Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8e0fed2-13a2-3ce5-9e99-399d97517022.roa
File:                     c8e0fed2-13a2-3ce5-9e99-399d97517022.roa (raw, json)
Hash identifier:          hV0OrmOLe5ZTYEz1HMVkLyrj2enauF2Ej6ZpQ+z8HZ8=
Subject key identifier:   0B:19:2A:F7:04:12:C3:DB:6B:9D:A7:2D:D5:B3:0A:79:33:73:70:BE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E640F97EFE6CF2753FBBBCD40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8e0fed2-13a2-3ce5-9e99-399d97517022.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     22394
IP address blocks:        2001:4888:803a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:97:ef:e6:cf:27:53:fb:bb:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=b9e93fe8-0b4c-435d-b84b-6fd1181e2376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:71:49:88:2b:38:b6:1f:ac:09:0b:94:7b:d5:
                    af:a5:2b:69:2e:09:3c:ce:55:21:84:3b:6f:81:3f:
                    27:6b:9b:55:fd:38:da:41:12:b1:67:89:01:7e:47:
                    b1:36:0c:7e:e5:15:52:26:67:c6:44:ef:9d:c5:4e:
                    b0:d5:a3:91:25:4a:97:40:82:f9:00:d8:2c:e4:1f:
                    f1:ae:bc:ac:b8:ab:c7:f3:57:34:93:a5:84:03:1a:
                    84:f7:78:1d:6a:b2:17:0c:ee:e2:0e:f8:9c:fe:20:
                    43:fa:c9:92:b9:a7:78:67:67:86:f1:20:a8:2d:88:
                    cc:0a:9f:ae:64:99:2a:ba:22:87:48:7c:f8:9b:4e:
                    9f:30:13:ef:fc:9d:82:07:09:f8:f9:20:09:6d:a6:
                    ce:70:3c:b2:c6:9d:46:7d:e8:20:98:f8:86:61:57:
                    9f:9e:52:96:c8:28:ac:37:04:bd:e3:9a:f0:70:96:
                    98:72:78:5a:0f:f3:e1:cf:d1:ac:ed:5b:e7:29:2c:
                    d3:d1:41:55:05:26:c0:3d:7f:7f:bc:1c:74:ee:b3:
                    88:bb:2a:b0:f1:56:aa:0c:19:f3:a5:11:07:d2:05:
                    55:a7:ec:0e:a4:19:75:a0:64:6f:69:25:ba:0f:76:
                    cc:a5:fd:ee:5f:b5:46:ed:b6:e7:51:57:c3:a2:71:
                    f7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:19:2A:F7:04:12:C3:DB:6B:9D:A7:2D:D5:B3:0A:79:33:73:70:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8e0fed2-13a2-3ce5-9e99-399d97517022.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:803a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:04:47:5f:74:42:b1:9d:3b:fe:3b:7f:e9:07:37:04:2d:34:
         24:79:c3:8f:83:f1:aa:f4:04:35:b2:3b:9d:cd:6e:92:ce:17:
         41:3b:7e:99:b4:ed:ea:d6:38:fd:62:40:c5:7c:39:3f:78:0b:
         29:93:cd:b7:cc:43:70:b0:2c:fa:55:5c:f7:4e:d4:a9:a6:19:
         2f:db:f7:f7:15:5b:47:90:4d:cd:47:ed:37:5f:7e:76:53:e6:
         35:12:5f:97:92:7a:f1:ec:14:61:ca:98:01:c2:33:d7:52:aa:
         36:70:76:54:33:26:21:c4:8a:67:c1:a1:24:01:14:54:c1:30:
         0e:a2:36:db:5e:c8:38:1d:06:a5:90:43:04:f1:cd:76:f4:ef:
         f4:9b:f9:e0:46:42:70:e4:90:61:f1:35:e4:74:93:e0:b8:00:
         9e:75:f2:9e:fe:59:a6:d5:7e:70:fb:35:e4:33:cf:14:c9:8d:
         8a:e4:29:09:47:22:39:95:cf:b4:86:3a:e6:b6:b2:c8:8e:88:
         66:f1:a2:22:a8:5c:fc:0c:00:45:75:ce:d4:f2:1a:50:9c:f2:
         e0:27:fa:18:73:bb:e6:a3:4f:44:99:50:fe:fd:f5:e9:62:c5:
         b0:b7:5f:a2:40:58:a9:78:54:8a:e8:f3:b6:f2:13:d4:50:89:
         3b:df:a2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 03:44:26 2026 by rpki-client