Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/8479e980-5926-3bca-b615-a9e231509306.roa
File:                     8479e980-5926-3bca-b615-a9e231509306.roa (raw, json)
Hash identifier:          DaQbgCdczhWqOf9OGinlSBKTd2AH4V7Q84b+88dforE=
Subject key identifier:   34:54:94:57:69:80:9C:31:C9:DA:B4:73:EA:5C:E1:1C:91:F9:A2:B5
Certificate issuer:       /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Certificate serial:       010D0C9F4328584EDC91E8C5CAC78BBCD6559CA0
Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/8479e980-5926-3bca-b615-a9e231509306.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     40703
IP address blocks:        157.166.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:e8:c5:ca:c7:8b:bc:d6:55:9c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=98f361fb-5f02-4ec6-8138-e728335b0b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ef:b4:c0:f1:6f:0a:a5:24:fd:30:58:2c:b0:
                    16:f0:e9:9c:68:3e:14:0a:1d:91:be:3f:b6:74:2b:
                    96:a5:b0:c3:5d:db:56:a4:3d:5c:d1:f3:63:76:93:
                    b1:3d:46:da:c1:d7:ec:7a:ff:cd:98:22:36:27:0c:
                    e0:4a:f5:49:98:de:0c:6f:fe:e0:91:82:d7:37:39:
                    ad:8c:72:5f:ff:80:ad:8a:51:81:f4:dd:d5:4a:3c:
                    75:11:f2:fd:d9:c3:d5:05:f7:94:c4:cd:7a:89:bf:
                    a0:7e:fc:a1:e8:41:95:18:d7:97:0c:2c:44:b8:31:
                    47:36:b9:3f:47:20:82:36:ce:f7:52:35:6c:43:87:
                    8f:41:71:69:1a:5f:29:94:d8:85:af:71:72:a7:b8:
                    93:59:59:48:03:e6:9c:b5:3f:3b:4f:3d:85:15:ac:
                    22:55:d4:07:34:1b:c5:a6:43:ca:d9:8d:df:3f:d1:
                    63:59:1d:96:67:63:fb:aa:2d:22:8d:73:94:7f:c5:
                    55:d0:24:61:4c:6e:a0:cb:b5:69:47:31:7d:3c:7d:
                    b2:76:01:d2:40:4a:aa:5a:b8:8b:a4:bd:05:52:f2:
                    93:82:c2:27:28:b1:5a:13:e7:b7:4a:da:cf:50:9c:
                    48:ad:d2:80:fe:a3:09:5c:58:3e:aa:d0:d0:4f:66:
                    3f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:54:94:57:69:80:9C:31:C9:DA:B4:73:EA:5C:E1:1C:91:F9:A2:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/8479e980-5926-3bca-b615-a9e231509306.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl

            X509v3 Authority Key Identifier:
                keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.166.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:dd:57:0e:fd:d9:78:71:12:6d:ee:06:51:a3:54:2d:80:08:
         87:19:4c:63:bd:1b:cf:db:1f:2c:98:72:75:71:fc:b6:94:9c:
         91:12:5e:03:06:db:c7:69:07:79:68:6c:61:29:f1:12:72:11:
         6e:a9:ff:ae:d8:b3:5f:21:4d:c9:5d:67:8b:a4:64:e1:ef:44:
         36:02:20:a0:46:f5:a9:54:74:d8:18:2d:f1:04:81:b7:a6:06:
         23:81:c1:ea:24:6e:22:b3:bf:d3:1e:a7:0c:c0:45:c9:33:3f:
         e1:5f:02:fd:0d:00:8e:c6:61:c0:d2:85:95:17:0f:36:94:a2:
         32:de:07:71:44:c3:bd:55:d2:80:26:16:0c:1f:ff:61:93:4f:
         b8:3c:86:cc:e0:cb:c2:ea:46:43:af:01:a9:6c:4f:ee:bc:e9:
         f2:35:5b:99:d8:35:05:93:b6:65:3b:34:29:6c:c3:32:1c:a1:
         d4:27:b7:a6:70:31:5e:97:3e:c4:f5:08:6a:5f:db:3a:03:4e:
         89:b2:38:22:d5:12:ff:82:20:2e:cf:55:d1:46:42:88:01:51:
         2b:4d:d8:9b:5e:84:98:ae:26:f3:3b:97:8d:f8:ed:9c:12:82:
         04:ba:fe:d2:60:4b:5a:67:ef:e0:64:3a:ce:e7:d2:fc:84:0c:
         31:9b:c4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:11:57 2026 by rpki-client