Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eca0a13b-dead-3f98-b59e-8960984c1850.roa
File:                     eca0a13b-dead-3f98-b59e-8960984c1850.roa (raw, json)
Hash identifier:          kzQEH99kaVKsqcRrH/R4xmb4zruRJ9kEO676asA0ZZ0=
Subject key identifier:   AA:E6:5A:A2:77:6E:CE:54:40:5A:47:52:2E:C6:41:22:D4:51:E8:C1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AE196BE40599E21B8BF085240
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eca0a13b-dead-3f98-b59e-8960984c1850.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     22394
IP address blocks:        2001:4888:8033::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:be:40:59:9e:21:b8:bf:08:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=1a264581-4d9c-4c5c-b10f-db808c9d9900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:28:f4:4f:ba:24:d2:6e:53:f4:ee:56:40:e7:
                    5f:a9:2f:2e:f6:ce:4f:25:0b:d4:05:5e:4c:7b:36:
                    47:0b:65:4a:d3:70:0a:d3:52:93:9f:e1:17:18:64:
                    a8:b9:38:af:dc:bc:60:35:37:4b:bf:c3:7a:6a:cd:
                    05:84:cd:24:5e:91:94:60:64:e0:a5:4a:a7:dc:19:
                    ab:2a:e8:6c:58:8a:3c:36:c8:35:1c:4d:b0:52:0c:
                    be:24:e9:e9:b7:15:89:7c:e7:87:b5:0b:b3:cb:1c:
                    d0:43:d7:33:c1:5f:af:40:dd:12:6c:82:4b:65:1c:
                    56:7d:9a:b3:88:48:ab:8f:0e:bf:f6:41:52:90:e1:
                    85:1f:75:5e:1d:f4:be:d4:14:06:1c:8b:0e:9a:0f:
                    7f:8b:fb:63:e7:8f:7d:df:b0:16:72:8f:19:cb:c3:
                    0b:7f:54:67:37:71:00:07:a2:9e:39:ff:cb:cb:53:
                    2b:66:bf:51:91:7d:db:c0:dd:6b:f8:68:40:a6:03:
                    93:ae:d7:7d:97:df:3f:7a:dd:2b:47:70:47:75:fd:
                    50:32:79:a4:a6:be:41:c0:f8:ab:b1:63:38:2d:2d:
                    89:ed:ee:9f:c7:d6:b6:06:b7:20:18:12:06:67:c9:
                    3e:70:82:0f:7f:1e:09:c0:d5:db:be:63:82:50:0d:
                    fa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E6:5A:A2:77:6E:CE:54:40:5A:47:52:2E:C6:41:22:D4:51:E8:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eca0a13b-dead-3f98-b59e-8960984c1850.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8033::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:7a:29:67:aa:96:c8:14:b3:32:0d:4b:af:fd:9d:2c:28:1a:
         fd:a8:e4:45:6e:56:fe:72:29:5f:75:68:32:fd:16:40:74:32:
         ef:9b:a3:fe:1b:ea:21:4d:29:88:a6:7c:8b:0f:2a:93:8a:c0:
         39:86:5f:bc:e9:28:13:87:ae:8f:23:18:ce:c1:97:2d:75:d1:
         fc:fa:04:9c:66:61:d8:4d:fe:a2:fc:b7:bb:6d:ea:51:cc:9e:
         eb:26:42:87:af:83:dd:e9:ff:ba:22:b3:b1:28:cc:a1:66:ce:
         0b:bb:53:9d:af:7a:8d:d1:5b:8c:94:0f:45:cb:33:dd:b5:51:
         43:67:63:8a:72:9d:4c:bd:41:5a:63:c5:78:3b:2e:3e:81:4a:
         5c:10:0f:6f:fc:ab:c0:c0:b8:17:59:35:8b:d4:39:3b:0c:3f:
         b0:74:f4:6e:d8:07:f6:7a:f0:1d:ae:53:5e:d5:8f:2c:e1:07:
         ef:97:a1:3d:c9:74:5e:e4:32:5d:6a:e7:10:ed:32:8a:07:2b:
         43:22:0c:ed:dc:72:32:2c:95:45:44:3e:5f:f9:03:f2:5c:91:
         29:27:2f:07:d0:24:64:a6:3a:46:97:67:c6:d7:e0:fb:9b:cc:
         93:09:78:92:fd:82:76:21:08:4f:63:b5:d4:2f:74:48:0e:8a:
         a2:9a:6a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:11:31 2025 by rpki-client