Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34427809-18b7-3de4-9a07-1b4741554ae8.roa
File:                     34427809-18b7-3de4-9a07-1b4741554ae8.roa (raw, json)
Hash identifier:          hNdOVCgPg7h3iIQlVfpxU1gzD1zuB8JDL8jnVos2DCg=
Subject key identifier:   AA:2F:DA:74:6B:0A:76:4E:52:8E:E8:55:19:02:4B:CF:80:90:A9:C4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F067268585A1291769DBFFF80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34427809-18b7-3de4-9a07-1b4741554ae8.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     22394
IP address blocks:        2001:4888:8053::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:68:58:5a:12:91:76:9d:bf:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=5be3af8a-2aea-4331-80c8-5c00f72f572a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a0:53:28:db:cf:b0:82:fd:8f:18:d7:e0:a8:
                    f1:4a:70:d4:c2:37:80:33:98:01:dc:85:52:fe:09:
                    cf:4f:40:2e:31:06:86:ff:b1:d6:92:03:d6:34:ae:
                    09:24:d4:6c:b0:a4:c7:4c:0f:41:42:97:0f:5a:a0:
                    2b:de:0a:c2:ba:10:1e:6b:70:cb:ae:91:d3:48:61:
                    66:be:be:87:b8:48:ce:2a:df:42:e9:0d:f1:d4:ce:
                    ee:12:3d:eb:7a:15:87:ed:87:94:a0:71:b4:e8:02:
                    57:aa:ab:46:f5:30:81:21:aa:3f:aa:09:4b:d0:ac:
                    41:c0:cb:04:e2:ca:16:cd:75:cc:d0:96:01:86:bc:
                    c8:7f:5d:05:a0:6d:87:ea:b5:f3:43:1a:b3:09:19:
                    b7:7b:26:19:09:58:c7:45:fa:b5:a3:47:8e:b2:93:
                    b8:75:a7:ab:a2:40:d2:3f:2d:9c:19:25:c4:76:96:
                    6f:ca:d1:ce:a3:75:a3:9d:2e:fb:aa:88:98:3f:39:
                    2b:3e:e8:67:30:a3:c1:df:fd:70:87:3b:2b:25:85:
                    f5:e7:5f:d0:2e:81:31:69:95:81:ed:34:30:f9:34:
                    f1:8d:e4:36:89:3e:02:d8:5d:5a:e2:09:ee:b5:0f:
                    81:5e:f6:31:a2:f8:bb:71:c2:73:d3:76:2a:7e:a1:
                    85:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2F:DA:74:6B:0A:76:4E:52:8E:E8:55:19:02:4B:CF:80:90:A9:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34427809-18b7-3de4-9a07-1b4741554ae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8053::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:25:22:ec:0c:35:4a:b2:2b:48:3b:f7:e0:32:b2:14:bc:01:
         41:17:fa:30:d0:7f:03:fa:39:bc:20:09:62:95:87:2b:e2:ca:
         8e:79:6c:71:3e:56:45:fd:ec:3a:ee:60:a5:4d:5e:ff:ef:95:
         65:7b:e9:09:4f:d0:2e:5e:d9:0a:23:d7:76:05:ff:c7:aa:47:
         ef:ee:23:d3:a8:aa:7d:8c:17:99:6a:87:ef:f5:09:c6:fd:99:
         44:9b:43:b1:c9:80:9c:c8:bf:47:c2:a8:e8:67:ab:60:61:67:
         e3:ac:27:41:55:f1:e5:9e:e3:e0:d5:9b:02:fc:60:d4:07:ec:
         d2:d4:5a:c2:57:7e:48:cf:5f:bc:fa:83:ce:83:af:95:dd:3c:
         08:db:37:5a:83:68:e9:43:9f:b4:4e:89:b2:07:e5:3b:aa:4f:
         d3:8a:88:05:1b:05:15:e4:e4:1e:8f:29:6a:39:3b:88:c8:87:
         5d:b7:cb:c1:d9:98:15:4d:00:2f:63:2b:1f:47:81:75:df:4a:
         3b:b0:e7:f7:82:c3:f4:8d:8c:70:45:7e:1a:06:be:77:e7:82:
         4d:b1:59:9c:46:97:b1:10:0d:dd:a0:1f:69:90:41:f0:79:51:
         4e:45:a6:8a:61:2e:02:f5:03:77:81:b0:a5:c1:25:79:48:cd:
         66:f0:f8:b2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8GcmhYWhKRdp2//4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk
NWJlM2FmOGEtMmFlYS00MzMxLTgwYzgtNWMwMGY3MmY1NzJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6BTKNvPsIL9jxjX4KjxSnDUwjeAM5gB3IVS
/gnPT0AuMQaG/7HWkgPWNK4JJNRssKTHTA9BQpcPWqAr3grCuhAea3DLrpHTSGFm
vr6HuEjOKt9C6Q3x1M7uEj3rehWH7YeUoHG06AJXqqtG9TCBIao/qglL0KxBwMsE
4soWzXXM0JYBhrzIf10FoG2H6rXzQxqzCRm3eyYZCVjHRfq1o0eOspO4daerokDS
Py2cGSXEdpZvytHOo3WjnS77qoiYPzkrPuhnMKPB3/1whzsrJYX151/QLoExaZWB
7TQw+TTxjeQ2iT4C2F1a4gnutQ+BXvYxovi7ccJz03YqfqGFLQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKov2nRrCnZOUo7oVRkCS8+AkKnEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzQ0Mjc4MDktMThiNy0z
ZGU0LTlhMDctMWI0NzQxNTU0YWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIBT
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB4lIuwMNUqyK0g79+AyshS8AUEX+jDQfwP6ObwgCWKVhyviyo55
bHE+VkX97DruYKVNXv/vlWV76QlP0C5e2Qoj13YF/8eqR+/uI9Ooqn2MF5lqh+/1
Ccb9mUSbQ7HJgJzIv0fCqOhnq2BhZ+OsJ0FV8eWe4+DVmwL8YNQH7NLUWsJXfkjP
X7z6g86Dr5XdPAjbN1qDaOlDn7ROibIH5TuqT9OKiAUbBRXk5B6PKWo5O4jIh123
y8HZmBVNAC9jKx9HgXXfSjuw5/eCw/SNjHBFfhoGvnfngk2xWZxGl7EQDd2gH2mQ
QfB5UU5FpophLgL1A3eBsKXBJXlIzWbw+LI=
-----END CERTIFICATE-----
Generated at Sat Oct 10 17:26:33 2026 by rpki-client