Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7f6eb25-fdf7-3801-8270-d5d4a836be33.roa
File:                     c7f6eb25-fdf7-3801-8270-d5d4a836be33.roa (raw, json)
Hash identifier:          vVXpVQk6dmgbuDPch3Txw5iovDUWGu64VNM0V3vQ7Xw=
Subject key identifier:   8E:8E:B9:CC:33:BA:04:0C:DE:9D:01:28:53:3B:34:A1:7F:6E:D2:C3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D83CAD5386B9AE9C1619E7F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7f6eb25-fdf7-3801-8270-d5d4a836be33.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     22394
IP address blocks:        2001:4888:803d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:d5:38:6b:9a:e9:c1:61:9e:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=0f6458bd-f34a-4e98-bb6c-1142a713da0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:45:1f:61:a4:1d:0e:ae:0f:f8:11:ab:44:00:
                    24:45:a4:af:bc:dc:e2:c1:ff:5c:44:cf:b1:af:2b:
                    91:98:04:7d:28:ee:67:9c:70:72:c8:eb:cd:0e:76:
                    24:97:51:4b:be:7c:66:cf:e5:8b:ea:18:28:b5:cb:
                    df:41:cd:8a:d1:c3:9e:22:77:41:05:b2:92:20:11:
                    3a:3b:f8:e7:21:95:f0:db:f6:2e:41:89:a8:c3:cd:
                    09:0f:8b:d5:07:2f:77:3a:c0:cf:9b:f1:8e:4b:1c:
                    a0:d3:8f:f6:65:2c:93:d3:66:7f:d1:33:30:04:26:
                    06:57:67:16:c2:ed:d7:aa:b1:ac:47:75:52:b5:e4:
                    85:ad:9b:db:91:31:ae:18:92:38:fe:ed:7e:99:6e:
                    c2:8c:c5:9f:5f:0b:01:ed:4b:25:5e:30:3a:b5:c5:
                    4d:72:cb:17:43:2a:2c:b5:54:f5:b2:4c:c6:42:00:
                    9f:e4:f5:2c:5c:f7:36:1a:f7:66:5e:be:87:bf:b0:
                    62:b5:40:1a:ed:00:63:c6:02:c4:86:0e:b9:93:64:
                    bf:19:5f:68:90:22:7c:66:16:39:bc:2e:e7:6c:b8:
                    3d:e8:e4:94:4e:7e:bd:47:bb:39:0b:9d:a6:8c:b8:
                    2d:bf:48:98:93:23:fa:61:8d:03:43:77:6a:e3:d6:
                    1c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8E:B9:CC:33:BA:04:0C:DE:9D:01:28:53:3B:34:A1:7F:6E:D2:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7f6eb25-fdf7-3801-8270-d5d4a836be33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:803d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:2e:ad:4f:e8:f7:05:53:4f:bd:8d:db:fd:21:ab:c7:43:0b:
         8b:9e:a8:5d:13:26:7b:48:a1:c3:9f:b3:7c:7f:01:48:a1:ea:
         35:f0:d6:39:6b:59:48:7b:51:ff:e6:f6:b9:f7:47:27:46:2c:
         56:ec:5d:27:33:88:ad:58:da:0e:28:3b:fb:c6:ba:58:b3:f9:
         23:72:5a:a2:f2:b1:70:87:47:e2:b3:62:2b:ec:a4:7e:64:57:
         ae:66:9f:25:3c:46:d6:cc:10:90:65:98:3c:15:9a:3f:52:cb:
         7a:00:9c:b4:4e:96:58:bc:a9:d4:49:ce:8b:10:f0:90:17:80:
         c6:5a:7f:f7:eb:ea:93:3a:5e:e1:fb:8d:02:54:0a:de:9d:02:
         e1:90:e0:b1:47:b8:97:66:44:eb:87:10:a3:7c:3b:7d:ae:09:
         e3:45:7b:ee:1c:47:9b:be:4f:9a:f7:07:b9:c8:0c:e8:4a:17:
         c0:4e:77:e3:2c:98:72:6f:16:08:0e:d2:90:00:7e:2f:22:3d:
         97:43:c3:fa:31:ab:b6:87:1e:18:e5:9b:51:67:1e:a4:66:f5:
         27:3f:96:f9:93:f4:62:ab:11:1c:c6:e5:b9:81:91:57:e0:98:
         a9:6c:c7:41:72:e9:69:d6:6a:cb:15:31:f1:00:42:31:55:57:
         b0:81:ff:18
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2DytU4a5rpwWGefwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
MGY2NDU4YmQtZjM0YS00ZTk4LWJiNmMtMTE0MmE3MTNkYTBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0UfYaQdDq4P+BGrRAAkRaSvvNziwf9cRM+x
ryuRmAR9KO5nnHByyOvNDnYkl1FLvnxmz+WL6hgotcvfQc2K0cOeIndBBbKSIBE6
O/jnIZXw2/YuQYmow80JD4vVBy93OsDPm/GOSxyg04/2ZSyT02Z/0TMwBCYGV2cW
wu3XqrGsR3VSteSFrZvbkTGuGJI4/u1+mW7CjMWfXwsB7UslXjA6tcVNcssXQyos
tVT1skzGQgCf5PUsXPc2GvdmXr6Hv7BitUAa7QBjxgLEhg65k2S/GV9okCJ8ZhY5
vC7nbLg96OSUTn69R7s5C52mjLgtv0iYkyP6YY0DQ3dq49YcYQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFI6OucwzugQM3p0BKFM7NKF/btLDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzdmNmViMjUtZmRmNy0z
ODAxLTgyNzAtZDVkNGE4MzZiZTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIA9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEUurU/o9wVTT72N2/0hq8dDC4ueqF0TJntIocOfs3x/AUih6jXw
1jlrWUh7Uf/m9rn3RydGLFbsXScziK1Y2g4oO/vGuliz+SNyWqLysXCHR+KzYivs
pH5kV65mnyU8RtbMEJBlmDwVmj9Sy3oAnLROlli8qdRJzosQ8JAXgMZaf/fr6pM6
XuH7jQJUCt6dAuGQ4LFHuJdmROuHEKN8O32uCeNFe+4cR5u+T5r3B7nIDOhKF8BO
d+MsmHJvFggO0pAAfi8iPZdDw/oxq7aHHhjlm1FnHqRm9Sc/lvmT9GKrERzG5bmB
kVfgmKlsx0Fy6WnWassVMfEAQjFVV7CB/xg=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:15:27 2026 by rpki-client