Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/caef4175-0808-3988-9d12-a9a674c92550.roa
File:                     caef4175-0808-3988-9d12-a9a674c92550.roa (raw, json)
Hash identifier:          k+uTNtGd4kqy28/aYAIzFAuSJubjmcdhivlKTz38fWk=
Subject key identifier:   2C:C3:35:4C:F6:28:65:80:9E:66:12:50:FC:11:74:CE:B6:3F:C7:1D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EE0C221263C6BB56E692E6440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/caef4175-0808-3988-9d12-a9a674c92550.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        166.144.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:21:26:3c:6b:b5:6e:69:2e:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=f396e587-329e-472f-8fc7-8ab1c7be01fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:da:2a:d3:bc:8b:12:cf:41:e7:11:a6:86:b4:
                    fd:eb:07:cb:90:3e:1e:53:62:d3:cb:f9:a8:96:34:
                    69:87:7a:30:c0:d6:16:b0:81:01:39:98:6e:0d:0d:
                    8e:72:2d:25:6d:8d:2d:32:c4:30:8e:69:6e:92:fa:
                    a3:e4:bf:87:75:86:f9:cf:87:ac:fb:41:8e:47:60:
                    d3:93:ca:72:99:4f:70:b7:ed:ac:58:5c:69:c5:32:
                    58:e5:f7:5b:8a:01:90:de:cb:56:b2:f4:e1:50:a6:
                    f4:cb:4d:f4:85:8f:1c:22:0c:57:02:b5:f7:2a:c8:
                    b4:72:a6:15:f6:0c:60:35:67:32:af:dc:06:b3:89:
                    e5:f5:d8:7e:e6:6f:a1:ff:29:da:db:01:1a:41:72:
                    e5:2e:5d:5c:92:f8:fd:5d:55:a1:07:e9:9c:39:5c:
                    12:56:4b:56:87:8e:83:8e:b8:4b:55:21:84:7a:74:
                    fa:59:5d:19:76:57:25:3a:9b:56:a1:e1:30:41:7a:
                    c8:b0:d3:7a:23:d2:d4:26:c2:95:d5:02:1d:a8:b7:
                    73:f6:a9:56:b0:c1:0a:e3:4d:7a:82:34:b2:35:11:
                    21:9d:8f:60:39:9f:87:bd:83:f5:5a:9d:72:41:38:
                    8f:15:18:3c:78:6b:0d:ff:ac:48:51:8a:b7:f2:a7:
                    ed:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C3:35:4C:F6:28:65:80:9E:66:12:50:FC:11:74:CE:B6:3F:C7:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/caef4175-0808-3988-9d12-a9a674c92550.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.144.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:5e:16:fe:28:84:3e:b8:1a:3a:06:c8:96:bb:71:b3:0e:23:
         13:5d:68:61:70:0d:ad:43:e6:ba:f3:f0:d4:f3:36:5b:9f:8f:
         b4:fe:50:96:7b:a1:75:f0:cf:8c:d8:16:9a:b7:b6:46:19:a5:
         c2:d9:5d:63:39:b2:79:7e:a7:d8:63:49:62:7d:2b:a8:80:41:
         20:05:ec:45:9a:c8:13:13:d2:31:69:10:f3:4d:dd:33:6d:72:
         4a:31:8d:23:4b:87:9a:c7:bc:a9:87:a3:9a:0f:1d:19:53:f6:
         ae:a5:40:ae:07:08:11:ea:79:4c:8b:7c:84:79:b6:ab:f9:4b:
         9b:a3:3e:9d:ff:09:33:f6:47:51:26:2c:a9:b2:98:aa:34:ec:
         04:56:7d:0f:7f:a4:ff:4c:e2:2b:b4:88:65:16:f5:ab:f8:53:
         7a:a9:51:c0:ff:75:2d:ae:f0:ff:08:09:d6:7d:bd:9a:93:63:
         e2:9e:df:a2:df:f0:87:fb:83:54:07:e4:47:50:b3:0e:4b:fa:
         be:0d:21:d6:be:af:07:b4:86:3e:f4:7e:9d:17:02:f5:68:a8:
         71:0f:90:61:97:48:8c:1b:f6:06:9b:54:88:ab:0d:d2:98:c8:
         1b:8f:6f:f2:40:10:14:e3:6a:73:3e:3e:5e:72:cb:c0:e6:68:
         42:dd:1b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:57:04 2026 by rpki-client