Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01cda0f2-0493-33de-8ebe-2b1483ee817d.roa
File:                     01cda0f2-0493-33de-8ebe-2b1483ee817d.roa (raw, json)
Hash identifier:          EZifoky+cBtX4sa5Jj7FEkRPxmv5SuUoNbyl5G0aKsc=
Subject key identifier:   52:65:E9:C0:BB:5E:4A:5A:32:1B:7B:39:91:B9:B7:14:07:95:0F:22
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BC270A0A895AE46F15709D200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01cda0f2-0493-33de-8ebe-2b1483ee817d.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     22394
IP address blocks:        2001:4888:806f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:a0:a8:95:ae:46:f1:57:09:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=97c564e5-7ca0-4268-9656-b467f17f694a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8d:6d:f4:b5:1f:59:6b:0a:01:91:e1:38:fb:
                    e1:0d:9e:cd:9d:a7:4c:91:0e:b1:58:83:12:5f:37:
                    5f:4a:01:4a:3f:4e:5c:71:6d:67:e8:c1:2c:d8:8d:
                    ee:48:cd:4b:0f:a8:e3:aa:09:1e:e8:7f:81:5a:1f:
                    c9:2e:20:b4:64:b7:8f:0c:e3:8f:61:34:f6:f3:a2:
                    ef:52:43:5f:71:b8:25:3b:9e:2f:9e:f6:22:79:2d:
                    9a:5b:9d:a5:6e:0b:5b:aa:f9:6a:eb:4a:65:60:82:
                    fc:22:e6:63:2c:84:a4:36:1b:00:a0:97:60:56:3f:
                    a4:06:8f:1b:63:81:58:dd:f4:fa:a0:52:1c:6e:2b:
                    47:a5:9f:f5:2a:30:8c:50:e7:3c:c3:0b:09:92:9d:
                    fc:ba:46:42:54:ba:68:fe:05:b1:d3:10:cc:0f:49:
                    67:41:85:76:14:cf:1e:c1:97:5d:2d:db:c1:3b:22:
                    38:28:b5:06:29:36:22:8b:b3:94:c6:29:cd:e6:39:
                    cf:9d:7b:01:ed:45:ce:9f:99:f6:80:23:24:a5:4e:
                    de:7d:92:a0:ac:9e:bc:41:e7:19:4e:5c:b6:b0:1c:
                    58:cc:44:1b:4f:03:f8:04:9e:1b:81:bb:b7:12:28:
                    66:b9:53:dc:d2:c1:82:3b:4b:c6:88:24:0d:a6:f5:
                    9f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:65:E9:C0:BB:5E:4A:5A:32:1B:7B:39:91:B9:B7:14:07:95:0F:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01cda0f2-0493-33de-8ebe-2b1483ee817d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:806f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:b0:50:70:a6:60:b2:96:cc:8b:04:54:56:21:f7:05:87:5d:
         79:96:bc:7d:a7:22:85:9f:af:77:c6:21:2e:db:b9:60:5b:f7:
         4b:1f:c1:f0:93:63:4f:70:13:91:84:05:3a:df:8f:65:48:e9:
         e8:be:71:9f:6a:c6:1b:f7:f3:d7:51:1a:2a:55:90:4e:28:92:
         c6:1e:28:17:6e:91:52:3c:46:03:b4:5e:0c:7e:25:5f:aa:e9:
         e4:a8:fa:53:ac:5b:af:07:73:a2:2d:47:d6:f3:22:e6:d5:db:
         5e:0b:aa:af:ec:14:75:d2:ab:ac:88:3d:07:e8:d4:88:ed:b7:
         d2:13:bc:51:03:7c:99:6e:7d:0a:1c:62:cc:a7:b1:0b:3d:ae:
         23:ea:ee:cf:fe:9c:35:55:c3:37:c7:07:96:b6:1c:54:7e:15:
         5f:84:04:8e:35:f2:47:0d:ad:ed:91:36:1c:7e:b0:26:aa:66:
         37:20:cb:dd:73:3b:11:a1:55:2c:29:02:9c:7b:aa:12:94:82:
         5c:c2:fb:a4:6a:4f:ba:77:d8:3a:14:ef:53:1c:18:34:e4:23:
         44:bb:97:bc:f5:ce:53:29:3e:20:7e:d7:c3:49:2b:4f:35:51:
         44:5f:aa:48:11:6b:0e:48:a4:7c:c1:8a:63:a6:4f:42:27:84:
         f6:69:74:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:21:55 2025 by rpki-client