Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88cfe400-afec-3911-a9c9-e559e02badd0.roa
File:                     88cfe400-afec-3911-a9c9-e559e02badd0.roa (raw, json)
Hash identifier:          aXG0OgQ9dI2geWjgHgXmbcnVK2GwoCj7l34kCXFW7sA=
Subject key identifier:   16:16:F5:02:A3:FD:23:A9:E6:26:96:B5:BC:D5:F8:A0:39:B8:EC:63
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE038608A15E1BCC93FC8C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88cfe400-afec-3911-a9c9-e559e02badd0.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        63.41.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:38:60:8a:15:e1:bc:c9:3f:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=a2c64f21-062b-46c1-a638-d16559149baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c9:6b:c6:73:af:3f:2e:da:b4:a5:2f:42:76:
                    12:92:82:f3:5a:36:9f:31:87:90:32:99:c7:ff:89:
                    ac:1a:38:ef:02:47:9e:e9:5d:0a:4d:a8:2b:58:4a:
                    83:ee:05:4b:db:b4:7d:e1:60:48:00:00:fc:cb:f1:
                    d3:27:f8:14:90:1d:21:7d:c3:2b:3b:5e:05:4e:a6:
                    0b:15:8f:90:88:2a:07:86:76:12:e6:cc:60:44:0d:
                    81:38:a9:05:34:aa:a2:ea:f9:ed:a8:33:32:01:c5:
                    8c:d2:ed:b7:f8:28:3a:e3:9f:66:2e:01:57:4c:11:
                    96:be:09:82:f9:13:da:75:00:48:b9:94:34:b2:56:
                    d9:c0:f9:73:d6:86:9d:c8:06:8f:30:43:89:ff:36:
                    1f:a3:77:4a:05:4a:35:32:9d:db:4d:04:37:33:8a:
                    89:3c:a1:49:35:5a:d0:dc:50:c4:e8:ec:ef:c2:f1:
                    74:2d:ea:03:22:50:15:8e:3e:29:6b:c8:32:cb:57:
                    58:68:3f:2e:b3:40:6e:51:e0:1c:39:26:e9:a4:70:
                    80:ae:3a:4d:0e:dd:24:ed:99:0c:79:7d:9c:bd:d6:
                    f1:03:ba:49:6c:bd:cd:e5:4f:ca:83:ef:a7:90:b2:
                    ec:d5:97:06:1e:38:63:1e:db:c8:88:76:41:01:40:
                    eb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:16:F5:02:A3:FD:23:A9:E6:26:96:B5:BC:D5:F8:A0:39:B8:EC:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88cfe400-afec-3911-a9c9-e559e02badd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.41.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:bb:be:ed:8c:4a:33:51:37:22:77:2a:07:da:0e:eb:06:41:
         ca:08:a8:a1:89:68:4d:4d:f3:19:52:53:42:38:e1:99:1e:41:
         59:65:ec:3b:57:c6:c5:c1:43:7a:02:ad:b1:bf:4e:fb:59:13:
         33:e9:01:e5:83:ff:d9:8e:1e:77:ad:9b:8a:de:0d:90:ca:ae:
         b4:71:95:4d:d3:6a:bf:2e:05:81:e8:60:8f:11:81:f9:6e:45:
         ea:fb:42:83:45:01:e2:5b:b0:c7:50:03:b9:07:d7:c2:40:0b:
         2d:a9:e5:1b:83:8d:6b:bc:1c:00:e1:93:ab:70:09:fd:4a:0e:
         04:db:7a:e1:05:85:63:db:b4:c0:29:42:e4:84:6b:fd:ea:e7:
         16:f6:aa:60:e1:a8:da:90:67:06:79:09:c0:3c:30:bf:11:e3:
         5a:b4:c4:23:75:3a:8b:27:2f:fc:c0:f4:96:3c:a2:ac:53:33:
         72:1b:20:c6:42:25:cb:a8:e8:8f:8b:5a:d0:d5:83:09:20:6e:
         d6:ee:73:5a:f1:5a:c5:f8:73:1f:16:e1:99:46:fc:56:0a:0e:
         19:3a:e7:7a:f8:8f:1b:74:9c:18:12:5b:b6:19:56:75:5e:29:
         5c:22:ec:2c:78:a7:50:2e:bc:74:8f:af:42:d3:38:18:31:97:
         79:a1:6a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:31:33 2026 by rpki-client