Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b9d34ee9-47ee-3fe2-86f2-161d74c7da5b.roa
File:                     b9d34ee9-47ee-3fe2-86f2-161d74c7da5b.roa (raw, json)
Hash identifier:          l+uUj66s5AYkUIgBqPqf5vFlCG3YkKdtvAlhbcNGEPI=
Subject key identifier:   AD:3D:DC:23:B7:60:9C:AF:E8:06:F5:2D:F3:95:7B:D7:FD:98:23:2F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E640F97638746427F2E454100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b9d34ee9-47ee-3fe2-86f2-161d74c7da5b.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     22394
IP address blocks:        2001:4888:8061::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:97:63:87:46:42:7f:2e:45:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=6451a16d-6bdb-4927-b893-bed9bc8d1341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7f:80:34:c9:e2:bd:f6:6f:4f:8f:db:05:53:
                    d2:0c:c4:30:0b:0d:1f:89:6a:ab:ab:96:db:3d:26:
                    f5:40:78:30:e8:57:21:a8:d2:3c:1f:69:9e:26:45:
                    55:cb:3b:c1:e0:ab:8d:5c:df:2d:3f:0d:e7:d4:4a:
                    a5:63:c5:1b:3f:54:cf:2e:9e:c6:73:44:4f:72:2b:
                    2b:ad:23:db:08:b0:8a:0e:fd:ee:fc:89:dc:a9:cb:
                    21:77:14:e9:98:ac:d7:49:f9:87:48:1d:80:26:df:
                    a9:64:ce:55:94:d4:1b:ec:a8:5d:90:b2:ca:44:27:
                    1c:86:ac:f1:7d:35:40:ea:48:14:1a:50:ab:fe:d9:
                    18:44:69:c6:3f:6e:62:54:5b:23:de:d3:a2:31:f1:
                    e2:69:74:b2:00:61:7f:6c:b4:3d:62:e4:91:c1:29:
                    c8:10:21:4c:a0:fe:e4:68:0f:e3:41:0b:bf:37:6f:
                    87:15:e9:da:8f:63:33:ea:a3:c9:b5:54:06:59:74:
                    e9:8e:71:4f:79:ac:b9:e5:89:ee:e8:01:69:f6:c7:
                    d7:5a:53:21:be:34:8e:46:1e:09:e4:6d:90:57:9b:
                    ca:7c:9e:6d:f4:5b:be:14:55:33:70:f8:eb:b1:b0:
                    45:3d:c3:d5:07:57:26:d5:40:54:2e:97:f0:61:7a:
                    cf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3D:DC:23:B7:60:9C:AF:E8:06:F5:2D:F3:95:7B:D7:FD:98:23:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b9d34ee9-47ee-3fe2-86f2-161d74c7da5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8061::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:b5:c7:06:8f:06:ae:7b:31:43:41:33:5b:a1:09:5a:bb:69:
         1f:f3:00:cd:40:81:88:56:9d:ef:c9:af:30:9d:a5:65:e9:4b:
         4f:2c:c4:b6:37:ad:a5:6c:92:26:93:6b:4c:83:a1:89:cb:ff:
         75:07:b7:0f:55:c4:ec:68:2d:32:93:3f:bc:aa:93:b4:b9:04:
         df:7f:3c:76:10:64:d7:6a:35:bb:e5:a1:f9:9d:14:ea:b9:88:
         31:6d:ed:a5:f5:d3:c9:ba:0b:65:62:af:26:d6:b8:b1:b4:c0:
         1e:cb:85:5f:cf:d2:20:c9:e4:52:0f:4e:4a:3c:51:91:6b:7d:
         83:ce:e9:93:cf:f0:c9:3e:67:04:60:9f:08:d5:ee:f2:e7:69:
         c3:ca:13:48:d8:e9:29:d3:5a:76:b0:47:4f:d2:9c:53:b4:b1:
         1a:7f:4d:16:40:0b:1f:d2:b0:08:98:71:90:f7:a2:dd:ec:11:
         3d:4f:65:d9:7d:2b:24:43:3a:b2:cf:5a:c0:1f:64:35:3a:2d:
         16:6f:31:6d:04:37:7f:b5:6e:f8:00:b1:49:01:d3:8e:b2:66:
         c2:9a:ca:4a:0e:4c:11:0b:ca:2f:84:c3:71:2a:bf:6e:45:f8:
         65:26:a0:b8:6a:e4:68:fc:a6:d3:9d:0a:83:de:9d:4d:13:d6:
         b9:2c:5e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 03:43:57 2026 by rpki-client