Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe27f669-2f6d-3075-991b-09e2afd7571c.roa
File:                     fe27f669-2f6d-3075-991b-09e2afd7571c.roa (raw, json)
Hash identifier:          IM1uT8QPLbT56M0ku+yjQ+uHUNbbgYN/HqJl/IQxGHs=
Subject key identifier:   4F:F4:CE:25:25:5A:62:40:F1:CE:BD:F7:9B:71:9B:D1:97:F9:7C:94
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F82ADD0AD971437C30B73ED00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe27f669-2f6d-3075-991b-09e2afd7571c.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     6167
IP address blocks:        166.153.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:d0:ad:97:14:37:c3:0b:73:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=149c7b5b-a03a-4437-a490-7958dbc69a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1a:e5:0a:3a:39:f4:9a:74:0c:ac:6b:32:3e:
                    97:62:76:c7:c3:15:6f:59:8e:25:3c:dc:f5:99:0c:
                    0c:7f:b5:f9:fe:08:13:91:98:3e:6f:7d:c8:48:64:
                    2a:85:31:8f:d6:90:c2:08:ab:62:84:a5:12:7b:7a:
                    7b:0a:63:0b:86:d5:7c:9d:5c:3a:e2:ec:37:51:b3:
                    db:15:25:ca:a5:b1:f5:6c:3b:19:34:71:af:06:42:
                    50:f2:ec:14:fc:b4:dd:9c:d8:b3:1b:b7:7f:64:90:
                    cb:a4:ee:54:d8:8a:c5:eb:3a:68:69:36:d6:56:9f:
                    0a:66:30:26:66:a0:dd:6d:24:6d:08:bb:1a:3a:cd:
                    f2:de:ae:c0:53:2f:c1:51:2e:11:e4:49:e8:1c:a1:
                    ad:65:27:47:ca:66:2c:cd:44:58:93:3e:77:38:21:
                    01:a4:5d:bd:52:9d:81:e1:d6:df:91:fb:26:d5:7c:
                    c5:19:da:4b:14:15:01:80:35:25:fa:5e:2b:45:cf:
                    62:a1:dc:f3:92:c0:17:ab:49:07:39:d1:59:fe:61:
                    20:69:27:e4:0f:4d:72:9c:44:33:3a:3d:20:de:9e:
                    c2:91:57:db:14:6a:1f:e7:68:26:d2:eb:85:85:73:
                    28:83:b6:52:0d:a1:16:13:26:8f:63:36:03:a1:56:
                    7f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F4:CE:25:25:5A:62:40:F1:CE:BD:F7:9B:71:9B:D1:97:F9:7C:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe27f669-2f6d-3075-991b-09e2afd7571c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.153.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:6a:5f:e7:06:cb:43:0b:0e:13:8f:4f:5e:28:4c:85:82:f0:
         11:54:b0:4b:b0:00:9a:ca:b4:0f:1d:5c:c1:0d:88:1a:1b:d1:
         24:37:d9:06:8a:0d:bd:5d:a1:7a:71:9e:d9:89:61:6e:f4:1c:
         23:c0:9c:10:46:52:24:0d:c6:8a:ff:d4:be:03:dc:44:77:20:
         30:7b:54:4b:18:62:40:b0:bc:4b:a1:b0:8b:40:27:20:d5:68:
         24:73:04:80:a1:d3:3b:14:c0:77:20:2f:09:3e:3f:52:14:42:
         ad:c4:78:de:50:c1:85:ce:88:78:0d:75:03:ce:21:61:38:f3:
         07:94:56:42:a6:16:dd:7b:5c:e9:17:ec:75:4f:af:06:d2:e9:
         a7:ec:25:a1:7a:ee:f7:0e:42:c4:38:da:cd:d2:a4:1c:4d:16:
         a9:c3:d3:33:9c:8c:4c:b5:04:54:4c:5e:fe:f2:5c:82:b4:c5:
         ba:57:39:e2:36:3c:9b:3e:96:ee:e7:eb:10:96:93:26:bf:f6:
         fe:71:c9:e3:a3:71:11:3c:ba:12:34:81:12:9f:8e:a3:31:59:
         fc:e0:4a:47:1f:15:f9:46:c1:34:a7:5e:d8:bb:0d:be:c6:aa:
         c0:19:f8:dd:28:cd:cd:d8:24:4d:cf:1b:19:1d:36:f6:a1:9f:
         26:fa:e7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:26:45 2026 by rpki-client