Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/faf5c4eb-8cde-3c07-be5a-b96ab533ca41.roa
File:                     faf5c4eb-8cde-3c07-be5a-b96ab533ca41.roa (raw, json)
Hash identifier:          UH/WfVkVHW7pnoPvnaJv+WAumyyX9kQL6YSQLJsPRTg=
Subject key identifier:   D1:5E:7B:75:EB:79:D7:0C:D5:1C:2D:EE:0A:DF:1B:0B:A4:5B:6B:02
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D83CAD45A26D1982F40FA7600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/faf5c4eb-8cde-3c07-be5a-b96ab533ca41.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     22394
IP address blocks:        2001:4888:8064::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:d4:5a:26:d1:98:2f:40:fa:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=27ce88f4-4c7a-4170-a411-584e0861c2c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6b:83:3c:88:f1:f0:b9:9d:79:63:fa:a8:9c:
                    ac:8f:bf:4d:03:ad:b0:95:f9:3a:df:25:99:63:b4:
                    00:3a:1f:80:a9:b9:85:93:53:ff:73:1b:66:0e:b1:
                    30:b4:57:17:7c:05:51:45:88:03:c2:28:ff:e6:ad:
                    c8:22:9e:13:6d:99:6e:ed:fa:4f:24:67:4a:9b:47:
                    97:29:1f:da:3e:87:b1:b2:20:53:03:23:e6:31:b4:
                    93:3c:97:82:75:70:35:c8:56:2e:bf:35:5a:c5:a4:
                    06:22:a8:0d:db:84:80:8a:fa:03:23:07:06:80:c9:
                    61:e7:91:d9:89:56:8d:79:eb:26:45:a6:7b:73:8e:
                    d9:1a:6d:e4:09:67:a2:a4:d0:35:18:9e:65:2b:cb:
                    cd:4b:b9:65:c3:d6:6c:1e:05:75:3c:d4:54:79:4a:
                    86:e7:a9:2d:ac:7e:71:8d:8a:c4:46:fa:e1:41:c6:
                    0a:8d:85:e1:02:a9:10:94:ed:39:73:28:f9:80:70:
                    48:0b:11:40:04:ef:0e:a2:a6:85:cc:bc:de:49:cb:
                    2f:28:c3:e1:ad:1c:ed:43:c8:3c:38:10:9c:3d:ae:
                    ef:87:4f:df:1f:8d:80:da:d7:b3:3d:54:25:f5:75:
                    ac:6c:4b:c3:c9:f7:1e:3d:be:c4:89:71:c0:ad:ab:
                    83:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5E:7B:75:EB:79:D7:0C:D5:1C:2D:EE:0A:DF:1B:0B:A4:5B:6B:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/faf5c4eb-8cde-3c07-be5a-b96ab533ca41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8064::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:3d:05:c1:e9:fe:84:bc:3c:8e:f4:09:c9:ad:d6:3b:6f:3c:
         b9:0c:14:e7:04:a5:4c:c1:46:47:24:ac:cf:a6:0e:cb:9f:0b:
         21:c6:58:d0:a6:77:69:dc:49:2c:43:52:d0:6a:cc:cd:9b:5b:
         a7:a2:b8:a6:b6:f8:c9:8b:90:d8:a8:e6:3c:67:9e:17:1b:2c:
         ee:f2:8a:19:d9:08:29:02:15:66:c0:03:3c:1a:31:c6:f0:e4:
         9b:15:b0:6f:88:ed:79:19:b0:a7:30:72:94:95:1d:a0:95:eb:
         dd:2f:a6:06:57:20:38:96:70:32:dd:4d:df:e5:8a:54:52:16:
         4c:92:d5:9a:1c:91:fc:d3:65:41:02:b9:c8:b9:00:6e:60:1e:
         7c:22:c1:cf:e6:3d:26:f7:cb:c9:4f:98:8c:f2:ba:38:5a:1a:
         5e:7f:ab:50:32:5b:bb:76:d7:e6:a4:fb:17:4c:35:32:48:67:
         c2:fe:42:0b:37:c6:7c:4c:62:bf:eb:b6:17:c3:17:32:04:ad:
         38:55:0b:e0:5d:d3:da:35:f7:a3:57:7f:d4:2c:6d:72:2f:de:
         4c:d1:67:7f:63:c2:80:c0:0e:f2:f9:96:70:86:40:a6:9f:fe:
         53:e9:36:d6:36:de:16:cb:2e:25:a5:aa:a9:bc:15:f1:72:d9:
         5c:8b:9e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:01:24 2026 by rpki-client