Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6472c78-39e0-3ae0-b818-80c9f832f9d5.roa
File:                     d6472c78-39e0-3ae0-b818-80c9f832f9d5.roa (raw, json)
Hash identifier:          zXiwSAhTg66MRtp3RwNu3uu4FW8Bzw7Klvy841aCp2E=
Subject key identifier:   6F:A6:7B:74:63:F9:BE:62:E8:FF:FB:D9:32:6E:3D:19:68:0B:5C:5A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EE0C21C5D138E75FCC8975500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6472c78-39e0-3ae0-b818-80c9f832f9d5.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     22394
IP address blocks:        166.159.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:1c:5d:13:8e:75:fc:c8:97:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=642fe19e-7591-4582-988d-9f7188765706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e0:a9:f3:f9:6a:a3:27:fc:22:63:ce:ea:34:
                    14:a5:29:35:2a:eb:b4:bd:d7:fc:76:de:5c:0b:91:
                    a4:09:51:6f:15:60:60:41:28:8b:04:38:10:d8:1d:
                    50:1e:9a:90:aa:06:81:4b:94:7c:49:6a:9a:9d:b4:
                    08:9e:49:80:c4:8e:eb:38:45:43:e5:7b:a4:df:86:
                    77:94:ae:b6:cd:51:4b:03:53:db:d4:cf:9a:06:be:
                    0f:9d:49:67:d2:a7:26:03:b1:99:68:7a:16:52:7e:
                    0b:63:95:7d:74:3d:98:8b:c5:f6:e8:d7:df:6f:6a:
                    a5:95:f0:ae:ce:57:57:36:ec:46:81:c8:ed:9e:1d:
                    76:93:1e:48:28:da:a6:43:67:ae:e4:4b:09:82:ef:
                    df:ef:86:a1:9a:63:1c:46:07:30:ac:4c:2b:d0:04:
                    99:09:1e:a9:9c:22:6e:63:f6:b4:b7:f7:36:47:ad:
                    c1:a3:e3:2a:9c:0b:2c:4d:e2:6c:9a:dc:1c:5c:04:
                    cf:fc:2f:fa:34:bd:ff:57:63:03:f6:5b:c3:c7:f3:
                    06:92:d5:7b:7f:19:48:88:c0:0b:91:1a:84:7f:e6:
                    20:fe:f9:25:c1:b3:08:53:0c:a0:bd:e3:56:f9:9e:
                    8b:d2:86:eb:31:a7:7f:09:c0:01:87:91:ce:92:22:
                    7d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A6:7B:74:63:F9:BE:62:E8:FF:FB:D9:32:6E:3D:19:68:0B:5C:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6472c78-39e0-3ae0-b818-80c9f832f9d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.159.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:db:f0:f2:a9:81:bd:40:c0:9b:eb:9b:24:3a:fc:27:e6:96:
         2d:60:d5:31:87:df:90:37:95:6b:5b:8c:8e:d5:b6:0a:ba:17:
         31:69:80:5c:75:1d:53:3f:55:27:ef:cb:65:db:9b:a0:30:0e:
         1a:7e:13:80:97:95:8d:bb:79:3c:82:50:8f:a9:f6:1e:53:f4:
         4c:60:72:5d:e7:85:a2:66:97:09:d9:5c:6b:96:07:0a:df:3b:
         7d:73:be:2b:57:8e:2c:1d:d9:d0:cd:36:37:be:1c:d8:6a:88:
         d5:ac:7e:98:1c:46:9f:ed:9b:db:51:ad:6e:ce:c3:d1:c9:47:
         e8:05:97:91:7c:d6:21:2b:6c:58:f4:13:7e:86:cc:86:70:e5:
         cd:e6:af:45:e6:aa:e5:a9:6c:8a:6e:66:28:a9:45:f0:7b:ec:
         71:74:42:4b:64:f7:89:f2:27:91:d5:3c:9d:21:3c:63:e6:4e:
         d5:52:c0:bc:af:98:31:8f:aa:91:3e:9a:48:e6:bb:47:c4:f8:
         c2:c7:48:35:21:a8:cf:44:2e:d9:57:ed:38:de:e4:22:dc:80:
         24:09:21:e5:d2:1e:6b:42:32:60:a1:a9:c9:62:c5:fb:5a:61:
         5a:c9:22:f3:a9:d5:f5:ab:c0:51:f5:0e:1d:98:87:92:c6:c7:
         49:0a:b0:f3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7gwhxdE451/MiXVQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk
NjQyZmUxOWUtNzU5MS00NTgyLTk4OGQtOWY3MTg4NzY1NzA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+Cp8/lqoyf8ImPO6jQUpSk1Kuu0vdf8dt5c
C5GkCVFvFWBgQSiLBDgQ2B1QHpqQqgaBS5R8SWqanbQInkmAxI7rOEVD5Xuk34Z3
lK62zVFLA1Pb1M+aBr4PnUln0qcmA7GZaHoWUn4LY5V9dD2Yi8X26Nffb2qllfCu
zldXNuxGgcjtnh12kx5IKNqmQ2eu5EsJgu/f74ahmmMcRgcwrEwr0ASZCR6pnCJu
Y/a0t/c2R63Bo+MqnAssTeJsmtwcXATP/C/6NL3/V2MD9lvDx/MGktV7fxlIiMAL
kRqEf+Yg/vklwbMIUwygveNW+Z6L0obrMad/CcABh5HOkiJ93QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFG+me3Rj+b5i6P/72TJuPRloC1xaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDY0NzJjNzgtMzllMC0z
YWUwLWI4MTgtODBjOWY4MzJmOWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApp8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEActvw8qmBvUDAm+ubJDr8J+aWLWDVMYffkDeVa1uMjtW2CroXMWmAXHUd
Uz9VJ+/LZduboDAOGn4TgJeVjbt5PIJQj6n2HlP0TGByXeeFomaXCdlca5YHCt87
fXO+K1eOLB3Z0M02N74c2GqI1ax+mBxGn+2b21Gtbs7D0clH6AWXkXzWIStsWPQT
fobMhnDlzeavReaq5alsim5mKKlF8HvscXRCS2T3ifInkdU8nSE8Y+ZO1VLAvK+Y
MY+qkT6aSOa7R8T4wsdINSGoz0Qu2VftON7kItyAJAkh5dIea0IyYKGpyWLF+1ph
Wski86nV9avAUfUOHZiHksbHSQqw8w==
-----END CERTIFICATE-----
Generated at Sat Aug 22 11:05:18 2026 by rpki-client