Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae75672b-fb4e-3ce8-8b0b-5456f7996b9a.roa
File:                     ae75672b-fb4e-3ce8-8b0b-5456f7996b9a.roa (raw, json)
Hash identifier:          ZO9atbWhfP/dXV8PYn/Xh9UoMe1yVzBxvF2NUCvh3LM=
Subject key identifier:   1B:B2:E5:13:B9:2F:48:F6:5A:68:2A:13:34:89:8C:04:56:08:6A:08
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D5E1A5A9253635E2C1CA8F6C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae75672b-fb4e-3ce8-8b0b-5456f7996b9a.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     6167
IP address blocks:        166.248.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:5a:92:53:63:5e:2c:1c:a8:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=8555ef57-e86a-4bb3-a842-6be4f7ddfe12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:92:54:05:fe:4d:6b:38:1b:0a:30:a2:71:c9:
                    7d:cb:86:da:d7:35:20:b6:4b:17:0e:c8:41:40:20:
                    cd:bd:fc:95:37:d6:6d:58:24:1b:ae:46:48:f6:7d:
                    6d:0f:5a:94:ec:8b:48:4e:a1:89:97:db:2f:ae:b6:
                    43:94:91:ea:66:a7:0a:c8:f0:1e:67:7a:35:b5:40:
                    51:9e:cb:f5:ae:4b:02:e9:69:2e:94:76:d9:ab:b0:
                    05:b6:37:f6:cd:c5:a4:e2:99:f0:6a:bf:42:2d:cf:
                    04:cb:77:83:47:c7:93:e4:39:fa:6a:d3:a9:6b:41:
                    82:88:c0:14:d3:0b:4e:3d:ae:03:1e:cc:15:8f:21:
                    6f:ed:bb:80:cb:6a:f8:2b:3f:af:8d:16:aa:f9:ed:
                    94:91:6b:f1:f0:66:4e:07:ab:6e:df:e3:38:6f:e3:
                    56:fb:1b:49:6a:35:6f:a6:aa:bf:af:69:1d:d5:5c:
                    78:8c:18:37:bc:eb:60:eb:7c:8d:ac:79:e5:59:3c:
                    42:b6:31:31:27:22:17:0d:2d:1d:4f:03:c3:62:34:
                    55:00:b7:90:cc:30:16:42:8b:f9:a3:06:3a:b8:6c:
                    71:e7:5c:f4:88:5b:4a:67:c5:8e:d9:f3:4b:ad:45:
                    bd:87:f0:ed:5d:39:e1:69:58:ff:d3:d1:bf:e8:3d:
                    2f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B2:E5:13:B9:2F:48:F6:5A:68:2A:13:34:89:8C:04:56:08:6A:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae75672b-fb4e-3ce8-8b0b-5456f7996b9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.248.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:d7:e6:04:10:31:00:b8:62:37:9b:e2:02:08:a8:91:9a:24:
         c2:a8:2b:83:5a:95:46:63:4c:61:c3:2c:d3:30:ff:95:d4:26:
         21:9d:8a:14:82:26:a9:44:36:77:44:d9:2d:8a:f6:48:08:1b:
         9a:f4:72:3d:29:39:a6:56:66:4f:64:ce:12:5b:a2:6a:8a:76:
         fa:12:c8:4f:42:34:d8:dc:81:f9:ce:78:ed:73:f4:62:89:46:
         4a:5d:26:50:8d:98:25:6b:96:68:ee:e1:dd:4c:eb:eb:16:eb:
         fb:3d:78:35:fa:b4:9a:16:5f:8a:1b:20:39:52:15:04:84:20:
         30:fb:bb:16:d7:9d:99:f3:bc:0e:f7:a8:df:18:f7:c2:09:28:
         00:5a:37:f6:c9:88:f7:f9:aa:82:b0:79:9b:c8:92:47:6a:b4:
         61:25:a8:2f:6c:86:86:cf:a6:61:19:50:67:e6:1a:90:df:16:
         33:ae:52:4c:53:3f:3f:f1:1b:6c:95:27:dc:b9:d8:22:90:50:
         0c:67:95:f7:6c:9f:ea:48:f5:89:13:6e:9c:f5:02:f7:9f:51:
         ed:78:44:75:d6:e4:11:cd:7b:c6:bb:71:97:33:52:bf:22:fe:
         09:45:fa:f7:37:f4:ce:08:d2:4c:00:3e:88:fe:ef:08:63:07:
         14:fe:a0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 19:33:10 2026 by rpki-client