Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cba5172f-fd50-3cd2-bec2-a25b7c7497cf.roa
File:                     cba5172f-fd50-3cd2-bec2-a25b7c7497cf.roa (raw, json)
Hash identifier:          eCt/fVf1/1yt15LynmO8xDLLSfA5edjPUPtdvhOVJNM=
Subject key identifier:   2E:8F:39:45:DB:7A:A3:CA:7B:86:1B:AD:11:16:9D:5D:FA:23:BB:6B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE0408D9D17C1B73641B000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cba5172f-fd50-3cd2-bec2-a25b7c7497cf.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     22394
IP address blocks:        63.40.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:40:8d:9d:17:c1:b7:36:41:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=5d4168ec-4332-413e-a6c8-ed3ade2d20ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d0:48:2c:de:47:e6:7d:53:cc:5c:9b:d8:66:
                    66:fc:19:b2:30:a9:95:ac:ee:fa:18:82:85:94:2a:
                    35:74:05:61:6c:c7:f4:33:68:56:fa:56:4c:b3:a3:
                    3b:42:89:38:b8:77:21:6b:df:8a:1e:85:1f:9c:94:
                    27:ad:9a:b0:74:36:69:da:5e:4a:8b:89:73:f1:09:
                    ea:18:32:1d:84:1d:76:bf:c4:ca:39:fa:f4:4d:72:
                    d0:6c:b3:88:35:02:70:df:3b:29:b4:14:bf:9a:6e:
                    17:6b:5b:ba:be:10:a7:16:fe:56:2d:79:a8:ec:41:
                    83:02:2d:98:ba:46:ac:10:52:9c:b3:c6:35:0f:a5:
                    7f:4a:2f:6a:97:19:3b:f9:39:05:62:e2:a2:c8:59:
                    cf:ba:59:bd:5c:94:08:52:72:25:03:7b:ea:7c:5c:
                    14:09:8a:a5:b2:84:9d:f6:70:9e:d9:6a:c4:ef:32:
                    b1:62:48:91:98:4f:68:65:b2:df:46:c8:8f:7a:a4:
                    61:17:fb:d5:ef:5e:0e:39:04:e3:93:7e:28:50:da:
                    c3:1f:e5:a5:24:58:3f:2d:36:03:c9:a6:45:b9:ab:
                    68:23:94:62:48:b7:79:8e:31:ac:3c:e6:09:e9:71:
                    a7:93:a0:92:82:61:54:b2:e4:19:ec:f2:2a:60:17:
                    58:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8F:39:45:DB:7A:A3:CA:7B:86:1B:AD:11:16:9D:5D:FA:23:BB:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cba5172f-fd50-3cd2-bec2-a25b7c7497cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.40.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:0e:7a:b5:25:4b:45:13:3c:0e:f9:29:c9:ea:4a:e6:c2:ad:
         f6:2a:86:08:6b:67:0a:70:32:96:32:ec:ea:f8:3a:cf:63:b0:
         c0:85:46:29:83:72:82:e1:2d:b4:a3:39:06:0c:64:b4:ba:b0:
         4f:81:09:64:a5:f9:4a:3c:d9:e7:4d:9b:f1:13:de:c7:c0:70:
         46:5c:be:07:30:1c:a2:51:85:4e:c9:f7:f1:c8:07:c4:35:53:
         6f:c4:0b:d2:1a:4b:0a:6e:74:4f:1b:0c:3d:0a:11:22:40:e5:
         53:c6:28:10:a8:ad:98:df:b4:be:ed:3a:a3:56:cc:0b:00:68:
         39:85:d8:11:0d:7d:5a:a1:90:ec:ad:05:3c:59:b3:f7:be:71:
         9c:91:9e:d1:8d:98:3e:02:34:1f:65:82:5a:36:18:34:ec:86:
         ad:8d:84:bc:e1:64:23:92:43:0f:03:21:f4:0e:e1:9a:72:23:
         5a:1a:6a:89:0e:e7:d0:d5:0a:09:15:38:37:62:aa:e6:33:04:
         28:e2:8b:64:7d:ff:30:fd:ca:d4:2b:6a:a6:9b:3c:67:8d:52:
         0a:ad:e3:c4:7c:ce:f5:a8:f9:e3:3b:31:cb:8d:35:06:7c:5d:
         49:f4:4a:0c:db:e2:af:35:c3:f8:eb:94:12:e3:de:d7:37:d8:
         b4:b4:35:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:54:15 2026 by rpki-client