:5e:3d:8a:72:a7:dc:cf:5a:9e:
                    4e:eb:14:78:9c:a2:39:d5:02:83:fb:70:fe:c7:a5:
                    5e:96:a8:42:c1:9d:0b:35:c0:2f:82:97:15:de:19:
                    ac:59:4c:2c:a2:58:8e:93:8c:98:c3:66:11:af:8b:
                    35:f4:18:e5:d4:80:dc:f8:bd:da:cf:a4:f5:56:1c:
                    9b:8e:a7:3d:65:a3:c7:a4:c3:fb:21:8d:30:29:cc:
                    0c:4b:28:f1:9a:3a:3f:04:0f:03:9e:f1:cb:80:3c:
                    06:fa:ab:6f:c1:0e:25:bb:29:4f:34:20:2a:94:7b:
                    3c:24:30:1e:df:d5:ac:e9:f0:0a:c7:fc:df:5c:f1:
                    c8:72:af:b2:f8:90:a8:a5:1d:5b:60:3d:e4:ef:4e:
                    c3:26:c4:81:b0:46:56:11:41:46:a6:29:6a:df:42:
                    d3:46:c8:5e:08:f8:1b:e5:f3:b3:f7:bd:2f:84:dd:
                    0d:a8:20:66:bb:00:cd:43:d2:63:23:b6:9e:48:16:
                    a9:cc:ab:f6:9a:18:bd:47:27:15:ed:6f:c5:36:31:
                    39:84:a8:6c:56:af:60:36:6b:31:66:f0:66:42:09:
                    52:d6:c9:dd:9c:b3:4b:89:26:3d:4f:66:72:71:f3:
                    17:30:4d:a4:7f:f4:73:e7:fa:8f:86:85:21:13:3e:
                    76:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8C:3B:14:A8:60:0C:A6:00:35:F3:23:B9:B2:8D:CD:28:8E:49:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/820eb8fd-2cfc-3c79-9a20-b2ae6129b4a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.161.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:61:e3:c8:fa:6e:75:32:c1:6b:13:f6:67:3f:12:87:64:82:
         09:af:41:0d:24:b0:c2:94:06:5b:70:f3:3d:4b:2a:39:17:53:
         6a:77:07:01:6f:9b:e7:27:76:db:45:65:ef:bb:1d:88:2b:13:
         12:2e:d7:c7:cd:95:2b:e0:c0:69:cf:fe:d2:c7:f1:13:6e:f4:
         3f:bc:79:b4:80:0d:1f:5a:60:ba:be:e3:6c:d1:40:99:31:98:
         ba:1a:94:50:13:00:3a:6f:fe:ac:45:35:14:19:01:a8:4b:a5:
         7d:83:1b:c6:8b:66:27:b9:18:26:db:17:4f:db:1a:32:c8:d7:
         34:b3:af:ae:69:e2:5e:48:5a:bb:56:c8:49:49:ff:ba:e1:5d:
         9e:ef:5c:3c:5a:53:07:14:09:4c:31:9b:c1:26:7a:a5:43:24:
         30:ca:f3:89:2d:fa:ad:dd:db:19:ee:36:e3:84:c8:03:56:e4:
         1a:9e:da:af:80:82:3c:f7:fb:38:09:4c:96:7f:6e:a7:35:99:
         97:86:d6:3d:44:0e:2a:e3:22:88:a9:79:d6:72:3f:a7:19:54:
         36:d6:38:f0:9b:de:ee:58:b0:46:37:78:c0:5c:52:8e:34:ca:
         8c:c8:24:84:26:29:4b:d7:b8:0a:04:42:fc:8b:8f:89:f3:05:
         1e:1e:62:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:46:51 2026 by rpki-client