Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2fc328d0-5853-3bf3-ade7-cb1b0a92372b.roa
File:                     2fc328d0-5853-3bf3-ade7-cb1b0a92372b.roa (raw, json)
Hash identifier:          V6vtuu7MAUK/YyJ6L5dYAr4p7ZcW6xga7tSMxzhYn/U=
Subject key identifier:   68:36:21:F2:26:2A:8B:33:00:26:AE:4F:B8:05:31:45:EE:9E:23:94
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E640F98A69DC9E6E451C87700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2fc328d0-5853-3bf3-ade7-cb1b0a92372b.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     22394
IP address blocks:        2001:4888:a60e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:98:a6:9d:c9:e6:e4:51:c8:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=cfa2861b-51d0-4b8e-b109-832fcea836f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cd:2c:c6:a5:fa:eb:1a:49:76:b9:e3:4d:de:
                    c1:9a:bd:f1:ee:3b:1d:18:fe:36:01:72:d6:5b:1f:
                    a4:7b:51:95:2a:e3:c3:52:79:94:0e:3a:ef:84:13:
                    32:ea:86:4b:4f:b7:85:03:70:c0:bd:de:f1:d4:d7:
                    a5:76:36:36:71:39:d2:4b:6d:64:ef:b7:ba:2a:62:
                    15:5d:83:df:78:ec:d2:0a:31:02:db:d8:9b:00:55:
                    05:da:78:67:c5:6c:3e:ce:d7:cd:f3:1f:70:ac:ca:
                    f9:fb:58:00:f6:61:d0:ef:74:49:5a:4d:53:30:5d:
                    59:42:77:c2:b4:c1:24:94:74:f1:15:de:a1:bb:0c:
                    1e:76:79:c7:20:c4:fa:5a:02:89:70:04:27:d1:df:
                    f9:3b:f3:4c:d0:06:d3:95:96:ab:3d:7b:e3:85:be:
                    1e:4b:14:5e:c0:66:f9:0d:b3:f5:53:6a:eb:c9:f8:
                    9f:5f:e8:e5:e8:c1:18:5d:33:9d:15:9e:9c:a2:c1:
                    b5:95:bb:cd:d6:4c:72:2c:74:94:a6:ee:75:cb:af:
                    b0:e3:35:9e:fc:2c:fe:7d:76:5c:ac:29:1e:cf:d6:
                    91:03:04:50:2a:0b:1b:67:92:75:b2:a1:ae:f2:7c:
                    1d:de:5d:c3:0a:16:e4:ce:72:10:e8:8a:b9:30:b6:
                    3b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:36:21:F2:26:2A:8B:33:00:26:AE:4F:B8:05:31:45:EE:9E:23:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2fc328d0-5853-3bf3-ade7-cb1b0a92372b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:a60e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:18:40:8f:3a:9a:be:66:0c:1d:fd:6e:6d:d5:bc:4d:3d:49:
         9b:1a:24:2a:60:fd:75:66:d0:58:62:22:53:71:1b:28:1a:2f:
         2d:6c:6e:cd:15:74:5c:60:bb:5e:94:d9:9c:a0:a7:02:f1:ad:
         23:6f:4f:70:ef:6e:67:82:41:81:69:d2:4f:72:65:b5:8b:9d:
         96:a6:68:15:96:aa:29:f7:1b:5c:49:df:83:80:d7:a7:fb:d0:
         3b:93:ab:93:f7:29:98:87:75:77:02:e5:34:60:55:6e:87:4f:
         86:43:26:0f:d6:61:5e:2c:c8:df:1f:64:19:73:01:7b:75:87:
         71:b0:39:47:b9:3c:eb:f3:2b:25:ce:12:a5:52:71:dc:b2:cc:
         cb:e7:db:5b:19:f7:f0:ff:17:03:22:f1:fa:b3:33:ed:af:f0:
         61:fa:7d:c1:f7:0c:ed:8c:84:cb:ab:f9:d5:1c:61:b4:47:93:
         c6:83:b5:62:e4:de:a0:81:cd:1f:5d:dd:9f:c7:f0:a4:c8:c5:
         af:99:26:d4:b5:b4:a8:ed:10:3e:4e:a6:2f:6c:5c:57:86:ab:
         d1:c0:4c:ea:75:2f:53:93:49:59:ab:b3:55:b6:43:c0:6b:ce:
         80:67:e3:a7:aa:25:32:37:7e:a1:0c:df:e1:77:21:ca:66:c3:
         c5:2f:f1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 03:45:17 2026 by rpki-client