Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0b9ed6e4-7f09-3064-8471-cd650df63a57.roa
File:                     0b9ed6e4-7f09-3064-8471-cd650df63a57.roa (raw, json)
Hash identifier:          0sbx99VtrEujkh8JlbPSsnrqYDDWBGKQuYuhqn2yk2o=
Subject key identifier:   DF:61:90:A9:9B:37:66:2D:AB:EF:79:34:0C:4D:28:49:67:24:F3:F1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F067266ED25C2F6245AF43980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0b9ed6e4-7f09-3064-8471-cd650df63a57.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     22394
IP address blocks:        2001:4888:8015::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:66:ed:25:c2:f6:24:5a:f4:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=f5e3a014-560c-49f6-bb9d-e239d0f0db36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6f:d0:96:6a:b2:e7:eb:56:94:af:d1:4b:b7:
                    88:8b:6c:7d:72:f2:be:89:5d:42:d3:c3:4e:e6:6c:
                    90:24:5f:c1:88:0e:08:e7:5a:3c:68:6b:f2:ce:ac:
                    a2:8f:fc:6d:a1:9f:83:14:04:84:d1:ea:15:0a:1f:
                    cd:33:0f:52:fd:79:b3:12:bb:53:8d:5f:33:25:f0:
                    c3:33:a4:cc:fb:9c:f8:a7:4c:17:31:de:0c:c5:d1:
                    7f:c4:1e:de:5a:09:b1:d2:39:75:ef:b9:06:f9:8d:
                    c0:98:b9:fe:69:a6:29:2a:f6:26:95:d3:a8:24:4c:
                    a9:e7:3b:97:71:e9:bc:c7:a0:a0:59:a5:0b:d8:16:
                    2b:06:cb:8a:b7:34:60:93:90:f4:23:16:4d:d2:84:
                    ea:2a:e4:79:6b:79:ed:b5:09:0f:43:52:46:9d:c7:
                    b2:36:ae:78:e3:8f:ba:cb:41:cd:7b:c3:06:53:7c:
                    17:17:3e:a7:65:e3:ed:a8:2e:fd:32:3f:6b:8c:5a:
                    5b:22:69:83:c2:8b:dc:f6:f4:2a:f1:a7:68:aa:e3:
                    52:d0:72:a2:b2:a5:96:10:a0:72:5d:05:77:99:fd:
                    91:a2:07:66:8f:cb:1d:e5:b4:85:0f:bf:24:f6:b7:
                    e0:0a:a3:14:2e:5f:d9:e7:61:c1:3f:14:c0:17:49:
                    d3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:61:90:A9:9B:37:66:2D:AB:EF:79:34:0C:4D:28:49:67:24:F3:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0b9ed6e4-7f09-3064-8471-cd650df63a57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8015::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:6a:04:13:23:77:69:e0:cf:20:b2:e8:17:d5:65:f4:c6:68:
         da:97:da:46:8e:30:5d:78:ac:80:71:bb:65:bd:f2:e4:61:88:
         f7:21:52:e4:56:e4:a6:0b:37:45:4e:98:a9:41:31:14:a2:b9:
         ab:8e:8d:6e:aa:ae:7a:8d:0b:96:00:21:c6:ad:71:d9:5d:80:
         17:c7:e5:ac:42:12:07:a5:10:94:f6:cb:8c:ea:e0:c3:81:4a:
         9d:85:a3:0a:f2:e0:05:c4:2e:74:bd:9f:a9:f4:e0:b9:80:85:
         dc:47:f4:4b:68:d7:e9:05:3b:c1:d0:74:cd:50:8d:53:6e:ff:
         7f:ee:ba:5b:82:c8:60:4e:c1:fe:c5:d2:85:7c:13:52:4e:cc:
         bf:46:2b:83:87:b4:57:db:fe:1d:06:fb:d5:60:a0:c3:1b:95:
         8c:75:fd:15:9f:d2:09:5a:3b:8c:c6:af:a3:52:3b:ef:78:9e:
         fc:df:46:8e:e1:4b:2d:5c:e8:cd:f0:25:3c:6e:32:b6:44:12:
         1d:96:b2:fe:4e:03:85:db:05:2a:7d:f4:a1:74:55:a6:0d:10:
         2e:e7:ff:85:11:08:f5:a3:a7:35:e6:31:be:77:a5:8d:28:fe:
         06:15:ff:2d:4c:da:83:34:10:f6:ff:cf:d9:39:fc:15:a1:49:
         31:55:ff:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:47:53 2026 by rpki-client