Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ea408325-316a-3b46-83e5-181e4849aaa8.roa
File:                     ea408325-316a-3b46-83e5-181e4849aaa8.roa (raw, json)
Hash identifier:          Ph4yzhvqyR/jwMj81WUuMnwS8QXrKzOBMeV+/n23qag=
Subject key identifier:   6C:21:EA:D8:9F:ED:7A:49:E3:47:2D:0F:6B:09:94:61:F2:44:55:85
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AE196C0BC36E007950A4B7BBF
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ea408325-316a-3b46-83e5-181e4849aaa8.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     22394
IP address blocks:        2001:4888:805f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:c0:bc:36:e0:07:95:0a:4b:7b:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=5fa53eea-4175-47c3-9387-82b7a47b2ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:37:df:a2:f8:74:20:92:e4:dc:1c:5d:2b:39:
                    24:2a:00:5a:21:02:7a:92:a2:b4:07:fe:ce:0d:87:
                    57:a6:b4:b7:9c:14:13:40:fa:05:fa:17:d3:60:a4:
                    6d:fe:66:c4:d8:78:6a:6b:7b:97:f4:70:cb:1a:da:
                    9f:f0:30:49:c3:aa:25:23:22:b0:77:a7:b6:00:de:
                    b5:b2:a1:5a:c0:58:e7:9f:95:21:8d:da:56:85:a1:
                    80:ad:34:1b:65:54:a0:25:42:94:dc:2a:33:08:4c:
                    52:bc:a9:15:aa:af:e1:d6:bf:84:de:4f:fd:b2:98:
                    87:74:81:9c:3d:d2:99:26:fc:9c:1f:ad:7b:c7:2a:
                    2a:31:66:1c:e4:ce:9a:4e:ec:ce:3d:b5:40:9f:de:
                    04:c7:53:1a:c0:0b:e1:25:0e:50:19:72:22:06:c5:
                    82:53:80:c6:e7:2c:1f:b4:e5:ec:ea:fd:fa:34:c4:
                    ea:82:27:b3:a3:00:5c:ac:42:12:0f:ce:59:e8:7f:
                    c3:c4:57:35:ef:ec:01:d7:22:36:f5:4e:44:a7:21:
                    7f:7c:23:79:75:5e:e1:2d:be:a2:82:fc:e9:03:d9:
                    66:12:d5:68:c0:ca:f3:31:65:dc:d2:4f:24:08:1c:
                    f5:4e:a4:f6:d7:20:e1:6a:cd:e3:a7:1c:fe:f1:fe:
                    dd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:21:EA:D8:9F:ED:7A:49:E3:47:2D:0F:6B:09:94:61:F2:44:55:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ea408325-316a-3b46-83e5-181e4849aaa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:805f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:cd:60:e1:f6:92:c0:b2:fc:fc:bf:89:5f:81:b4:d2:a7:88:
         2b:ae:a4:00:f8:c5:76:d4:3d:e6:6c:15:bb:d0:31:ad:39:86:
         a7:b1:dd:c5:23:6d:ef:d0:89:d3:66:e1:61:4f:93:83:46:e7:
         25:82:5a:49:3f:cb:b2:a8:f8:6a:bb:85:94:56:88:1f:e1:a7:
         58:46:e7:7a:dc:be:2d:14:95:a6:51:4d:d4:06:41:00:97:77:
         b4:25:e9:14:b5:c1:6a:84:d9:97:bf:04:53:3d:d5:88:55:75:
         a7:ea:ef:bb:9b:b9:fd:28:c4:9a:c9:d1:77:8a:53:91:df:48:
         27:32:ea:20:c0:b4:49:d7:4d:48:35:ea:f4:eb:cd:6f:e3:61:
         e2:0c:aa:6f:f7:7c:1f:97:8b:99:d8:52:a6:74:85:c9:47:6d:
         c7:b3:9d:06:ac:26:62:e0:97:c9:00:93:73:b2:ea:31:ca:0d:
         2d:db:d7:15:14:dd:98:28:5f:ce:82:a2:d6:76:0d:69:5b:4f:
         98:9d:b3:5c:1e:18:db:ff:f0:1f:92:ab:43:1b:08:a3:6f:7a:
         12:9d:b6:23:d5:76:d9:62:c5:5b:fd:0b:fd:48:b1:3d:6b:c3:
         14:e1:b2:52:60:1a:63:f8:39:6c:a7:d5:6c:82:6e:bc:6d:4c:
         3a:87:23:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:23:24 2025 by rpki-client