Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/dcbb62e7-72d5-3596-b1db-b2e6ef1f654f.roa
File:                     dcbb62e7-72d5-3596-b1db-b2e6ef1f654f.roa (raw, json)
Hash identifier:          qIrZTWH9CPoJisB9INgceOr7cRvoLYzfJEVmc7v6qLw=
Subject key identifier:   17:5E:63:40:49:22:EC:29:47:40:70:1B:C0:31:A5:66:FF:1A:C9:A6
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584E2548A7743FA88EC85DA8F2D8
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/dcbb62e7-72d5-3596-b1db-b2e6ef1f654f.roa
Signing time:             Fri 12 Jun 2026 09:19:49 +0000
ROA not before:           Fri 12 Jun 2026 09:19:49 +0000
ROA not after:            Thu 10 Sep 2026 09:19:49 +0000
asID:                     834
IP address blocks:        173.232.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:48:a7:74:3f:a8:8e:c8:5d:a8:f2:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jun 12 09:19:49 2026 GMT
            Not After : Sep 10 09:19:49 2026 GMT
        Subject: CN=5c3eaf6a-7f20-41d4-8875-7cb06a3173c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1e:b7:73:8e:09:ec:22:e4:c1:3b:48:3a:80:
                    a0:b3:7b:48:aa:ab:4a:9c:72:09:98:fb:6e:d6:de:
                    00:7b:c8:5e:9c:34:1c:2c:f7:86:c1:66:16:06:c3:
                    5e:36:b7:11:72:43:19:c4:fd:cc:13:0c:2e:79:62:
                    c5:21:74:49:3c:99:59:78:75:e2:c8:2f:f0:dd:9c:
                    cf:5f:14:99:02:ac:25:d3:68:72:07:ed:4a:ba:06:
                    51:ac:5e:e3:2e:0b:7a:11:43:a5:98:49:0e:7e:a3:
                    95:e3:ec:c9:d9:04:d1:50:7d:11:1f:15:da:9e:9b:
                    d2:a9:bb:c2:95:c3:b0:3a:e1:77:7c:56:ee:30:62:
                    fe:63:c6:11:72:c2:a2:87:78:0b:b4:eb:35:e1:9e:
                    14:a3:69:89:78:5e:94:36:f1:fc:b0:31:41:f1:80:
                    f4:27:0e:f9:a3:7f:28:15:bb:59:e0:62:8d:a2:26:
                    4d:1e:7e:0e:40:43:02:76:f9:0d:eb:66:99:dd:65:
                    a2:60:dd:ff:d8:50:1d:95:99:f3:c1:f3:5a:06:35:
                    22:3c:b4:6b:90:7d:eb:76:29:7f:8c:ef:d0:7b:da:
                    60:3e:9f:0a:84:f8:33:58:9b:8d:ff:d7:14:f1:de:
                    6e:bd:ef:21:b7:24:87:4c:2a:97:6f:22:be:81:59:
                    ef:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5E:63:40:49:22:EC:29:47:40:70:1B:C0:31:A5:66:FF:1A:C9:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/dcbb62e7-72d5-3596-b1db-b2e6ef1f654f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:e4:06:e0:cf:05:fd:4b:14:5f:f5:97:e3:c1:b6:f8:32:f4:
         ab:a5:1c:9b:7d:e0:bc:a7:d2:b9:d2:3f:73:c0:36:c5:82:bc:
         70:84:77:44:0f:c3:89:a3:a1:cc:b7:a1:82:eb:e1:83:6e:07:
         48:77:21:cf:c3:fe:92:da:cb:57:25:28:0d:14:49:0a:c0:bd:
         38:dc:6a:0f:1d:22:fa:bc:02:0a:71:48:87:e6:3a:8a:96:5a:
         4b:b4:a3:81:60:c5:c1:4c:7f:55:ca:f4:30:02:aa:b4:c8:60:
         45:9f:2b:00:4b:bc:6b:bd:cc:36:16:61:67:45:32:4d:70:c2:
         39:8a:90:96:a0:17:c9:f8:64:3f:94:7e:d3:ba:82:dc:f1:34:
         2f:17:12:06:c7:e4:9b:a5:30:26:5d:87:69:e2:c6:14:5b:ef:
         e0:b5:ab:62:0a:13:09:d7:3d:8d:30:47:67:1e:e8:bf:03:17:
         7e:ab:48:de:1a:dd:9f:0c:d7:ee:33:31:c9:73:37:4d:96:b7:
         78:b7:74:ca:fe:cb:ee:ac:cc:41:ca:9e:d7:c3:2a:bb:61:73:
         6e:48:c9:d7:7c:fb:95:64:ed:56:a1:04:3a:7f:d3:10:99:cf:
         46:3e:36:eb:e7:69:05:d2:d0:c8:2e:37:08:93:0f:c2:9c:f4:
         77:db:0d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:52:57 2026 by rpki-client