Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf6f34fa-1665-35b1-9765-a794cc465fc0.roa
File:                     cf6f34fa-1665-35b1-9765-a794cc465fc0.roa (raw, json)
Hash identifier:          cxiXIPfxBGiauT3gIkjpzRZt0PjKs2UPu2fTmSGWUJo=
Subject key identifier:   9E:41:44:33:73:66:E2:CD:61:1B:59:C6:D0:A3:15:1C:3B:0F:AC:B6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EE0C1E7E2380744E0A3D89F80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf6f34fa-1665-35b1-9765-a794cc465fc0.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        166.164.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c1:e7:e2:38:07:44:e0:a3:d8:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=715a4c23-f0a1-4f81-a0c7-970383efe8b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7e:6f:72:3c:f6:2e:3f:14:98:62:1f:6c:bc:
                    12:70:73:d9:f1:77:81:91:de:03:15:d9:b0:26:2c:
                    bf:8d:f7:65:31:ef:78:19:7b:e7:b0:d5:66:b9:f2:
                    9c:86:c6:c6:2d:a3:b9:6d:b3:a1:ff:44:e2:8c:51:
                    54:5f:91:06:fb:5c:32:fa:bf:3d:1c:42:f5:44:77:
                    00:d0:20:46:23:81:30:0e:f9:26:36:c3:2d:3f:d2:
                    a2:dc:6e:1c:ec:1e:57:ad:95:8a:e1:4b:5a:ef:bd:
                    84:b5:17:70:e2:5c:b3:13:14:27:c4:22:b1:a1:6a:
                    8e:c3:0c:c4:16:28:b3:e9:2d:b1:5d:7c:4d:2f:83:
                    3b:fe:b5:52:40:86:23:b3:27:fe:2d:de:f9:4e:c2:
                    a9:20:fa:79:5e:de:51:82:6b:6f:54:72:3c:d3:6a:
                    73:b8:81:ef:99:22:bb:19:e9:63:09:43:43:c8:45:
                    07:27:5e:8e:42:4a:1e:94:d1:c5:7a:16:b3:ae:11:
                    24:8b:ad:81:2a:61:a7:f8:e0:ab:63:d2:80:6a:09:
                    79:ac:d2:6f:84:87:3b:1f:e9:b7:24:53:8a:f1:fd:
                    fa:12:29:48:ce:03:82:f7:c6:66:06:91:89:b4:c8:
                    10:0b:ac:df:dd:a5:5e:d9:18:d0:53:1a:a3:68:02:
                    89:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:41:44:33:73:66:E2:CD:61:1B:59:C6:D0:A3:15:1C:3B:0F:AC:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf6f34fa-1665-35b1-9765-a794cc465fc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.164.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:f0:68:e1:f2:a5:ab:e5:2e:c4:81:60:9b:ef:9e:d0:6d:12:
         4f:0c:be:44:1e:f3:71:c4:f9:2b:8c:6d:c4:15:db:b3:2c:39:
         1d:75:ce:ad:41:d0:44:31:b0:c8:08:82:f9:0c:09:54:f0:ae:
         d6:ea:a6:fb:2f:55:4a:69:66:34:9b:35:87:db:a0:b4:0d:b9:
         3c:bc:4f:8d:ca:43:41:b7:92:fc:8b:88:23:86:c1:1c:5b:bd:
         b8:35:35:64:4e:1c:c7:74:24:f3:a9:50:47:e3:bd:3a:1c:4f:
         94:36:a4:1a:8b:f5:54:02:cf:c4:1a:8d:a0:81:7e:4a:0b:e9:
         ac:b3:f4:87:a8:ff:67:3d:91:8f:bf:0c:4f:e3:3c:f3:0c:f3:
         c5:d8:b1:1e:f1:1a:43:49:b1:be:45:9a:4b:b1:04:91:5c:31:
         a5:a5:50:bb:d4:cd:5e:1e:d6:29:54:28:f9:7a:fd:82:91:5c:
         10:95:0b:e9:cf:37:af:be:fc:58:e4:05:91:5b:6d:a4:16:b7:
         f2:14:f0:e5:3d:6f:3f:79:3f:22:3c:33:38:c9:8c:9f:f2:7e:
         dc:03:24:af:c3:61:c3:1e:e9:73:8f:4a:cd:99:48:30:a1:d8:
         df:a1:13:1d:92:07:48:5c:8b:39:58:0f:11:d8:fc:3c:46:3b:
         a1:03:36:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:43:59 2026 by rpki-client