Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/853bbe3b-73e5-3c29-99fd-c077c558c440.roa
File:                     853bbe3b-73e5-3c29-99fd-c077c558c440.roa (raw, json)
Hash identifier:          FL21ae4oIG2VCdp6Ep2F5jAPeIdWIn7nmxFzeGkbJlA=
Subject key identifier:   33:E3:30:18:D3:96:C2:4D:74:0A:13:EC:74:99:E6:31:6B:3F:8D:EE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D83CAD35F257C570CE9081E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/853bbe3b-73e5-3c29-99fd-c077c558c440.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     22394
IP address blocks:        2001:4888:8031::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:d3:5f:25:7c:57:0c:e9:08:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=f401732b-b95d-4b3d-bbc1-600fcce083da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9f:6f:0d:3f:d6:fe:4a:dc:2c:20:46:ac:2d:
                    fc:af:15:83:94:bd:63:46:6a:dc:98:d7:3b:7c:77:
                    8f:f0:70:04:86:8a:9e:09:be:e0:b6:7b:be:59:a0:
                    8d:50:b2:6e:2b:ef:2b:ed:b9:e8:72:84:6d:6a:ab:
                    9e:50:06:5f:6d:05:34:85:35:44:07:30:db:aa:86:
                    f0:f7:1a:13:a7:b9:cc:08:02:1c:b3:fa:97:80:4f:
                    52:f8:3e:4f:7b:e6:b9:62:e9:b0:db:d8:63:78:79:
                    b3:69:15:90:b8:4b:c9:d8:87:cb:ae:ae:9f:07:24:
                    98:cc:92:aa:a9:38:28:fc:5e:84:aa:09:b2:a7:7c:
                    6e:91:e7:23:55:a7:ef:95:0d:e4:ae:42:07:64:58:
                    3c:d6:8b:38:0a:dd:9a:e9:14:3b:52:a0:d2:6b:aa:
                    7a:3e:c2:95:08:01:e6:08:b1:a2:db:1c:b2:48:3a:
                    a6:6d:9a:a9:b9:72:28:27:73:4b:6b:5a:32:c3:fe:
                    f1:89:4a:a8:82:15:81:de:a1:da:ff:09:21:b3:02:
                    70:32:9c:36:b3:e6:13:42:fe:e1:db:c2:88:b6:84:
                    df:d0:4a:38:7f:7b:14:1d:a9:f2:3f:5b:01:de:02:
                    2a:27:ec:fc:d4:d0:9f:e6:39:09:54:9e:00:3c:fb:
                    23:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E3:30:18:D3:96:C2:4D:74:0A:13:EC:74:99:E6:31:6B:3F:8D:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/853bbe3b-73e5-3c29-99fd-c077c558c440.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8031::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:9c:cc:21:88:ec:d8:d4:46:55:a1:fd:1e:fa:1d:23:d5:62:
         e0:f6:5f:f0:91:56:e2:0a:90:2a:4a:8a:08:25:5e:58:41:43:
         43:46:1b:89:c8:f3:e4:ca:98:3d:ba:ca:b3:51:eb:ea:3a:2c:
         23:ee:b0:e9:d2:14:ab:56:f4:e7:ab:b3:20:aa:3e:53:fc:d6:
         4f:f1:a6:8d:31:8a:9c:2c:d8:6f:17:57:f5:74:55:c5:a0:40:
         bd:9e:c3:69:3e:25:c8:68:7f:2a:e7:97:0e:b1:e1:f7:73:f4:
         75:53:65:83:02:f5:06:67:31:8d:23:ee:02:d4:d5:8f:1a:08:
         1a:25:e8:1a:20:15:99:a1:f2:fc:6d:16:23:87:f0:bd:52:44:
         d1:a6:e7:47:6f:a2:1c:18:6c:40:9d:72:db:53:c8:8a:23:7d:
         a0:0b:09:51:2c:75:ac:45:66:72:37:87:40:02:42:cb:99:e7:
         6a:59:c7:cd:e4:38:3b:ab:f1:63:f1:6a:b4:7a:27:f9:ab:1a:
         63:0c:75:91:fa:cc:50:21:cf:45:88:17:bf:9e:54:84:ad:14:
         39:97:37:ef:53:a5:2c:f9:d1:b1:32:bb:39:8e:12:2c:ca:71:
         ff:a7:c5:7b:b8:be:84:41:e5:57:48:06:fd:d1:47:c8:9f:4d:
         aa:90:67:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:05:43 2026 by rpki-client