Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/58911768-a63b-3506-8492-d09fb3396a75.roa
File:                     58911768-a63b-3506-8492-d09fb3396a75.roa (raw, json)
Hash identifier:          VnspuJ2yqEfr54ziJeI+5LTv5qE0n97CZwoOXVXyyFU=
Subject key identifier:   0B:87:C8:8C:01:C4:C4:62:8F:6A:79:23:63:0F:99:C6:A3:45:03:74
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D83CAD603AD296D821543A000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/58911768-a63b-3506-8492-d09fb3396a75.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     22394
IP address blocks:        2001:4888:a630::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:d6:03:ad:29:6d:82:15:43:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=bfcb10b1-01b2-47ac-bc51-61728f222743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:20:fd:4e:ae:66:b9:c5:44:10:40:5f:b4:3d:
                    1e:82:02:40:7a:2f:7e:50:64:71:b5:ea:aa:1a:46:
                    10:69:1a:d2:8c:ae:7e:0e:98:71:4d:9c:46:f6:13:
                    a1:66:89:ad:17:bd:b7:ce:cb:cf:56:d3:18:62:05:
                    95:90:56:5d:ae:30:c0:a9:3d:dc:be:12:e9:7a:13:
                    3a:34:e4:a4:a4:b4:c0:7e:a7:4a:8d:8a:88:e8:fb:
                    d0:73:e3:bb:a9:05:ee:41:ad:a2:7c:6c:3a:be:0e:
                    a9:57:1d:3f:01:5e:3c:18:0a:6f:92:3d:80:f5:b5:
                    c4:c5:50:d2:58:10:e5:9a:29:7d:93:04:d3:92:50:
                    6a:c2:88:7c:0e:d3:89:d4:c0:02:71:d4:a7:d6:ed:
                    c3:66:16:e0:5c:ca:5c:e9:e0:06:b0:a2:60:51:a6:
                    24:3b:04:8a:96:0e:5f:a3:88:4e:3a:1d:7c:a7:6f:
                    c0:5e:74:53:c6:d0:52:d4:ee:60:82:c6:98:6a:60:
                    9d:88:6c:b1:3e:a6:f0:af:cb:d8:03:94:66:04:74:
                    c8:c1:b6:ed:33:85:80:26:46:25:ce:0b:0e:b9:44:
                    79:20:9c:80:60:4a:db:29:c3:f0:d9:01:54:18:04:
                    75:7f:df:17:74:cb:6b:0f:72:14:c2:fd:9f:15:2f:
                    11:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:87:C8:8C:01:C4:C4:62:8F:6A:79:23:63:0F:99:C6:A3:45:03:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/58911768-a63b-3506-8492-d09fb3396a75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:a630::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:b6:13:3c:69:f4:e0:0e:32:d7:0a:c2:59:ec:40:09:16:4e:
         4d:58:dd:f5:5e:ba:87:2d:ca:3d:d9:74:e2:3c:59:a5:a2:24:
         31:f8:66:9b:85:57:72:7d:dc:5f:c6:e2:c8:5d:21:ac:63:cc:
         15:70:ea:aa:b3:0b:54:a7:50:bb:c9:64:0d:bb:df:5a:68:32:
         9f:c1:25:d8:05:56:e1:cd:90:2c:8b:cf:8f:dc:37:dd:52:d9:
         c0:a5:97:85:65:2f:3c:02:e4:bf:42:6a:14:34:dd:bd:5f:93:
         bb:78:23:24:39:03:41:0a:0f:a8:6c:87:b8:ad:56:bd:b1:a9:
         56:f3:ca:3e:f3:11:62:3b:54:31:d6:2d:9b:e2:15:06:a8:98:
         26:6c:36:33:97:d0:77:1a:6e:a9:5d:da:b2:55:41:e2:0b:87:
         36:3c:1c:55:7e:83:ff:3c:08:f0:b2:a8:f7:ce:62:94:e4:65:
         e5:0f:20:68:c7:eb:97:de:62:e9:3a:3d:7b:64:b9:0a:e3:02:
         1f:43:b2:d0:69:ac:82:c6:a4:dd:dd:22:08:c8:bd:3e:d3:8d:
         58:9b:c6:e0:60:e2:88:66:09:b1:b9:d1:56:a7:f2:ca:66:5e:
         4a:60:9c:0a:56:eb:af:16:1c:b8:d7:9b:14:77:a7:c1:ae:79:
         00:c1:6c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:57:25 2026 by rpki-client