Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1eb468e-862a-34d8-80a7-a51a0b66f132.roa
File:                     a1eb468e-862a-34d8-80a7-a51a0b66f132.roa (raw, json)
Hash identifier:          UTDF6iO/5HhYuKP21LVJQG2FehhK/L7K+Rc8FByliI4=
Subject key identifier:   BB:E2:30:74:2A:61:B4:07:8E:35:29:FB:68:C7:E4:F7:2F:B1:BA:E5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A00DAF2CC49339AE8003EE100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1eb468e-862a-34d8-80a7-a51a0b66f132.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     22394
IP address blocks:        2001:4888:8026::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:f2:cc:49:33:9a:e8:00:3e:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=94ce1f1d-04ca-4ffd-bf1e-899ddf9e9fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:12:42:a9:ef:f1:cc:a8:d5:81:39:9d:5e:b6:
                    a7:9a:db:9b:00:22:8f:44:39:29:0a:05:1e:db:30:
                    d0:a0:41:46:5d:af:cb:37:03:fb:45:da:b7:22:0c:
                    89:e6:19:81:7b:19:c4:59:79:c5:fc:8e:df:61:92:
                    eb:ab:2e:fa:7f:bc:5f:28:31:67:b6:13:dd:e3:a3:
                    cc:8b:43:ee:28:d7:6c:c7:5e:53:13:b2:a1:99:30:
                    c1:0a:75:01:ea:59:ab:67:6a:63:86:04:ef:aa:db:
                    58:6c:34:03:d1:83:39:ff:45:fe:c2:bc:25:2f:9c:
                    21:88:66:08:3d:aa:dd:2f:f6:e4:df:dd:4b:19:5c:
                    21:18:e9:e4:5c:1c:c4:01:0a:4f:0c:57:7f:28:7f:
                    78:5e:b8:8e:95:a7:02:87:22:c5:7d:57:e9:66:42:
                    a0:2b:d6:40:04:0e:84:3c:2a:34:65:42:5f:64:a1:
                    49:23:ca:61:47:88:73:6d:fa:74:97:3a:c3:dd:1b:
                    ea:05:21:17:13:72:85:ee:91:dd:2a:f3:8d:26:e4:
                    91:74:aa:dc:d2:c9:e1:3a:c3:1b:7d:59:6f:4a:85:
                    64:4c:17:c2:9c:aa:8a:ae:9f:e3:ec:e7:64:c1:9b:
                    58:34:76:b0:f4:69:08:b6:64:03:92:0f:bc:bf:08:
                    ee:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E2:30:74:2A:61:B4:07:8E:35:29:FB:68:C7:E4:F7:2F:B1:BA:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1eb468e-862a-34d8-80a7-a51a0b66f132.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8026::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:82:89:df:f9:cd:ae:5a:be:11:58:98:e7:64:bf:6a:97:b0:
         86:fe:d9:10:7e:5e:59:07:9b:5d:0e:4b:eb:be:d4:96:e6:32:
         76:6e:22:0f:59:af:2f:cd:00:ec:8a:eb:9c:ec:cd:d8:6e:59:
         7e:3d:0d:65:1b:be:31:d1:52:41:f4:84:7f:80:c3:86:25:28:
         72:b0:8f:32:a1:02:5a:55:08:80:58:f9:fd:59:d8:e5:8e:37:
         27:42:86:57:0a:0d:b6:60:a0:01:40:bf:92:0d:0c:b0:8c:07:
         03:0f:97:32:34:7b:be:c8:a0:28:58:fc:60:c4:78:18:90:13:
         c8:c3:a6:50:81:9f:fd:40:cc:19:8c:8d:30:2c:72:88:c5:34:
         06:59:78:90:c4:59:2d:95:82:fa:dc:e7:6a:62:4c:87:b6:76:
         d1:0d:25:09:75:2e:f0:28:cb:ce:34:80:51:4b:d8:22:17:9e:
         6f:65:ec:d7:d9:41:bd:61:c8:f7:20:f8:36:f4:ea:49:85:05:
         4d:8b:a8:f8:07:4c:38:ff:1e:d6:64:da:40:10:cb:a5:d8:17:
         8f:7e:e1:15:a7:13:4e:45:49:32:47:d4:f0:4c:76:2f:2d:f1:
         b4:5f:1f:e8:a7:0b:29:fc:d0:35:e6:c1:c5:bc:47:dc:24:a6:
         ac:39:6d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:20:57 2025 by rpki-client