Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7267ca22-e4dd-34d1-881e-b10f748865ea.roa
File:                     7267ca22-e4dd-34d1-881e-b10f748865ea.roa (raw, json)
Hash identifier:          2SgoB+VdktX/xJFUtkR1bh5SjTgIGMYRk2vfPWlLcQU=
Subject key identifier:   11:FA:70:4F:08:B9:A8:59:1F:77:80:30:CB:A9:82:33:C2:16:54:90
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BC2709D5B72B3D2D2A8335080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7267ca22-e4dd-34d1-881e-b10f748865ea.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     22394
IP address blocks:        2001:4888:8016::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:9d:5b:72:b3:d2:d2:a8:33:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=311a6961-9788-4aa6-b3f2-de340305cff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dd:da:0f:94:3f:a6:e8:a7:a4:4a:95:6a:35:
                    77:92:00:f4:71:22:94:68:d8:c0:5f:84:b2:bf:32:
                    c8:fc:ba:eb:c9:cb:97:a6:a4:e7:ea:c7:46:95:e6:
                    58:4e:22:c6:f9:c9:13:06:94:71:38:04:ef:3e:1a:
                    07:4e:d5:61:c3:14:63:71:6f:8f:c4:8b:24:6c:49:
                    1b:ef:89:31:0c:43:e9:4f:e0:61:be:be:2c:b3:b7:
                    e3:20:9b:28:49:95:6f:ab:32:fc:dd:79:7e:bd:8e:
                    ac:e5:1d:d0:06:8d:31:b6:16:fc:f5:32:6d:db:e2:
                    bc:d4:f7:16:13:be:90:14:ee:bf:09:42:81:11:31:
                    59:e2:dd:86:ff:0c:e6:04:bb:41:17:a2:3e:8b:95:
                    da:bf:8b:5b:8d:1f:3b:88:5c:44:10:e2:c8:61:03:
                    d9:3f:76:58:62:4e:9a:ea:e2:1f:9a:db:5a:19:83:
                    d6:da:93:eb:9c:25:f0:81:5d:07:1a:21:26:08:fa:
                    17:3f:89:e1:59:8d:6a:41:33:7f:e5:2c:7b:36:6a:
                    d3:52:20:5c:31:90:6b:41:71:6a:b3:64:ae:64:25:
                    3e:6b:39:19:4f:7f:bd:90:8e:6a:ec:96:c2:de:33:
                    28:0c:94:37:db:73:c3:11:17:e4:db:59:b3:6f:20:
                    3c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FA:70:4F:08:B9:A8:59:1F:77:80:30:CB:A9:82:33:C2:16:54:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7267ca22-e4dd-34d1-881e-b10f748865ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8016::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:39:2b:4d:13:8f:ee:07:cf:91:5a:11:47:f2:d4:88:46:e6:
         58:09:7b:2a:ec:d1:7f:fe:90:3c:3f:77:16:9b:32:ba:ce:e7:
         0d:54:74:1a:21:97:e6:ba:c9:99:76:a7:84:91:4c:3f:4f:bb:
         b5:1b:de:b6:20:ee:bf:14:ea:ab:dd:af:ea:a7:04:f0:43:fc:
         51:a5:65:13:3a:d2:7d:b0:b9:4d:90:8e:69:4e:9a:ab:d1:af:
         f5:cf:8e:53:50:50:82:88:9a:2e:7d:81:11:ab:83:a9:27:fa:
         c4:77:6b:ac:e8:b5:d1:9c:4b:b0:09:88:d4:d8:d3:9f:a3:b1:
         89:e8:f8:91:a7:0d:46:0a:e6:3f:31:bc:d2:cf:ed:4b:ac:50:
         81:06:7d:22:af:4b:c4:92:ff:77:af:63:2a:55:d0:12:fc:6c:
         2c:72:bc:8a:d6:a5:a8:a8:61:bd:9d:b4:7f:d1:93:fb:ed:79:
         fe:68:76:6a:15:0c:16:d7:8e:f2:98:92:52:c5:ee:8e:12:42:
         2c:d1:19:1a:aa:de:89:fb:7e:e9:eb:11:8c:c1:19:a5:71:c1:
         0d:c0:72:85:41:b6:63:88:d7:1c:5f:ef:0f:4a:5f:a8:1b:c0:
         e3:68:76:a9:ef:f4:be:c8:d8:1d:86:c1:de:9e:0d:36:2c:12:
         6c:64:73:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:05:11 2025 by rpki-client