Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01cda0f2-0493-33de-8ebe-2b1483ee817d.roa
File:                     01cda0f2-0493-33de-8ebe-2b1483ee817d.roa (raw, json)
Hash identifier:          EQ4iOcNG5yHIMLtYqBK/iAHyeQDDkQSphI3IOzWal/g=
Subject key identifier:   9A:F3:42:D5:B0:B2:93:8E:E5:48:33:57:E3:62:E1:28:16:75:F6:67
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E640F9840AA4D65F42D92CEC4
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01cda0f2-0493-33de-8ebe-2b1483ee817d.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     22394
IP address blocks:        2001:4888:806f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:98:40:aa:4d:65:f4:2d:92:ce:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=b4ecc056-eff0-41ba-85fb-9effafeb77e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a7:99:a7:57:d4:52:41:7a:f7:37:24:8c:ae:
                    b1:a7:ea:80:6f:9c:51:9a:97:e7:74:09:14:16:ad:
                    34:4c:a6:1a:31:0a:39:ff:b8:4b:80:70:f3:a8:5d:
                    82:46:d5:34:9f:cd:0d:85:dc:7d:c9:ea:1c:b7:ab:
                    7a:bb:50:72:65:57:f8:c5:14:25:6e:e3:45:8c:40:
                    61:fe:4d:c1:6b:3b:93:24:9e:99:bf:2f:e4:1c:20:
                    23:e8:2a:ca:19:88:89:c5:cf:82:b0:73:96:81:77:
                    a7:b0:42:e3:13:cb:90:65:b3:82:b5:d1:de:5b:1e:
                    44:db:4f:6c:ec:b3:5f:39:04:95:70:dc:d6:e1:f5:
                    89:50:f7:70:82:8d:9f:a1:04:a9:26:7c:dc:28:7a:
                    21:ef:a4:81:45:f0:d2:f8:7b:09:43:46:0a:c2:3e:
                    75:11:aa:d9:d9:ad:f5:de:87:20:16:fb:0c:2b:8a:
                    e1:86:04:50:bf:ee:33:c6:45:b8:40:5b:d7:c4:aa:
                    2e:d4:4a:b6:3c:15:f2:71:93:09:19:44:2c:fe:86:
                    43:86:20:2f:ac:c6:1a:a2:f3:f8:f4:b8:6f:ac:f7:
                    18:3a:01:85:ab:1b:ce:99:6e:e9:0a:3c:9f:92:99:
                    c5:68:7e:22:a7:e5:f2:73:25:0a:18:86:34:95:af:
                    d9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F3:42:D5:B0:B2:93:8E:E5:48:33:57:E3:62:E1:28:16:75:F6:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01cda0f2-0493-33de-8ebe-2b1483ee817d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:806f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:3e:98:d4:44:8b:54:8e:67:74:19:f8:d8:5f:cb:eb:69:1a:
         5a:44:d1:09:5d:6e:5e:54:72:66:5c:4d:eb:08:aa:2d:7d:d0:
         15:27:50:f2:14:84:d9:16:f2:58:fe:9e:32:ca:0e:45:80:a9:
         14:32:f6:ad:ce:0f:6b:23:f7:c7:d7:e3:28:80:9e:ee:9c:59:
         1a:bc:14:63:be:98:7d:e2:d5:7b:0e:5d:12:fd:b8:1c:b5:b7:
         16:bd:76:d1:6b:c4:ec:46:0b:c9:17:4c:b5:b7:a5:1b:91:45:
         91:3b:03:23:74:42:6b:a8:83:f0:aa:06:c6:ec:31:83:fe:5b:
         55:44:04:d9:09:16:9a:5e:15:04:80:c2:ed:dd:98:b9:af:ed:
         be:f9:3c:26:87:0f:33:04:55:4c:1a:4f:aa:ae:94:c9:be:a2:
         d7:dc:da:47:10:94:39:52:f1:80:a7:d4:ee:cb:93:64:f3:aa:
         93:40:f9:cd:4d:0c:3e:9d:41:6c:46:00:9c:03:ae:31:b9:18:
         f7:25:d5:94:c2:3e:3e:23:cd:4f:c5:8e:32:9d:1c:74:e8:7a:
         78:f8:20:1f:23:cf:72:26:5d:52:dc:84:47:2d:22:38:ad:fb:
         0f:50:8f:71:0a:1d:bb:93:41:3f:e9:e2:9f:f8:02:cd:4a:dc:
         12:3e:fe:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 03:44:17 2026 by rpki-client