Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/90bf56d8-9606-3938-9298-dfe1082e34a3.roa
File:                     90bf56d8-9606-3938-9298-dfe1082e34a3.roa (raw, json)
Hash identifier:          I5HXWiPVNHTTZh+O6JPd7NtiqrSkkn6g8xuHlXhLcGc=
Subject key identifier:   6A:AD:B8:38:C3:D3:F0:9D:8F:07:51:41:A2:E8:AD:46:26:2E:5C:62
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D83CAD39CEE3641078947CCA0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/90bf56d8-9606-3938-9298-dfe1082e34a3.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     22394
IP address blocks:        2001:4888:8036::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:d3:9c:ee:36:41:07:89:47:cc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=e1972396-4a77-4b79-8cda-2faf99c9c31c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8c:4e:31:b9:24:c3:2c:5e:be:0a:aa:c0:a2:
                    40:cd:26:4e:2e:f5:13:46:a2:76:af:e5:6f:7b:c5:
                    9a:4f:b3:52:5a:89:04:29:fa:d3:9d:49:74:93:2c:
                    3a:e6:d1:c8:d7:9d:fa:97:f6:46:56:72:5d:e6:89:
                    61:60:c7:1c:8f:2d:a8:d1:6e:f1:76:4f:ca:22:a6:
                    f0:40:f0:87:d4:2a:2e:72:a4:2b:76:18:e5:26:81:
                    14:79:70:9d:aa:ef:0d:cc:7d:f6:86:82:79:ea:e1:
                    7c:9f:27:89:04:4f:3c:df:cb:31:fb:5d:4e:5e:63:
                    94:31:b1:4f:ae:a2:d1:55:ad:63:94:bb:dd:2a:98:
                    61:5e:76:73:af:9f:04:ba:6d:26:ea:22:06:86:06:
                    5e:62:49:eb:bf:41:1d:00:92:df:58:20:25:18:53:
                    9f:d4:9f:89:f3:dc:a2:4c:57:ea:2a:a4:f8:fe:99:
                    c6:95:91:45:cc:e1:8b:ea:4e:ef:d2:16:d1:4b:30:
                    a6:a1:fb:21:97:5e:16:19:05:6e:0f:56:35:cf:9b:
                    47:d4:af:13:13:b8:6a:42:78:79:27:8a:bd:6b:09:
                    90:7a:b5:3c:b7:cb:04:fa:0d:91:d5:09:b4:b3:86:
                    19:84:7e:dc:19:35:ca:8c:b3:21:80:0f:5b:10:c3:
                    3d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AD:B8:38:C3:D3:F0:9D:8F:07:51:41:A2:E8:AD:46:26:2E:5C:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/90bf56d8-9606-3938-9298-dfe1082e34a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8036::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:9f:0c:16:6d:c2:62:44:07:e0:63:87:49:72:81:88:2e:50:
         28:7f:10:64:b3:dc:4f:3d:c2:b0:ca:53:f9:65:8d:62:b2:59:
         48:a3:08:8c:b2:b9:c1:fe:cc:a1:30:52:73:ae:a0:23:82:9f:
         98:62:2f:cb:3f:f4:c8:b3:b8:f1:87:f3:3f:60:89:07:0f:08:
         11:86:7a:c0:4f:62:d4:16:22:fb:59:c4:dc:e3:ff:ab:76:01:
         1d:19:ad:f2:83:19:d1:69:f0:c3:6d:30:a3:44:dd:e8:89:e8:
         f0:a2:26:4d:c1:5f:bf:13:b1:17:2b:b7:aa:91:87:5e:ed:b9:
         c3:be:c3:0f:79:3f:fd:61:54:ac:fe:6b:00:9f:a2:6f:c9:b5:
         58:dd:fd:9a:b1:81:6a:00:30:28:a2:b6:af:26:38:21:fd:31:
         3d:c8:1a:fe:2f:f6:2a:30:13:51:f2:38:09:e7:c7:00:37:58:
         ff:4e:30:34:0e:c4:0c:49:c4:44:d8:19:04:74:0a:4b:e6:36:
         49:dd:3d:37:46:0d:c9:88:81:23:9f:76:68:ce:0c:79:02:31:
         53:63:f4:f4:e8:53:5f:aa:78:8c:49:a3:fd:6d:60:fc:95:f8:
         99:dc:e9:83:6c:ff:88:4f:83:de:35:29:73:7a:e4:c1:9f:bd:
         31:5e:61:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:30:11 2026 by rpki-client