Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01cda0f2-0493-33de-8ebe-2b1483ee817d.roa
File:                     01cda0f2-0493-33de-8ebe-2b1483ee817d.roa (raw, json)
Hash identifier:          u8WfPBcWD8gQF5xxHYxHu5cxTBxoNjLAa8DSJVvtX3c=
Subject key identifier:   F4:78:7D:BF:DA:A2:A5:33:71:E5:20:DB:D8:72:C0:15:88:F0:34:E6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D83CAD56A442B098A89783C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01cda0f2-0493-33de-8ebe-2b1483ee817d.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     22394
IP address blocks:        2001:4888:806f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:d5:6a:44:2b:09:8a:89:78:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=4f7eb799-88b8-486d-a8f8-ef878911d813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:27:ac:d8:4c:9c:5b:65:36:c8:40:ca:7f:9b:
                    db:30:87:70:e6:9e:c0:ee:fd:cd:ce:2e:a2:f7:40:
                    b0:ba:2e:05:f0:eb:6d:3c:cc:68:cd:db:77:8e:9b:
                    8e:77:6f:32:96:2c:a6:9e:1c:e2:91:c1:0d:b4:3f:
                    5a:84:e0:78:8b:df:b2:1f:f5:96:25:1a:8e:8f:28:
                    af:45:af:2e:7b:78:70:67:e5:91:f5:63:96:95:cc:
                    84:f6:97:c9:8f:9a:41:7b:a9:7e:07:52:1d:eb:6a:
                    7f:44:6b:15:2b:46:8f:ef:c3:20:77:4c:82:3f:5f:
                    b7:d7:bb:a6:4b:ba:e9:8c:46:74:09:53:ce:40:6a:
                    70:72:82:ba:23:a9:06:69:ff:62:ff:e4:db:36:c7:
                    75:b8:dc:6b:55:dd:78:d8:b6:55:1c:d0:77:72:34:
                    d8:53:30:f1:0b:f0:56:d3:68:5e:69:7f:c2:52:6e:
                    83:9a:a1:8c:ff:d4:5e:91:6d:5b:f2:6f:8b:02:cb:
                    5a:0a:07:35:13:de:49:5a:98:50:42:fe:53:4e:b3:
                    d9:bc:ab:c9:f1:ed:48:d0:d8:29:be:d5:1f:da:f4:
                    d4:7e:2c:f8:b1:b2:62:86:40:2e:14:3c:73:50:fb:
                    4b:41:63:a1:86:ea:9d:6e:da:ec:2d:5e:0d:22:e6:
                    c7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:78:7D:BF:DA:A2:A5:33:71:E5:20:DB:D8:72:C0:15:88:F0:34:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01cda0f2-0493-33de-8ebe-2b1483ee817d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:806f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:1e:5e:ae:84:60:ea:0e:fe:49:af:4e:aa:af:1c:f8:40:09:
         af:59:8d:c2:c9:69:00:13:27:ff:8c:97:13:68:40:99:7d:86:
         e2:5d:8e:7f:ab:7d:3a:21:1f:81:b8:fa:7d:2a:08:0f:8c:07:
         6b:e3:65:01:f5:9c:b2:08:ee:75:78:4e:cf:60:ab:a1:ce:1a:
         34:7a:81:7d:fe:40:26:69:38:1f:30:ef:d2:55:39:77:c3:3b:
         b5:e6:00:08:95:0e:28:ae:94:d4:4c:5b:45:7c:6b:00:06:a4:
         98:bf:d3:9c:e5:34:4a:3e:50:69:b7:53:ed:f4:89:a6:e0:81:
         07:9c:a5:21:b4:47:c2:8b:fc:dc:70:66:b4:6f:da:0b:47:db:
         a6:20:e0:b5:0c:76:6b:46:f1:19:c4:52:3a:5e:a3:81:ea:d2:
         e0:f3:32:ec:30:a6:dc:85:3b:51:fa:fd:27:66:4f:82:ec:6b:
         5d:e2:7a:97:23:f2:46:b8:45:fc:87:fa:bb:8c:9f:24:e4:0c:
         cb:8e:ad:48:83:49:b4:9b:c5:44:13:dd:d4:26:58:56:7e:bf:
         8b:20:fe:2d:c4:49:45:89:c6:65:22:e6:5b:e2:bb:d6:b9:0b:
         3a:e7:d5:db:44:8e:11:4f:d5:8e:82:90:16:0e:63:dc:03:18:
         d0:fb:e6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:21:04 2026 by rpki-client