Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/288c4520-4d43-370b-a67f-041cfda55568.roa
File:                     288c4520-4d43-370b-a67f-041cfda55568.roa (raw, json)
Hash identifier:          KY8Fm6ci3UM1NcO+SJP0JSNQqq+rnJTHkrH32O/dOR8=
Subject key identifier:   1D:36:F0:9C:9F:E9:FB:0D:2E:3C:75:79:3B:7C:F9:5B:51:D0:9E:B0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D83CAD41294429847BBCCD340
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/288c4520-4d43-370b-a67f-041cfda55568.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     22394
IP address blocks:        2001:4888:8050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:d4:12:94:42:98:47:bb:cc:d3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=68caebf5-fa37-4043-955c-6ca929adbf07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:62:9f:10:eb:f2:8b:6a:2c:0d:00:3d:65:a4:
                    14:60:5d:e9:15:1a:ba:06:8f:30:b0:5d:ca:5a:f0:
                    37:4a:56:53:4d:5a:a5:80:f3:43:f4:93:4c:d7:c1:
                    7e:99:44:59:ae:69:62:34:bc:1c:d3:d4:3d:3e:aa:
                    73:32:0a:e5:db:e8:e0:eb:cc:ef:8f:cb:f6:d0:21:
                    97:dd:05:05:30:96:ed:85:17:fb:8c:e3:23:af:17:
                    3e:ee:b0:47:49:98:95:3a:05:db:78:40:f9:98:ed:
                    e9:29:44:a6:05:6d:b3:01:f3:1a:e3:c7:af:a0:58:
                    71:6d:1c:59:cb:77:f2:11:fa:c2:5b:9a:21:5e:6f:
                    0a:81:44:a2:87:b2:72:12:13:51:0d:ee:96:6d:23:
                    1b:97:4d:3f:08:f0:fa:e8:28:ce:85:d8:01:e4:6a:
                    c8:e3:4c:17:74:b2:14:26:87:0e:68:7e:f0:45:60:
                    c4:12:dc:b7:1c:31:70:5c:2e:8c:02:37:a3:b5:1d:
                    e2:70:5b:d6:78:60:00:bf:af:4c:1f:e4:ea:f8:e3:
                    19:85:ef:f4:2a:db:d3:4e:68:21:f5:19:a8:78:4e:
                    de:59:f4:3e:79:89:a3:3d:69:85:58:cc:cc:43:7c:
                    e4:79:aa:c8:8c:78:54:04:4d:5e:0e:83:84:42:7e:
                    8b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:36:F0:9C:9F:E9:FB:0D:2E:3C:75:79:3B:7C:F9:5B:51:D0:9E:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/288c4520-4d43-370b-a67f-041cfda55568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:16:28:ab:27:fa:7c:da:c5:03:22:ce:d5:c0:3c:f2:18:45:
         fe:81:ac:de:e2:d3:bc:9d:6c:02:4d:d7:6e:bd:be:d5:ba:e3:
         84:66:f5:aa:0c:e3:dd:3e:00:e2:87:59:73:59:24:1f:50:7b:
         40:b2:b1:58:9d:88:89:3e:0a:57:93:cd:ae:1f:d7:13:8e:53:
         87:14:d4:f2:76:fd:22:79:ae:eb:14:59:df:a5:1e:7a:47:f1:
         b4:ff:8e:ce:f3:06:b0:bb:56:12:fb:c2:dc:ee:4d:cc:e9:85:
         c4:4d:fe:a9:b9:2e:0d:3e:08:4f:ea:73:ae:e7:ab:b3:b0:7c:
         68:11:6b:35:f0:16:06:b4:c8:e9:7a:56:ba:62:53:fe:c9:2f:
         5e:53:bb:d5:9e:b0:6d:45:35:b3:04:c5:bb:1a:c6:64:b7:2e:
         fc:c3:8b:22:c9:67:d7:d1:ba:01:f8:0b:92:f6:d7:a2:9c:44:
         44:ef:6a:18:bc:b7:85:f6:0a:fe:61:10:17:b2:5d:47:97:ca:
         db:75:33:17:77:e0:f6:86:e4:3c:fb:e0:e8:13:da:01:bc:3c:
         d9:06:85:82:67:53:6a:27:f9:62:80:51:62:c5:5e:05:99:d1:
         80:e1:12:1f:08:c3:26:c4:02:78:56:8c:7d:82:66:89:34:b5:
         b4:95:c8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:14:38 2026 by rpki-client