Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9a722b51-4c61-3605-b21f-cc808db9be85.roa
File:                     9a722b51-4c61-3605-b21f-cc808db9be85.roa (raw, json)
Hash identifier:          8SAXfyD+vceTdKlrZqglrnPdZ30H1vtOYL/yWcHGinI=
Subject key identifier:   52:1C:DB:A8:7A:43:CB:9D:1B:2C:8B:B7:89:03:9F:4C:A3:D0:AE:97
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D5E1A7E0B0EB4CA6746E71700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9a722b51-4c61-3605-b21f-cc808db9be85.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     6167
IP address blocks:        166.151.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:7e:0b:0e:b4:ca:67:46:e7:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=d893c05a-2d74-40d2-94cc-c3ff166ae470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2a:88:20:a9:e1:c3:61:7d:fa:61:57:0d:01:
                    7a:56:fe:b7:21:80:08:39:78:b6:16:40:62:d9:1e:
                    18:62:2e:c3:6e:dd:3a:01:d2:ab:23:8c:bf:4f:ff:
                    a9:62:23:09:46:8e:de:a5:27:19:8a:41:a6:be:16:
                    49:d6:20:64:55:cd:be:49:cd:fc:2e:fb:aa:52:bb:
                    90:c6:96:20:84:66:f4:18:96:57:ab:bc:f1:d0:fe:
                    54:93:81:4d:a2:0f:f0:54:b7:80:d2:8e:c4:bc:f5:
                    d6:45:7e:c5:e4:ce:d4:07:ab:79:73:91:4b:3e:a3:
                    5f:bb:1b:6c:ae:5f:c4:11:20:6d:d1:c9:c3:9c:bb:
                    b5:a6:9c:e3:e2:91:7e:62:f3:36:8a:e5:cf:ce:35:
                    5f:cb:b6:1b:d7:d0:21:9b:44:ae:9b:9e:c0:9d:77:
                    47:78:3f:9f:01:93:59:37:98:48:96:54:f2:2d:a2:
                    49:9b:09:e3:01:87:7d:24:8e:d4:60:5b:2a:34:15:
                    f5:de:5e:b6:4b:85:e8:79:69:b8:db:00:d3:cb:4d:
                    a7:96:2b:37:62:f4:c3:19:b4:42:b4:34:e6:43:9d:
                    f7:f8:d2:f8:b6:16:99:65:45:e5:a6:34:0c:6b:7f:
                    21:0e:6d:4b:0b:48:5e:0c:7a:47:0e:0c:f9:ae:55:
                    be:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1C:DB:A8:7A:43:CB:9D:1B:2C:8B:B7:89:03:9F:4C:A3:D0:AE:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9a722b51-4c61-3605-b21f-cc808db9be85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.151.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:8d:d5:2e:9a:ff:67:d8:53:a1:5c:de:88:a3:b3:26:2d:59:
         45:ba:1a:45:4d:43:6c:ef:36:5d:1b:19:7e:c2:fd:44:74:9c:
         fc:c1:ad:9a:2e:af:50:40:a2:8b:2e:27:ea:8b:94:c2:ac:55:
         fe:11:b1:4d:25:8d:5e:77:8d:93:6f:b8:02:97:71:cb:18:89:
         50:b1:61:f4:19:86:1e:7d:ee:31:a4:6d:e7:04:67:ee:04:df:
         f0:45:ce:8c:98:34:64:79:d9:d6:82:b3:0b:07:d6:54:83:56:
         94:6b:8e:b5:b6:19:47:1f:c4:8f:16:b3:62:36:42:63:45:56:
         be:6a:1c:cd:5f:f4:78:54:e3:88:f9:98:04:27:3c:c7:38:cf:
         f7:eb:54:97:95:0d:a8:f0:de:da:9a:72:ea:ca:66:fc:4d:59:
         37:75:41:45:bd:b6:b4:24:f2:67:92:11:b2:f3:b3:a7:af:35:
         0e:2d:25:c9:4e:1f:26:ec:83:8a:08:67:38:3e:35:ed:bf:69:
         12:f9:ae:43:23:ab:ab:65:9e:0e:40:c6:61:d6:b7:fb:b3:10:
         6b:89:0c:53:9c:31:a6:90:65:63:68:cf:d4:a2:67:27:6c:9b:
         41:43:27:4c:d2:72:fd:05:20:5e:04:bf:bd:62:92:e4:3a:af:
         f6:ed:8c:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGn4LDrTKZ0bnFwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk
ZDg5M2MwNWEtMmQ3NC00MGQyLTk0Y2MtYzNmZjE2NmFlNDcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSqIIKnhw2F9+mFXDQF6Vv63IYAIOXi2FkBi
2R4YYi7Dbt06AdKrI4y/T/+pYiMJRo7epScZikGmvhZJ1iBkVc2+Sc38LvuqUruQ
xpYghGb0GJZXq7zx0P5Uk4FNog/wVLeA0o7EvPXWRX7F5M7UB6t5c5FLPqNfuxts
rl/EESBt0cnDnLu1ppzj4pF+YvM2iuXPzjVfy7Yb19Ahm0Sum57AnXdHeD+fAZNZ
N5hIllTyLaJJmwnjAYd9JI7UYFsqNBX13l62S4XoeWm42wDTy02nlis3YvTDGbRC
tDTmQ533+NL4thaZZUXlpjQMa38hDm1LC0heDHpHDgz5rlW+OwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFIc26h6Q8udGyyLt4kDn0yj0K6XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOWE3MjJiNTEtNGM2MS0z
NjA1LWIyMWYtY2M4MDhkYjliZTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHppeAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHSN1S6a/2fYU6Fc3oijsyYtWUW6GkVNQ2zvNl0bGX7C/UR0nPzBrZou
r1BAoosuJ+qLlMKsVf4RsU0ljV53jZNvuAKXccsYiVCxYfQZhh597jGkbecEZ+4E
3/BFzoyYNGR52daCswsH1lSDVpRrjrW2GUcfxI8Ws2I2QmNFVr5qHM1f9HhU44j5
mAQnPMc4z/frVJeVDajw3tqacurKZvxNWTd1QUW9trQk8meSEbLzs6evNQ4tJclO
Hybsg4oIZzg+Ne2/aRL5rkMjq6tlng5AxmHWt/uzEGuJDFOcMaaQZWNoz9SiZyds
m0FDJ0zScv0FIF4Ev71ikuQ6r/btjPI=
-----END CERTIFICATE-----
Generated at Mon Apr 13 19:37:03 2026 by rpki-client