Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8de8b227-fe31-33fc-a576-6a0493f26446.roa
File:                     8de8b227-fe31-33fc-a576-6a0493f26446.roa (raw, json)
Hash identifier:          z8nr17CnINwHEXbXa+saLWPA8/FS4v4FYe+E7dYgPgw=
Subject key identifier:   53:1A:DA:0B:4F:FC:1D:D9:EC:3C:47:58:D7:F3:4B:91:B5:66:EC:DF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EE0C21D3E15586A36423E8000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8de8b227-fe31-33fc-a576-6a0493f26446.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     22394
IP address blocks:        166.166.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:1d:3e:15:58:6a:36:42:3e:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=d2660a70-cbf6-401b-9f55-900a330efdb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:88:c8:ba:5b:62:e7:fd:38:13:68:8a:e2:d5:
                    cb:ee:80:80:5f:57:4d:83:3a:c8:3f:b2:4e:ba:03:
                    3d:bc:c2:a7:76:1b:a2:64:5d:af:51:34:d7:e5:39:
                    8b:e3:18:f7:f1:a8:3e:b6:a2:3b:28:25:00:b2:c0:
                    1a:90:c0:33:46:10:6a:7f:03:f1:b3:79:f1:75:4c:
                    9f:f4:0f:46:e2:f1:7c:8f:05:f5:a7:59:6d:b7:bc:
                    b5:8e:c0:fa:17:ab:2d:5a:2b:57:94:ba:87:a4:3e:
                    b7:75:2f:4d:e9:d4:d5:d8:42:67:a6:be:ce:99:3a:
                    a8:1f:a3:26:76:69:68:d9:f2:00:3f:28:32:a7:d1:
                    7f:f7:97:21:74:a4:0c:dd:d7:86:98:b0:06:5f:f1:
                    b0:bd:86:da:e9:d0:2b:be:5f:dc:9d:43:2f:6f:4b:
                    95:dc:f8:92:6a:bf:1a:c4:22:eb:f8:46:0e:4e:62:
                    42:31:04:46:2b:95:4f:7e:4f:6f:9d:5f:5d:ed:98:
                    61:89:13:02:02:fb:84:8d:bc:8e:ca:ef:03:71:ad:
                    9d:a8:bf:14:72:72:41:f3:9e:da:4e:9c:2e:4e:41:
                    1c:a4:8c:9b:f8:56:5a:2d:74:d9:af:18:8b:5d:11:
                    c3:94:0d:a2:6d:bb:40:4a:a6:e1:02:00:bd:99:ad:
                    e0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:1A:DA:0B:4F:FC:1D:D9:EC:3C:47:58:D7:F3:4B:91:B5:66:EC:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8de8b227-fe31-33fc-a576-6a0493f26446.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.166.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ab:f2:af:2a:f6:11:b3:10:18:d3:b4:48:c0:53:76:c7:94:
         c3:17:8e:7c:79:80:08:e0:ef:7e:0f:fb:af:e7:3b:9c:74:f8:
         03:48:f8:24:b5:f8:a4:fd:36:ae:df:96:66:fa:f3:99:42:de:
         55:50:a9:53:86:3d:05:fa:ab:0f:f0:25:5d:7e:87:da:bc:86:
         ed:8b:08:76:a2:1b:9e:c2:6d:50:7d:ca:91:aa:e9:37:f3:55:
         4f:df:5c:69:b7:43:25:e5:04:c0:61:40:8a:c6:3d:06:10:6f:
         de:a4:09:e2:c9:e9:7e:5a:1a:d5:a9:0a:22:d4:aa:5b:ec:15:
         70:90:f7:2a:fc:61:59:54:8c:c5:fb:c8:ac:da:c3:87:b1:d3:
         0f:5d:ad:b1:b5:84:21:0a:2a:18:c4:43:11:30:26:c4:10:65:
         e4:81:bc:a3:10:85:a5:fd:52:2b:d3:c4:84:93:2c:56:39:68:
         ca:1d:db:6f:0b:ea:3d:48:e0:96:7a:4c:11:07:37:39:2c:26:
         5a:90:e9:1f:fb:ff:de:83:ae:18:7b:a8:74:2b:e2:43:23:a5:
         af:ca:fb:b7:b0:b0:94:f1:ff:dc:2d:35:59:8e:c5:d6:22:2e:
         e6:25:74:08:a4:a4:92:4a:37:19:98:86:72:05:37:f0:7e:76:
         69:e6:e3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 20:54:59 2026 by rpki-client