Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ea4ab297-773a-3fa4-ae11-0a9564323d14.roa
File:                     ea4ab297-773a-3fa4-ae11-0a9564323d14.roa (raw, json)
Hash identifier:          JQcKzB+rXf9koZ8wRQu0ammKvKA1jpfKyOXs1W0y1MI=
Subject key identifier:   28:5B:FB:05:9E:E0:1B:92:32:CE:5C:8B:38:D0:52:AC:64:69:F7:A7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D83CAD5C80BE32FB04470C820
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ea4ab297-773a-3fa4-ae11-0a9564323d14.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     22394
IP address blocks:        2001:4888:a608::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:d5:c8:0b:e3:2f:b0:44:70:c8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=3ef738ed-eb15-46c9-a9b0-e9e4d9292917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:19:93:37:7b:cd:ea:4e:cd:02:c4:f9:6f:75:
                    c6:75:8e:01:e9:93:29:5a:12:f1:9a:26:6a:06:d7:
                    c6:d9:25:6b:ca:bb:61:ed:40:bc:23:6b:bb:db:99:
                    cd:a3:6f:97:6b:f5:04:b7:ae:66:46:09:82:fb:38:
                    b2:68:b3:09:7d:9c:3c:60:32:e8:90:76:ff:79:a1:
                    a8:85:ca:88:ff:85:7c:fd:07:64:e0:ad:04:bf:12:
                    c7:a4:7b:ed:1e:f5:0f:23:64:b6:9d:e5:40:c7:d9:
                    00:45:b4:65:ac:81:79:ec:a3:57:59:4c:6a:6e:94:
                    c9:df:8b:58:8a:cc:3a:e5:c8:a1:ad:ce:eb:a4:c5:
                    af:39:dc:56:81:94:bf:51:f1:27:8c:97:34:fb:46:
                    40:0b:8d:5d:7c:48:cb:3c:35:06:cb:ba:76:22:ac:
                    5e:ec:a3:95:ba:c7:20:63:c3:dc:81:31:62:94:f0:
                    59:3d:33:19:8a:a0:e3:ff:28:e9:42:c2:be:d2:8c:
                    be:85:a8:c0:ff:ce:28:4f:7c:b7:db:e7:a7:c8:16:
                    24:7b:ef:37:c9:ba:59:e8:05:68:00:68:32:ee:8d:
                    c6:f6:97:5a:d7:35:47:8b:ea:02:06:a7:4a:64:b8:
                    fb:04:04:ea:0b:e7:b1:29:a8:b4:9e:6d:d6:14:6c:
                    b6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5B:FB:05:9E:E0:1B:92:32:CE:5C:8B:38:D0:52:AC:64:69:F7:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ea4ab297-773a-3fa4-ae11-0a9564323d14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:a608::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:38:09:9b:52:79:79:da:8a:f5:ab:19:55:c7:dc:9b:aa:c3:
         0f:f9:f2:90:f0:32:2d:ab:ad:63:3d:13:18:16:6a:7d:f6:95:
         91:f9:25:01:b4:bc:6f:33:20:2c:ca:e2:42:26:eb:b0:13:84:
         e3:d7:98:01:ad:5d:98:89:e3:33:77:8b:d5:70:c2:54:42:d9:
         d3:96:e3:d8:88:dd:b0:35:93:25:f7:71:bc:2d:99:aa:ac:86:
         e5:27:9e:bd:71:93:61:27:64:dd:3a:1a:ac:59:ab:86:b0:fd:
         12:fa:31:03:d4:15:dd:13:33:70:de:75:64:63:6a:5b:67:26:
         dc:da:a5:21:2b:e2:d3:84:bd:06:69:5c:18:57:83:50:58:59:
         5d:61:0c:80:9c:63:60:53:fd:69:21:96:f3:6f:3e:fe:8f:3d:
         43:be:cf:b1:22:0b:6a:d9:ab:62:70:32:25:66:fc:2d:7a:fc:
         f4:87:f4:28:d6:82:94:9e:ab:eb:57:d5:07:19:54:c8:1f:fa:
         a2:d0:46:d2:e9:ba:22:cd:1e:bb:28:4f:ce:38:ca:7c:c9:b3:
         bd:b5:e7:44:5b:80:13:c6:7b:0c:47:c0:a9:c0:83:a4:c8:c2:
         c8:83:d4:66:4c:18:df:82:b2:04:19:6c:b3:b1:66:be:2f:1e:
         03:72:ee:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:01:02 2026 by rpki-client