Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a07dde63-3f75-36ae-a60b-e8e165285726.roa
File:                     a07dde63-3f75-36ae-a60b-e8e165285726.roa (raw, json)
Hash identifier:          t4RdORi47HDBIlKY9gwSqpcG8NYqXYSgSfp/dIbmms8=
Subject key identifier:   FB:AF:1A:13:B4:71:FD:DD:D9:CA:FA:DC:F4:0A:FC:68:F6:EB:74:69
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D5E1A8436BD6016B0BEAE9F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a07dde63-3f75-36ae-a60b-e8e165285726.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     22394
IP address blocks:        166.139.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:84:36:bd:60:16:b0:be:ae:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=e62b157d-42aa-45e9-bf81-7d2dfc779cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ea:d6:d0:4e:ea:ba:bb:2a:32:b3:ee:4c:0d:
                    18:7b:32:8b:16:f7:77:b4:df:f5:d9:24:fa:61:4f:
                    c0:f7:3f:87:64:da:f4:68:1b:2b:31:d4:85:4f:3a:
                    46:ff:c3:c6:32:ee:d9:12:6c:9e:7e:fa:be:44:cd:
                    d4:cc:3d:8b:0d:36:0d:ab:57:c1:8f:86:a9:b0:d4:
                    c6:21:c0:f7:b6:0f:6d:00:19:9b:3a:4b:1a:6f:42:
                    c0:9c:84:5f:e4:f4:f8:21:79:ff:06:88:9b:32:b5:
                    19:73:d7:fa:ec:d2:ce:29:2b:90:cd:e5:96:3f:09:
                    9c:fd:5d:25:ed:65:17:cd:ca:de:57:57:a2:bb:c8:
                    0e:6d:92:10:54:26:90:4e:10:04:88:b5:3c:00:08:
                    bc:26:70:37:30:4c:1c:b5:32:a2:cd:7a:80:7a:33:
                    9c:33:23:59:ec:24:27:0e:38:5c:73:77:aa:ae:eb:
                    80:b1:c8:b5:72:03:38:ce:3b:5c:a9:08:60:8e:98:
                    d2:4f:d9:a6:7d:92:a7:ae:55:45:9b:ce:34:46:82:
                    1f:db:a6:dc:8b:e5:df:a5:91:b4:fa:38:e1:c2:d4:
                    87:e7:97:96:88:8e:e9:4b:64:53:52:ba:95:38:f9:
                    48:c8:0d:56:0a:f2:55:0e:66:43:05:f7:45:e2:65:
                    30:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AF:1A:13:B4:71:FD:DD:D9:CA:FA:DC:F4:0A:FC:68:F6:EB:74:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a07dde63-3f75-36ae-a60b-e8e165285726.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.139.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:76:b4:5a:04:c2:b2:81:79:9f:f0:53:73:40:7b:69:89:a6:
         67:43:3d:e0:4b:2e:c2:72:9b:ee:a7:4c:77:75:0a:14:49:63:
         cb:ef:e6:07:f2:34:dd:b4:86:a9:6a:95:31:45:21:9b:cd:bd:
         c5:44:b5:d5:a9:4c:0c:db:ac:df:0d:4b:17:2a:ce:97:cd:95:
         d5:cb:a1:19:9d:c1:28:e0:c6:d3:24:01:e4:01:b6:2d:75:b9:
         da:0d:8b:4f:6a:4f:18:77:75:08:b4:83:ee:96:c7:6d:bc:e7:
         65:96:02:e0:2a:29:00:46:f7:6b:50:d8:d4:ec:7c:67:5e:b7:
         6a:e2:d4:1c:b2:a0:3e:d6:13:72:c9:9d:63:5c:be:02:72:22:
         f8:57:97:14:f2:66:af:54:27:1d:fb:97:11:b2:ec:04:34:bf:
         c8:9b:24:0d:31:ae:06:bf:13:60:b9:f3:f4:74:67:8d:43:98:
         cb:3b:11:73:a9:ac:48:36:e1:49:6e:97:d0:7e:76:7f:a5:5d:
         8b:95:54:06:35:cf:57:2a:ff:6a:68:87:b4:f2:e3:21:8a:37:
         92:fd:ee:1a:dc:92:71:c1:17:af:53:47:ec:1f:c5:7f:b4:f4:
         53:79:84:e3:58:0d:06:53:81:3e:f0:bd:7d:74:e9:b7:01:e0:
         86:97:b7:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGoQ2vWAWsL6unwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk
ZTYyYjE1N2QtNDJhYS00NWU5LWJmODEtN2QyZGZjNzc5Y2MyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOrW0E7qursqMrPuTA0YezKLFvd3tN/12ST6
YU/A9z+HZNr0aBsrMdSFTzpG/8PGMu7ZEmyefvq+RM3UzD2LDTYNq1fBj4apsNTG
IcD3tg9tABmbOksab0LAnIRf5PT4IXn/BoibMrUZc9f67NLOKSuQzeWWPwmc/V0l
7WUXzcreV1eiu8gObZIQVCaQThAEiLU8AAi8JnA3MEwctTKizXqAejOcMyNZ7CQn
Djhcc3eqruuAsci1cgM4zjtcqQhgjpjST9mmfZKnrlVFm840RoIf26bci+XfpZG0
+jjhwtSH55eWiI7pS2RTUrqVOPlIyA1WCvJVDmZDBfdF4mUwywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPuvGhO0cf3d2cr63PQK/Gj263RpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTA3ZGRlNjMtM2Y3NS0z
NmFlLWE2MGItZThlMTY1Mjg1NzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHposAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALZ2tFoEwrKBeZ/wU3NAe2mJpmdDPeBLLsJym+6nTHd1ChRJY8vv5gfy
NN20hqlqlTFFIZvNvcVEtdWpTAzbrN8NSxcqzpfNldXLoRmdwSjgxtMkAeQBti11
udoNi09qTxh3dQi0g+6Wx22852WWAuAqKQBG92tQ2NTsfGdet2ri1ByyoD7WE3LJ
nWNcvgJyIvhXlxTyZq9UJx37lxGy7AQ0v8ibJA0xrga/E2C58/R0Z41DmMs7EXOp
rEg24Ulul9B+dn+lXYuVVAY1z1cq/2poh7Ty4yGKN5L97hrcknHBF69TR+wfxX+0
9FN5hONYDQZTgT7wvX106bcB4IaXtz8=
-----END CERTIFICATE-----
Generated at Mon Apr 13 17:14:17 2026 by rpki-client