Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a3bba56-316c-4439-8cfd-d9c463a7aa82/2d71ec39-a5bc-3ccd-9890-aeb1e0e342ff.roa
File:                     2d71ec39-a5bc-3ccd-9890-aeb1e0e342ff.roa (raw, json)
Hash identifier:          Qhk6ybUn0ztZpuGXbea5srPp6z6blW02hr70FHg6mvo=
Subject key identifier:   87:06:F2:D6:28:40:C2:30:66:72:FE:3C:FD:C1:B2:4C:FA:11:80:34
Certificate issuer:       /CN=1a3bba56-316c-4439-8cfd-d9c463a7aa82
Certificate serial:       010D0C9F4328584ED431E69D465981D382DA3380
Authority key identifier: 19:A9:CB:15:78:39:AD:80:84:03:DC:EC:F7:36:B5:B1:0F:6A:0D:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a3bba56-316c-4439-8cfd-d9c463a7aa82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a3bba56-316c-4439-8cfd-d9c463a7aa82/2d71ec39-a5bc-3ccd-9890-aeb1e0e342ff.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     12099
IP address blocks:        167.73.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a3bba56-316c-4439-8cfd-d9c463a7aa82/1a3bba56-316c-4439-8cfd-d9c463a7aa82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a3bba56-316c-4439-8cfd-d9c463a7aa82/1a3bba56-316c-4439-8cfd-d9c463a7aa82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a3bba56-316c-4439-8cfd-d9c463a7aa82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:e6:9d:46:59:81:d3:82:da:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a3bba56-316c-4439-8cfd-d9c463a7aa82
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=f36d89ff-473a-49a3-a4b4-09cb6f41249a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:75:4f:53:d0:33:a4:41:3f:f3:3d:ac:04:e0:
                    82:32:7d:f6:98:46:29:31:26:11:9d:13:7c:35:76:
                    ae:b7:47:ce:a9:9a:9a:56:e4:0e:ae:0e:26:18:b1:
                    02:d8:6e:1d:52:e5:98:ee:f5:b2:27:dd:8e:56:f3:
                    b5:77:59:93:42:24:8c:df:6e:fc:27:85:ad:67:e8:
                    77:f7:f5:09:d0:7a:b0:5b:0e:a9:34:a5:ee:f5:89:
                    27:b2:32:f0:eb:c7:20:cd:ff:af:d3:9f:9a:b0:66:
                    a6:fe:e9:47:98:a9:a8:3f:fd:e7:a4:51:16:51:6e:
                    0b:8b:4e:fb:84:b4:53:6f:73:1d:dd:8c:33:06:d9:
                    12:a9:1e:8d:50:66:6b:ff:99:48:49:49:e3:8e:a8:
                    63:ff:d1:b6:8d:2c:4c:7f:12:da:2c:62:fb:73:da:
                    f2:cd:58:26:17:f5:fc:d4:e8:ed:86:14:9e:76:dd:
                    50:9c:71:51:17:1b:d4:72:7b:54:bd:17:19:7d:be:
                    34:fd:68:a2:02:55:26:6a:4a:d2:6e:5b:81:80:9e:
                    c8:ac:6c:f0:62:41:82:05:30:be:e3:06:e4:9a:08:
                    40:6e:e9:be:86:fa:95:e6:7b:0f:3f:5b:4d:c9:b9:
                    33:35:05:5b:20:f3:e4:46:22:bb:85:46:85:cf:8b:
                    ca:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:06:F2:D6:28:40:C2:30:66:72:FE:3C:FD:C1:B2:4C:FA:11:80:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a3bba56-316c-4439-8cfd-d9c463a7aa82/2d71ec39-a5bc-3ccd-9890-aeb1e0e342ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a3bba56-316c-4439-8cfd-d9c463a7aa82/1a3bba56-316c-4439-8cfd-d9c463a7aa82.crl

            X509v3 Authority Key Identifier:
                keyid:19:A9:CB:15:78:39:AD:80:84:03:DC:EC:F7:36:B5:B1:0F:6A:0D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a3bba56-316c-4439-8cfd-d9c463a7aa82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.73.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:6b:66:c7:7a:35:ba:6b:99:bf:4c:08:34:90:f8:48:67:60:
         1d:7f:70:82:55:81:1e:6d:28:c8:96:49:11:4f:49:ca:fe:ae:
         1d:8b:3b:cb:c9:98:61:ca:25:e0:4d:92:b0:0e:80:f6:95:6e:
         fb:bf:40:cf:69:01:f4:84:e4:4e:71:95:33:87:fa:50:ef:54:
         30:e0:c6:2e:28:0c:1d:5b:33:16:5f:69:d7:5b:81:4d:cb:f3:
         57:b5:b2:55:34:fd:da:40:af:ee:0e:1f:b5:f4:ad:6a:c3:21:
         8c:52:71:d8:14:0c:31:4d:01:f6:a3:5d:1a:09:73:ed:ac:ea:
         0c:db:53:94:0f:27:d6:f1:5c:af:fa:2e:34:5a:70:9c:43:f2:
         f4:5f:ae:24:ed:ce:ee:98:ed:2f:2e:4a:98:36:2a:69:85:c2:
         42:d9:30:f4:34:11:72:4e:58:13:e3:9f:d1:6b:ef:a9:76:8d:
         be:05:34:65:e4:eb:25:fd:74:ae:4b:7f:e3:37:d1:61:d1:c2:
         72:bf:c2:92:32:96:04:73:ce:3d:52:48:89:34:c0:4a:6a:cc:
         2a:eb:fe:80:e5:dc:1f:e5:f2:57:02:15:ec:ce:ac:3f:85:4a:
         4b:42:ae:a9:24:92:0a:c8:61:f6:b4:4a:e3:e3:08:8a:3d:7a:
         c8:2d:90:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:14:19 2026 by rpki-client