Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd73bbf1-b40b-35e2-b4e6-2a1e0b9da864.roa
File:                     fd73bbf1-b40b-35e2-b4e6-2a1e0b9da864.roa (raw, json)
Hash identifier:          FAqB8j4UX5ev73yBo+HUKKaMwKvR86DGUJePiQzRug4=
Subject key identifier:   10:FF:E7:CD:F8:05:34:F5:9A:C7:E0:9B:40:43:BD:B1:80:A4:D9:3B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F0672684084A58C2CFF47F600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd73bbf1-b40b-35e2-b4e6-2a1e0b9da864.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     22394
IP address blocks:        2001:4888:8051::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:68:40:84:a5:8c:2c:ff:47:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=a91cbc79-99ba-4399-989d-b3ce25bf7d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d2:e0:dc:3f:43:06:a1:8d:7b:14:ca:1b:a5:
                    3c:63:da:f2:ed:ad:29:b5:6f:d0:8a:fd:81:33:67:
                    67:55:b5:44:01:6c:4d:09:94:55:44:26:90:af:70:
                    7b:db:1a:8d:82:5e:7b:c0:ba:48:6a:16:ef:08:d4:
                    11:3f:95:10:22:b1:17:52:3d:6e:2b:07:92:66:53:
                    83:7b:05:73:39:4e:18:ea:4e:bf:b6:4a:ea:5d:4e:
                    e2:47:ef:f0:66:c5:8c:27:8b:b3:08:c3:c9:49:e7:
                    2e:31:c7:7b:32:6a:5d:28:da:ab:22:98:4b:4b:4c:
                    27:0c:83:e7:51:f2:29:f1:cd:26:ee:09:90:cf:5b:
                    9c:8b:db:ec:7b:c7:ec:f6:cb:78:9a:99:0f:3c:21:
                    50:a7:39:d9:57:e1:d5:d1:02:65:fe:12:bb:de:e6:
                    90:ae:10:6d:e9:52:02:64:a2:ca:16:c3:56:2b:c1:
                    89:61:a2:57:86:3e:0a:53:1f:55:d8:de:fd:60:23:
                    3a:df:fa:3c:b8:09:d1:7d:ab:d1:59:eb:c1:5a:71:
                    ef:40:91:c2:95:74:ce:fa:91:18:7a:6d:2e:e6:82:
                    1a:a1:f2:00:aa:1e:44:fd:0c:21:e5:c7:9e:22:78:
                    3e:13:3f:a5:7e:ee:3a:de:22:cd:c9:9c:5e:eb:a9:
                    14:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FF:E7:CD:F8:05:34:F5:9A:C7:E0:9B:40:43:BD:B1:80:A4:D9:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd73bbf1-b40b-35e2-b4e6-2a1e0b9da864.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8051::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:bb:71:14:af:2d:ea:23:22:6c:e8:15:c8:b0:12:7c:26:b6:
         59:76:da:e0:05:51:f3:c3:0f:d4:9c:02:0f:7c:15:23:b6:5d:
         4e:f3:89:fa:4e:4b:5d:8c:3a:21:88:8f:0e:f9:27:d0:68:b7:
         b0:e6:38:48:8b:bf:7f:6b:ec:e2:45:22:e4:59:88:09:c6:01:
         b5:0d:59:9a:a8:c3:6c:50:e7:be:c1:28:d3:e9:09:0f:1b:86:
         d1:51:7d:47:8e:87:d1:e4:b3:e0:a9:f3:d0:9d:13:f9:f4:25:
         e1:39:d3:8a:4f:0b:1d:03:07:2c:22:45:86:45:ce:24:7e:16:
         0f:c6:2d:ef:c0:23:7f:30:2c:bb:71:7e:43:09:6b:8a:cd:90:
         34:ef:21:f0:92:ac:8a:4e:bc:6e:22:fa:e1:93:e2:af:ca:0e:
         e7:71:af:1f:37:1e:47:c1:3f:1a:d3:ec:cf:4a:c5:52:d3:ff:
         3f:7f:37:be:9c:39:42:cc:6a:f0:45:2a:e8:8b:fe:6d:29:08:
         b9:07:c8:54:f5:20:bc:a8:38:7d:ab:0f:60:42:46:b1:e9:81:
         e0:32:f4:cc:1b:64:f2:ca:c1:e5:37:c1:60:0e:3b:19:96:ea:
         ac:f4:95:6d:b6:df:32:74:28:45:89:3c:fe:28:fe:d8:ee:74:
         67:39:2b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:30:37 2026 by rpki-client