Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52246771-5404-34f9-bd87-e21e736990ae.roa
File:                     52246771-5404-34f9-bd87-e21e736990ae.roa (raw, json)
Hash identifier:          0MWXJm3oHbU8/B4dntFPbjl0xNDGs7RwuJMmTsPCdZY=
Subject key identifier:   63:FF:64:33:46:94:2D:02:0A:D7:BC:8E:B2:37:E8:77:41:79:D9:73
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E640F967016C6A58BE33AAD20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52246771-5404-34f9-bd87-e21e736990ae.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     22394
IP address blocks:        2001:4888:8030::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:96:70:16:c6:a5:8b:e3:3a:ad:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=88edbfe4-9fa0-43f2-a3ea-bc2ff57aa86d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2c:1f:3f:73:c3:75:c5:45:9f:d4:03:28:7c:
                    43:24:25:7e:d3:a3:f3:18:35:e1:81:e8:49:6b:4f:
                    45:6d:c7:46:16:31:38:c4:78:6a:41:25:4c:a7:cd:
                    18:6c:f6:3e:d8:fe:f7:55:a6:47:84:85:af:fd:2f:
                    6f:d2:c5:cb:7d:02:c1:13:32:de:c4:d3:d9:5a:33:
                    14:44:f7:8c:50:c5:73:f2:77:40:9f:77:cd:f6:2c:
                    8e:4f:ec:b6:9c:b6:18:60:7c:02:c5:f4:76:30:68:
                    7b:23:79:f7:58:a5:fb:48:3f:40:0c:45:f3:3a:6a:
                    c1:a8:88:d2:11:ca:76:c9:99:28:b5:e9:ae:16:74:
                    62:0f:60:63:49:85:97:fc:f0:20:05:4a:4d:ba:2b:
                    7a:55:13:a9:12:d7:be:2a:b5:3c:68:42:dc:46:1f:
                    8d:c8:aa:ff:ef:bc:b5:5e:7b:71:bc:06:ea:24:64:
                    b0:ff:8b:47:bc:94:00:f7:2b:37:ba:9a:6b:6f:44:
                    39:1f:46:7d:43:61:1d:2e:b5:35:9d:b9:30:37:b9:
                    84:d9:6f:4e:59:a6:aa:0e:72:67:24:92:14:d3:07:
                    b4:b7:8b:89:37:2e:b9:e0:26:ab:73:81:b4:75:9b:
                    12:24:1d:ce:e3:1d:03:12:70:a4:34:04:ae:1b:f4:
                    a5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FF:64:33:46:94:2D:02:0A:D7:BC:8E:B2:37:E8:77:41:79:D9:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52246771-5404-34f9-bd87-e21e736990ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8030::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:30:28:dd:c8:bc:cb:b8:2e:32:47:bd:8c:55:3e:f8:83:e2:
         ed:2d:ff:36:54:33:b3:a9:62:05:f8:19:b6:fe:bb:b8:4b:70:
         66:2d:26:1d:0d:9b:13:96:e6:00:bb:35:71:e9:ba:39:0b:ec:
         9c:2d:95:94:23:72:ff:74:d2:85:cd:a8:b0:08:29:12:58:ee:
         86:1c:a3:dd:e7:de:09:9a:07:b2:fa:5a:b5:f9:08:5d:eb:42:
         05:73:33:dd:e3:3f:44:7b:50:36:04:b2:13:c5:b5:a3:da:84:
         eb:e8:23:f3:60:f5:74:05:c6:a1:ff:1d:3e:1a:6e:98:d3:fc:
         5f:af:08:4c:1c:0f:b1:a3:7e:d7:f3:3c:3b:77:25:b7:e6:32:
         d3:94:f3:ab:80:da:14:8e:e6:71:eb:20:31:fb:67:aa:f4:cc:
         93:67:88:c3:74:d6:67:f9:11:23:24:d9:a3:b9:df:83:1d:7c:
         b8:af:89:1d:e0:04:f3:9d:0a:34:7e:c5:fc:34:90:50:3f:00:
         b5:c9:59:49:96:b1:3b:bd:80:09:1e:a3:c8:9c:7f:c5:8d:32:
         7a:e2:65:75:68:32:f0:ed:77:0f:3a:40:0f:b1:d9:16:02:34:
         2a:0a:54:14:48:48:c5:91:43:44:a6:37:87:74:83:86:fd:fe:
         83:ab:3e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 03:44:24 2026 by rpki-client