Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9020c795-d0d1-3a23-b4c2-0148d0ec2dcf.roa
File:                     9020c795-d0d1-3a23-b4c2-0148d0ec2dcf.roa (raw, json)
Hash identifier:          XNyEg9YiyQSl18h6Wtt99vilopN87bgwUIg+EMIOj3U=
Subject key identifier:   22:DA:DB:45:5E:F4:B6:5A:97:BA:DF:EE:B7:C3:44:9D:4B:8E:81:64
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D83CAD2934E222F5508A0BE20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9020c795-d0d1-3a23-b4c2-0148d0ec2dcf.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     22394
IP address blocks:        2001:4888:8010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:d2:93:4e:22:2f:55:08:a0:be:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=935e6f02-480b-44ef-99ad-c7efdc000a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:45:89:9f:80:4e:f7:eb:c0:36:15:4b:d7:bf:
                    47:ef:da:8e:83:49:9a:16:9d:d9:13:e1:01:78:24:
                    a6:e2:69:78:e5:f7:e7:ca:14:33:4b:2d:31:cb:a9:
                    ba:a0:62:06:18:bd:dd:a3:fb:3c:6a:5c:03:a7:f0:
                    9c:f7:94:6e:b2:87:ca:87:ca:fe:76:ea:c6:0d:42:
                    39:b5:11:62:9e:df:16:3b:61:47:1c:98:90:6b:83:
                    29:e1:40:f6:91:cb:38:cf:a8:8a:29:1a:07:9b:1a:
                    34:99:5f:29:aa:d5:bb:be:b3:bf:dc:64:4e:13:a1:
                    b5:97:f8:de:69:bb:ff:ae:de:9b:a1:ae:44:b7:0d:
                    0f:16:74:90:e7:39:b8:6b:5e:d2:df:5e:ac:99:b6:
                    61:05:4f:9b:ac:78:f8:bc:ed:4f:0e:20:a3:fa:de:
                    b8:ea:8b:1d:2e:86:25:57:bb:87:a5:97:fb:db:45:
                    0f:40:04:fb:c5:44:e3:d2:bf:2e:8a:da:b1:cf:92:
                    ea:9c:4b:cd:a3:91:2d:31:c9:aa:ba:ae:5c:76:be:
                    0d:cd:30:99:5b:9d:7c:58:ee:bc:ef:b1:90:b6:2a:
                    4f:12:79:86:da:0e:ec:59:a7:47:d1:97:e3:12:18:
                    61:cb:eb:d8:40:38:f8:2b:16:32:21:e2:8e:ee:b4:
                    7f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DA:DB:45:5E:F4:B6:5A:97:BA:DF:EE:B7:C3:44:9D:4B:8E:81:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9020c795-d0d1-3a23-b4c2-0148d0ec2dcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8010::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:99:a1:78:35:e4:f7:69:6b:d7:9d:1a:b1:b0:24:35:46:71:
         89:ce:c5:d9:7e:44:15:51:9b:26:ee:ed:27:39:cc:36:0e:33:
         48:50:98:b9:ad:18:2c:8a:6a:e5:35:6c:91:af:50:40:27:d3:
         86:51:29:f3:b9:0a:3f:89:2f:7b:a7:ba:08:fe:03:67:98:c3:
         a2:fe:b5:a4:07:f3:fd:91:95:47:c9:1d:ec:71:19:95:38:dd:
         5c:61:3f:6c:4e:f2:d2:aa:28:b2:65:a6:3c:44:d8:c2:fd:4e:
         9d:63:c0:9b:25:dc:17:28:d1:1d:d0:5b:0f:85:a4:f6:be:2b:
         26:07:1a:38:e5:18:52:03:c1:0e:99:e7:8c:4c:af:db:f1:32:
         eb:cb:4b:b4:7e:c5:31:a7:94:17:62:6e:7e:b1:af:5a:54:bb:
         d2:1b:10:52:3f:47:bf:1d:df:b3:a1:24:44:4e:d1:48:39:3e:
         84:e2:ab:88:e7:78:32:ed:a9:15:88:44:63:b8:5e:c5:f8:52:
         17:08:25:b1:25:17:a2:55:3b:a5:ee:c1:bd:4c:51:8f:34:68:
         77:76:4a:e0:1c:7d:7e:c3:22:68:37:86:c5:6a:32:f3:d4:2b:
         c2:33:d9:62:8b:85:f5:bd:0f:2c:d4:29:e8:af:4c:eb:61:fc:
         9b:51:9d:17
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2DytKTTiIvVQigviAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
OTM1ZTZmMDItNDgwYi00NGVmLTk5YWQtYzdlZmRjMDAwYTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kWJn4BO9+vANhVL179H79qOg0maFp3ZE+EB
eCSm4ml45ffnyhQzSy0xy6m6oGIGGL3do/s8alwDp/Cc95RusofKh8r+durGDUI5
tRFint8WO2FHHJiQa4Mp4UD2kcs4z6iKKRoHmxo0mV8pqtW7vrO/3GROE6G1l/je
abv/rt6boa5Etw0PFnSQ5zm4a17S316smbZhBU+brHj4vO1PDiCj+t646osdLoYl
V7uHpZf720UPQAT7xUTj0r8uitqxz5LqnEvNo5EtMcmquq5cdr4NzTCZW518WO68
77GQtipPEnmG2g7sWadH0ZfjEhhhy+vYQDj4KxYyIeKO7rR/DwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCLa20Ve9LZal7rf7rfDRJ1LjoFkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTAyMGM3OTUtZDBkMS0z
YTIzLWI0YzItMDE0OGQwZWMyZGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADuZoXg15Pdpa9edGrGwJDVGcYnOxdl+RBVRmybu7Sc5zDYOM0hQ
mLmtGCyKauU1bJGvUEAn04ZRKfO5Cj+JL3unugj+A2eYw6L+taQH8/2RlUfJHexx
GZU43VxhP2xO8tKqKLJlpjxE2ML9Tp1jwJsl3Bco0R3QWw+FpPa+KyYHGjjlGFID
wQ6Z54xMr9vxMuvLS7R+xTGnlBdibn6xr1pUu9IbEFI/R78d37OhJERO0Ug5PoTi
q4jneDLtqRWIRGO4XsX4UhcIJbElF6JVO6Xuwb1MUY80aHd2SuAcfX7DImg3hsVq
MvPUK8Iz2WKLhfW9DyzUKeivTOth/JtRnRc=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:22:02 2026 by rpki-client