Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/4b0824b2-0cca-327c-b142-2760bb28ccd7.roa
File:                     4b0824b2-0cca-327c-b142-2760bb28ccd7.roa (raw, json)
Hash identifier:          4BxIG8lZjWss567aYwByfPTIDPvTOpez9pdLLcYhjSI=
Subject key identifier:   07:B7:05:36:EF:F0:6D:18:3B:DA:61:A1:94:5B:CD:87:63:BA:F2:B5
Certificate issuer:       /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Certificate serial:       010D0C9F4328584F23C25143F77726EDEE77B400
Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/4b0824b2-0cca-327c-b142-2760bb28ccd7.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     5662
IP address blocks:        157.166.144.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:51:43:f7:77:26:ed:ee:77:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=667758bb-69db-45ef-a62d-a3f9753c6fc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:19:ce:03:ff:f8:d7:14:9a:b2:e5:e8:fa:15:
                    f5:a6:74:b7:71:6b:b8:73:82:99:fd:bd:cc:c2:fb:
                    cb:48:f2:44:0f:55:80:9f:ff:35:49:0c:c8:d2:c7:
                    6b:25:02:20:cb:4b:62:b2:b8:3c:ac:04:42:8b:ef:
                    33:83:6d:29:6f:10:97:23:f4:d8:af:43:e8:c0:cd:
                    88:47:14:7d:f0:5b:ae:85:3b:c1:3b:7a:4e:70:44:
                    44:0e:db:f4:73:2c:c3:d3:0e:fb:9e:67:13:c9:68:
                    ba:71:9a:59:92:1d:e6:2b:44:d8:31:18:09:a4:61:
                    02:8a:e1:d1:46:5b:f6:25:1c:c4:c3:11:65:e2:54:
                    20:f4:68:d2:b1:50:ee:ba:df:ca:cd:25:b9:a4:e7:
                    e3:83:db:f4:f9:b7:b0:c3:a9:88:bd:5a:53:e6:06:
                    d3:77:c9:c0:09:c6:60:69:bd:d1:cb:d0:95:68:72:
                    5c:56:25:bb:9c:22:e6:57:2d:38:1b:1c:92:de:97:
                    85:0e:4b:cc:7b:ac:85:6c:40:97:6d:d7:bb:c4:48:
                    87:19:a0:cb:50:27:51:78:bb:e9:71:05:77:e3:a3:
                    ad:8c:6a:9f:9b:3a:30:26:d1:aa:dc:ed:5b:b9:0e:
                    95:19:69:b6:90:13:2b:3c:91:12:3a:6e:6a:e4:7d:
                    34:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B7:05:36:EF:F0:6D:18:3B:DA:61:A1:94:5B:CD:87:63:BA:F2:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/4b0824b2-0cca-327c-b142-2760bb28ccd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl

            X509v3 Authority Key Identifier:
                keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.166.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:25:88:e2:a2:68:19:3f:2c:88:cc:1c:07:87:39:e8:1d:d1:
         e9:7e:e5:b3:03:cd:f2:bc:be:f7:0f:9b:a4:25:08:4a:58:7d:
         5b:44:e9:10:a4:b8:e6:96:2f:a3:31:57:88:27:8e:4e:9e:f7:
         8f:5d:93:2d:df:6b:d6:ef:76:9e:ca:72:26:64:af:ae:b2:bc:
         da:d5:97:2f:27:13:31:76:67:f0:45:65:7a:74:0a:0d:ee:e5:
         ee:9a:02:26:0f:50:27:35:1d:ea:61:31:d4:d9:fd:a8:d0:f6:
         53:ca:06:46:fe:cd:07:b0:42:43:09:59:97:1b:63:3f:0e:b9:
         2a:87:57:0a:80:c6:58:57:6c:a5:49:ac:f5:62:8b:1d:7f:6e:
         8f:d9:0c:c9:39:19:19:e0:38:b8:b6:56:fb:d4:b2:72:a0:47:
         24:df:5e:a3:97:60:40:5e:49:82:5a:c8:6a:45:fd:a4:4a:39:
         fd:63:3e:22:02:77:23:d8:d2:3c:47:9e:d0:24:84:3d:81:e0:
         3e:db:bf:36:d8:f2:60:a7:b8:3f:d8:0a:7b:7f:2c:60:58:ed:
         4e:87:af:67:be:c0:64:27:da:9d:71:10:99:79:7c:8f:a8:21:
         c6:1d:e5:dd:51:24:56:ae:c1:a0:89:94:df:7e:31:66:64:ab:
         8f:d1:79:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:37:35 2026 by rpki-client