Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d1932b01-0e8d-3ce4-b78e-0c68f8233a77.roa
File:                     d1932b01-0e8d-3ce4-b78e-0c68f8233a77.roa (raw, json)
Hash identifier:          Gs/I6qIwh1xaa/p03VMDPx259BnsOZ36lAWBJUI7YNg=
Subject key identifier:   7D:0A:0C:56:6B:04:CF:C1:03:21:DA:F7:0B:14:C7:1D:C6:1C:FA:69
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D5E1A57DBE6FFCCD98A07BA00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d1932b01-0e8d-3ce4-b78e-0c68f8233a77.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     6167
IP address blocks:        166.163.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:57:db:e6:ff:cc:d9:8a:07:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=3f865bca-fda7-4b94-a84e-9710e5dc3a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d0:24:83:54:42:c8:f6:b7:a3:f1:28:77:4a:
                    28:7a:0e:a6:dc:9c:c0:56:e9:c0:74:c9:72:d0:1c:
                    e7:2f:0d:eb:a9:f7:88:36:82:b5:7c:c5:9a:a7:1d:
                    a5:b5:bf:e7:48:75:59:b7:fe:8e:3a:fd:73:92:de:
                    89:75:0a:6f:5f:70:12:2f:5f:be:7e:b6:a6:f4:18:
                    be:2a:b2:f6:1a:91:c7:a9:79:ff:0c:73:fa:4f:da:
                    e5:64:9b:4a:66:db:7b:8e:07:4d:5f:66:d8:36:eb:
                    cc:ee:e3:61:94:8f:2f:5c:ce:88:42:48:59:fd:fe:
                    e9:61:42:0c:7e:25:02:ed:4d:b4:b3:7c:3d:7c:be:
                    fc:bb:d9:c5:a7:6b:6c:2a:21:92:dd:cd:e4:32:5d:
                    c4:c8:43:de:43:5f:2c:09:e9:cb:41:14:e8:96:66:
                    89:52:34:82:bd:af:f2:5b:58:0f:cd:e9:da:84:28:
                    92:1f:6f:90:81:2a:bf:78:2e:e7:3c:fe:d5:e6:a0:
                    44:39:bb:f3:e4:0f:9e:df:d6:75:80:f7:91:30:da:
                    a0:07:19:73:05:90:a0:8b:87:1d:92:a9:8d:e8:b5:
                    27:a4:0f:a0:61:26:fa:8d:2a:23:27:c5:5f:b8:ce:
                    0a:a4:63:d9:58:2c:3e:0c:08:18:bd:2d:3b:d5:7b:
                    8f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0A:0C:56:6B:04:CF:C1:03:21:DA:F7:0B:14:C7:1D:C6:1C:FA:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d1932b01-0e8d-3ce4-b78e-0c68f8233a77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.163.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:54:20:98:a4:fd:f0:fa:87:3b:80:15:7c:da:42:6f:d4:48:
         48:5f:b1:83:6c:ba:15:24:e6:85:51:83:13:89:83:c5:05:b5:
         55:bb:39:0a:4e:a4:14:77:39:a0:03:44:99:d2:57:b8:4f:23:
         ac:c5:5a:06:25:3b:a8:88:a9:df:e2:3b:f7:f5:e5:49:3b:62:
         54:02:32:fe:8e:0d:a2:b7:01:30:d3:d3:40:d7:cf:fd:6d:aa:
         65:34:9b:7f:46:2f:cd:ee:c2:a9:4a:c1:b6:c9:9a:00:93:c2:
         b4:9b:06:6f:40:9a:b0:d0:7c:d6:aa:f5:3e:1d:e4:a1:9e:e4:
         58:71:7a:f7:a6:a1:82:ba:e8:66:8d:b5:ee:01:7a:3a:88:d2:
         50:ac:10:29:aa:dc:74:42:af:f7:e2:5a:ad:23:59:84:fd:8b:
         03:52:b2:cf:da:28:04:c3:0b:94:16:0c:78:90:a0:8b:4e:2d:
         94:f9:6a:9a:2a:0f:06:c3:74:5c:15:88:b7:3c:ee:71:7e:da:
         aa:62:05:97:5c:13:7d:e8:72:45:b8:17:d1:9a:4a:65:c7:3c:
         74:e5:6c:04:a3:9a:0f:bc:e8:3e:11:a3:35:cd:d2:cf:62:f2:
         bb:e3:8b:d8:c6:c4:6d:74:6b:0b:b0:0e:5d:e0:cd:c6:77:69:
         1d:94:13:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:16:15 2026 by rpki-client