Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6472c78-39e0-3ae0-b818-80c9f832f9d5.roa
File:                     d6472c78-39e0-3ae0-b818-80c9f832f9d5.roa (raw, json)
Hash identifier:          ZrPkbJL7Z7UgpN1drVQHpciAn5Mei3n92I9ryc8SAgI=
Subject key identifier:   95:85:79:13:18:59:55:6D:61:42:B2:4D:4F:0E:DB:C9:87:08:2C:33
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D5E1A7D5ADE2B72848F062E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6472c78-39e0-3ae0-b818-80c9f832f9d5.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     22394
IP address blocks:        166.159.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:7d:5a:de:2b:72:84:8f:06:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=58c11d71-5a5a-4672-87c7-dc3119d5142e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c0:ea:29:39:b5:54:1a:4e:ca:04:31:16:f1:
                    8e:e2:53:c2:88:a8:b7:d2:f0:8c:46:4a:b3:e5:71:
                    49:25:fa:80:ce:65:f9:1a:b7:48:27:bd:7c:0c:99:
                    0c:65:11:2f:79:97:19:ef:af:07:f5:50:81:d1:80:
                    04:1c:d7:30:f4:a9:c3:1d:7a:b0:c4:9f:6b:59:3b:
                    a2:a5:a6:a2:d1:7f:c9:9b:6a:b5:ae:cd:a4:16:1c:
                    48:8a:4a:18:40:ed:d0:5d:e1:1c:0b:04:8a:45:3e:
                    3b:27:0e:94:ff:69:00:10:65:bd:5d:96:3e:37:67:
                    0e:72:49:20:b1:e9:55:29:7b:ff:8d:c9:f8:35:20:
                    15:76:36:ba:24:99:60:e8:d6:68:80:57:8a:7d:b7:
                    3e:1d:7f:43:84:d5:87:ec:f1:4a:86:c0:ca:0e:f5:
                    a6:b9:05:b1:7c:06:a0:3e:b2:dd:6b:e5:c0:ea:e4:
                    71:3e:6d:39:8d:17:3c:26:13:b2:39:45:3c:9f:cf:
                    db:91:ad:0c:71:0b:59:20:a6:28:24:71:27:3e:cc:
                    8a:77:a4:6c:7d:8b:e5:2c:73:57:93:56:b5:6c:75:
                    21:44:37:03:ea:ed:7b:be:78:39:c5:54:85:81:8d:
                    bf:eb:42:aa:4f:b4:ce:25:71:85:d9:ed:b9:9f:53:
                    b7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:85:79:13:18:59:55:6D:61:42:B2:4D:4F:0E:DB:C9:87:08:2C:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6472c78-39e0-3ae0-b818-80c9f832f9d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.159.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:4c:b1:88:54:a7:86:ee:75:38:3f:94:11:69:e0:72:15:56:
         70:54:3b:58:00:64:97:6f:83:19:56:44:0b:9c:78:d3:b9:43:
         05:b0:1e:1b:df:af:2c:45:e7:0f:af:cd:3d:3a:b0:fc:71:78:
         98:63:50:46:eb:01:ed:df:8b:8d:f0:1d:44:3a:4c:59:e6:50:
         51:a0:d0:ba:19:0d:95:99:6b:e5:b4:39:b5:a7:77:b4:e3:50:
         70:57:fa:73:ba:8c:08:8f:46:7a:be:51:c3:9a:fe:88:d9:27:
         77:d7:69:1c:f4:40:77:94:85:30:a9:f2:5b:7a:84:82:01:d9:
         d2:b9:80:e4:26:f5:96:98:36:6a:6b:ad:5a:62:ef:6b:93:49:
         1a:7f:0f:87:c5:e6:3f:1d:69:c0:d6:ae:cf:dd:cb:56:eb:90:
         16:eb:e2:cd:24:f1:ab:a6:71:2a:e0:14:12:09:6e:7a:6c:b5:
         41:8c:03:bf:6b:13:0a:41:0d:9d:5b:cc:1c:a1:94:6a:8c:16:
         b6:3e:c7:ed:01:e6:a8:ac:17:f0:3a:a7:72:25:ee:f3:26:f0:
         d4:c9:33:49:05:bd:dc:ac:1e:83:6b:5f:f0:1c:68:f3:e7:e3:
         5e:a1:4c:0f:55:08:d4:99:32:55:9c:31:78:6a:cd:cd:f4:b4:
         bf:63:95:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:19:43 2026 by rpki-client