Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b17d014-2d3c-3920-8397-e10cbad0f07a.roa
File:                     8b17d014-2d3c-3920-8397-e10cbad0f07a.roa (raw, json)
Hash identifier:          SvsCcmjubA8gwxTR6IsosiCiIMJtZVd4DDtLIkJrIVM=
Subject key identifier:   99:5C:27:8C:CF:48:12:13:2D:74:42:DC:D7:CF:EB:6B:C9:C2:C9:FA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EE0C1E7AA5BA59B72825A4540
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b17d014-2d3c-3920-8397-e10cbad0f07a.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        166.239.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c1:e7:aa:5b:a5:9b:72:82:5a:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=1737c6cb-481d-4daa-9ecc-473a6b7339d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b9:8e:c3:1d:8d:24:d1:03:9c:0a:7b:d4:fb:
                    17:91:02:a2:b8:ab:1f:21:67:c7:ec:66:52:d8:11:
                    82:ff:98:70:36:67:b2:f5:17:09:3e:fe:8c:c7:35:
                    06:1b:82:52:17:3f:27:76:f3:71:c9:c3:78:2d:13:
                    1f:7a:17:b8:c8:f8:51:36:16:00:f7:4b:9c:54:60:
                    6c:7a:36:f2:ae:10:9f:d8:e1:d7:9a:95:a0:bf:fd:
                    d2:04:a4:ec:52:78:b4:f8:cc:43:f8:7f:84:fc:9a:
                    ed:b5:ba:9e:bf:c1:e4:40:89:bc:b7:67:39:35:6d:
                    db:de:f9:e6:d3:e1:ad:8d:63:5f:7c:c3:ca:8b:49:
                    76:18:13:64:83:13:40:be:29:3c:9f:8c:c3:d2:e1:
                    05:19:a6:c3:28:61:1b:88:47:6a:85:98:80:1c:8f:
                    61:5a:c7:18:39:1f:f4:45:f7:2e:5b:05:05:c4:b4:
                    a8:a0:4e:d0:c3:78:51:c5:cc:0d:af:ca:db:3f:41:
                    7a:c5:36:c1:8b:8b:96:0e:5d:04:f9:52:0f:b7:80:
                    94:9c:f6:5e:61:75:f6:74:7a:71:4e:8f:a4:b7:4d:
                    a0:22:22:13:b9:79:8a:ad:ea:96:7b:53:34:48:b5:
                    09:f4:1a:7d:a9:53:67:1a:ae:94:55:a5:14:be:35:
                    d4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5C:27:8C:CF:48:12:13:2D:74:42:DC:D7:CF:EB:6B:C9:C2:C9:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b17d014-2d3c-3920-8397-e10cbad0f07a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.239.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:c7:ea:87:bc:bb:62:93:fa:69:30:71:ab:47:23:81:11:51:
         e9:5d:dd:46:f4:07:03:e4:6f:c0:5d:59:bd:e5:e0:be:40:51:
         dd:74:e0:ac:ba:b7:df:97:34:02:dd:68:dd:df:c3:b4:75:7c:
         99:e9:ad:f1:ab:3d:19:45:08:b2:64:e6:4b:11:07:a1:9f:56:
         76:f7:9f:b0:11:60:52:9f:0f:e5:a6:9e:e8:ca:aa:f0:94:c4:
         d3:0d:18:d9:f6:78:d9:30:39:95:79:5e:3b:60:81:53:a8:7a:
         4d:14:85:7d:da:c2:e1:11:fa:b1:4d:8b:74:78:a3:af:21:f9:
         1e:0f:3b:cc:c7:54:16:26:77:db:94:b4:85:b7:4a:e6:75:24:
         6c:d3:5c:34:74:a5:a8:5f:4b:76:a1:4c:0e:cd:38:99:17:5b:
         88:4f:20:6c:7a:17:4d:ef:73:9f:32:6e:9b:0d:03:87:a4:bf:
         66:9e:d5:85:3f:21:cd:31:8a:e7:c6:e6:3e:3a:61:ba:b2:a8:
         a1:aa:51:85:8d:23:80:e1:34:35:0b:bf:74:77:44:de:66:22:
         15:bb:06:5d:24:60:69:1d:d3:cd:8f:f3:86:1a:b1:3e:d1:2e:
         de:2c:92:f9:a7:b7:08:07:dd:3d:fa:a1:37:56:77:29:5d:b9:
         4b:07:d0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 22:47:58 2026 by rpki-client