Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a63064e1-e84b-3aee-8614-72fe2a9575e9.roa
File:                     a63064e1-e84b-3aee-8614-72fe2a9575e9.roa (raw, json)
Hash identifier:          XEKlIKP+xFcVuefsCN1vpv0fYVp2QLipN456MTN+gDY=
Subject key identifier:   00:FF:BD:E2:AA:71:37:DF:10:BF:85:CA:50:A6:37:3C:FA:3F:91:6A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D5E1A81BBF0DA4B912E2B6500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a63064e1-e84b-3aee-8614-72fe2a9575e9.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     6167
IP address blocks:        166.149.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:81:bb:f0:da:4b:91:2e:2b:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=5fc8cad3-7de2-403e-9e93-eef52d4c6719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:64:9c:6e:43:31:79:cd:2d:56:95:c5:b1:42:
                    52:90:54:60:56:60:b8:f9:67:f3:62:1c:b6:fd:93:
                    ae:4c:dc:db:7f:cb:f1:41:0e:e2:b1:71:ff:6c:ff:
                    b3:41:f1:8b:de:e2:f7:c5:0e:64:ef:ca:71:b1:73:
                    d5:68:4d:75:00:2c:5f:cf:cc:2a:e9:fb:a0:af:5d:
                    b6:2f:e1:1f:fd:b7:3e:62:b6:a7:f7:f3:77:f4:7a:
                    a3:fd:b6:84:3d:4a:2f:d9:a1:8f:e4:f5:82:55:6b:
                    a4:17:1e:2c:d1:a8:dc:53:14:49:92:7b:4e:61:28:
                    86:32:b3:03:93:94:4d:cb:44:4b:9a:05:53:2f:93:
                    f9:cb:c0:a4:24:81:80:75:bb:50:51:9b:41:61:96:
                    6e:fd:91:11:9f:1f:ed:0a:21:b9:78:b5:b0:63:87:
                    2b:38:66:c9:00:b5:69:1f:8e:60:27:c8:16:6e:b9:
                    b0:d0:f6:48:3e:42:35:f9:af:13:01:54:7b:47:a0:
                    32:8f:2b:b4:8d:38:28:bb:80:a0:f6:85:7c:15:8e:
                    19:6f:5e:82:73:c9:ee:7e:82:e7:73:12:73:51:e1:
                    c2:8c:1f:71:65:0b:ec:98:5f:76:4d:2a:d1:96:d6:
                    76:9b:18:6a:1c:5e:ce:69:3c:5d:79:51:6a:d3:c3:
                    e7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FF:BD:E2:AA:71:37:DF:10:BF:85:CA:50:A6:37:3C:FA:3F:91:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a63064e1-e84b-3aee-8614-72fe2a9575e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.149.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:c3:22:b3:b3:98:6d:4a:7a:8f:f0:35:28:c4:be:eb:31:46:
         20:d8:2a:51:ca:9c:d5:59:de:2a:be:0d:e7:4e:0c:be:20:6d:
         85:37:69:a0:a7:ee:bf:19:12:55:3d:cb:92:8e:71:28:52:6d:
         9f:e6:1e:bb:6b:ca:74:08:7c:37:86:ac:16:60:81:14:13:56:
         a4:e9:c0:a5:33:10:ae:21:a5:48:e0:ed:89:a0:08:37:02:b6:
         c7:d4:04:6b:fc:98:7b:0d:68:64:c0:78:95:a8:99:7f:76:b9:
         fd:c0:fd:67:1d:25:c6:44:f2:e6:e1:d5:2f:27:a0:83:45:97:
         69:f0:75:c0:cc:69:76:1f:5a:13:27:8a:14:84:da:fa:31:2c:
         4f:97:b6:2d:1f:0d:6b:be:ad:6d:a8:d2:1c:c2:4b:b1:44:1c:
         62:29:ef:34:d7:a1:f3:bd:32:d6:91:4d:b9:f7:93:69:4f:af:
         d7:96:f2:c5:c4:ad:30:6c:5b:ce:a4:31:b2:b5:61:3b:06:d0:
         09:d5:6c:a0:71:08:f8:ad:5f:57:e9:f3:13:83:23:bc:37:1a:
         77:44:e1:e8:ab:d5:97:6b:30:2f:ba:09:c3:cb:d2:a2:3b:5b:
         6f:77:ac:27:31:ed:4b:f9:c5:78:c2:af:db:97:34:85:f9:9a:
         e2:88:7a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 18:23:10 2026 by rpki-client