Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ee93a50d-43ec-38b8-94f4-c3d0ca510a8f.roa
File:                     ee93a50d-43ec-38b8-94f4-c3d0ca510a8f.roa (raw, json)
Hash identifier:          c2jUKS+ukRDtFdC+F9vIaHcliZkp5YW5nQ6qHgFXulM=
Subject key identifier:   A8:98:82:0D:41:92:6F:1D:2F:C5:5C:5F:5C:F1:0C:CA:5C:FB:BE:C0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D5E1A841157734F72F8638180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ee93a50d-43ec-38b8-94f4-c3d0ca510a8f.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     6167
IP address blocks:        166.159.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:84:11:57:73:4f:72:f8:63:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=0255354a-c970-4afb-b0e8-88b26d775bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d4:78:0a:dd:a7:4a:b6:32:02:fd:d1:55:69:
                    84:c5:77:6d:9c:3f:8f:28:d4:c1:a3:2e:33:59:a5:
                    3f:b4:44:aa:f5:77:cc:99:17:05:86:aa:be:fa:40:
                    91:29:48:59:b0:0e:e8:c2:2b:21:97:17:26:04:c2:
                    a8:14:c4:dc:64:93:61:d4:c2:e9:25:a3:f4:7a:11:
                    fd:df:e4:5f:4f:d5:be:eb:91:9c:b5:43:54:f1:18:
                    bf:2b:f3:7a:14:08:15:e1:b4:74:9b:ad:28:07:8e:
                    8b:2e:29:24:4e:19:01:1c:90:91:86:19:c5:c0:b4:
                    42:73:5f:8f:df:ff:8a:9f:0a:81:a7:f0:a9:43:48:
                    f3:54:bf:4f:06:0b:b5:8e:bd:a0:66:88:d9:37:e9:
                    88:29:c8:0a:b4:ef:66:f0:69:41:18:47:b3:72:b2:
                    01:3d:3e:3d:5b:55:35:dc:30:98:65:26:c7:33:b1:
                    33:c9:0b:72:21:a7:37:d4:53:28:eb:d8:a1:cf:77:
                    80:3e:72:18:82:d1:e1:e4:ed:f5:8f:9e:a6:02:fb:
                    72:e9:8f:23:8b:ff:9b:ce:6d:f7:5c:87:08:4f:45:
                    13:25:c6:e9:67:3e:80:e0:d3:2f:dd:af:6a:ee:b4:
                    d2:8c:75:d9:1b:50:7d:cf:c4:41:85:e5:89:82:ff:
                    94:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:98:82:0D:41:92:6F:1D:2F:C5:5C:5F:5C:F1:0C:CA:5C:FB:BE:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ee93a50d-43ec-38b8-94f4-c3d0ca510a8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.159.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:92:f6:8f:52:52:88:1e:93:22:f1:40:d3:48:c8:ad:b7:f4:
         fa:5a:e0:97:ab:a2:87:c9:49:87:3d:17:d0:b5:a2:1f:dc:a0:
         14:9d:ec:bb:4d:4f:27:b6:4f:33:ab:53:e0:5b:73:04:2b:d8:
         03:59:91:a7:bc:a6:8c:d3:02:df:a3:23:45:6e:70:5d:98:89:
         a6:9d:89:62:c3:b0:8d:04:62:25:72:ac:ca:57:8b:b4:4b:c6:
         8c:85:ad:6e:0f:dc:e5:03:c7:24:05:e7:65:f4:8e:8b:ee:e9:
         51:55:47:01:cf:5e:fd:1d:3c:b2:c2:0b:0a:2d:fe:64:3f:23:
         e6:48:59:85:a1:88:11:31:be:b0:ca:64:60:5e:de:c8:a0:2d:
         9a:2d:ec:6e:ce:76:e7:e8:72:f4:c5:ef:68:56:1f:d3:37:87:
         ae:5b:74:04:f8:17:cf:ef:3a:d0:a3:56:74:f7:21:7d:ad:c0:
         1c:e4:54:c0:d9:69:b8:d0:e4:72:25:a3:a2:ba:4b:60:1b:07:
         c0:ac:bd:c9:ff:67:82:d9:f4:b3:fe:18:cd:28:b1:68:3d:d9:
         0d:f1:40:9b:20:cb:ad:0b:8c:cb:3f:95:bb:32:77:fb:db:7d:
         52:58:be:af:f6:7f:58:29:c3:8c:61:fd:54:6d:18:0f:5b:33:
         38:af:8e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:16:52 2026 by rpki-client