Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ad24892b-d927-3140-aa3c-35bd960b9726.roa
File:                     ad24892b-d927-3140-aa3c-35bd960b9726.roa (raw, json)
Hash identifier:          zOzbnv2MHpOoHHdsZO9w/Yis/+T9A3YdJmptiz2f5nQ=
Subject key identifier:   75:F1:76:34:64:35:19:CC:51:90:0B:BB:C9:FB:C4:9D:38:6E:8A:92
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D83CAD5F7399BB31E5895FB40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ad24892b-d927-3140-aa3c-35bd960b9726.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     22394
IP address blocks:        2001:4888:a620::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:d5:f7:39:9b:b3:1e:58:95:fb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=f85ab769-ed35-45cd-bf96-39efc10558eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:79:b3:62:33:1b:81:60:80:35:6f:97:93:54:
                    5b:89:a4:c5:05:94:53:51:50:e2:f1:20:b8:71:27:
                    5f:71:5b:59:42:c6:7b:8b:69:0d:9a:22:8d:29:d8:
                    5b:f4:95:57:b6:aa:17:25:8d:9b:54:12:00:b6:3b:
                    ee:f8:02:ad:0c:ee:98:af:5e:33:24:31:f6:de:02:
                    7a:8c:e7:08:42:58:7f:e9:f8:91:54:43:48:14:ac:
                    a5:0a:44:3e:62:35:b1:c4:b1:31:a5:b2:e7:6e:61:
                    8d:71:06:93:27:99:e1:38:16:fb:a3:c0:7b:76:46:
                    1a:da:4d:04:0c:18:df:40:b9:d5:2f:cc:2a:4f:ac:
                    71:db:f1:ed:bb:64:48:6d:f0:a0:6b:00:d3:cc:00:
                    a5:f8:13:79:70:f9:8f:db:a6:5f:d7:96:e7:c4:45:
                    31:52:dc:15:bd:31:a4:0d:78:0b:a6:34:0e:89:d6:
                    47:2a:fb:56:51:2f:18:1b:96:77:c8:33:ec:0b:16:
                    ac:12:49:70:4d:ed:fd:37:79:2e:0d:de:3d:0c:cb:
                    ba:b4:13:bf:51:3e:b6:5c:3c:f4:09:f9:af:12:dc:
                    fc:1d:ff:95:ad:bf:18:fe:14:b7:f3:c0:f0:53:c4:
                    f5:f1:ae:b9:bf:1f:9d:d1:fc:66:75:db:dc:eb:ea:
                    33:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F1:76:34:64:35:19:CC:51:90:0B:BB:C9:FB:C4:9D:38:6E:8A:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ad24892b-d927-3140-aa3c-35bd960b9726.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:a620::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:1f:11:90:1a:82:dc:41:c8:03:d0:de:82:ee:1c:bf:b0:4c:
         cf:8e:ed:6b:f9:7c:fd:3a:4c:b2:4f:72:9b:ee:62:33:75:0f:
         d7:d0:48:97:fc:f7:e4:a3:cb:90:ae:0d:1a:5a:a2:97:d3:0a:
         70:5f:ab:06:78:1e:e6:73:4f:56:8c:ee:cd:c1:64:87:27:9c:
         3d:c0:7f:7f:1b:80:5f:10:81:7c:36:20:fc:90:31:d6:63:7a:
         a1:20:e3:26:c5:47:d7:e7:c2:79:75:94:82:43:c1:e9:ce:b4:
         34:68:3f:5b:03:2c:ad:8d:d0:6e:6f:4c:da:12:8b:9c:d7:92:
         af:ed:02:a9:e1:06:c4:fa:94:c7:cf:d4:44:4c:b9:09:31:ee:
         80:49:ad:c2:0d:da:80:d8:59:09:10:05:0c:82:fd:2e:40:01:
         46:f1:87:d3:24:09:29:11:d1:99:f9:45:8a:b2:93:89:45:48:
         43:4e:b0:98:0b:2e:1a:e2:44:44:2e:ef:2b:01:fb:76:eb:a4:
         6c:6d:9c:a8:cc:0e:55:96:c6:cc:60:d1:a3:9f:07:a2:43:b8:
         0f:a0:2f:15:65:06:e5:9b:42:1b:fd:23:5b:08:5f:9c:c9:e9:
         b2:d6:9a:e2:67:7f:dc:f9:9c:9b:a1:3d:13:d9:14:ff:ce:61:
         58:95:75:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:07:08 2026 by rpki-client