Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd73bbf1-b40b-35e2-b4e6-2a1e0b9da864.roa
File:                     fd73bbf1-b40b-35e2-b4e6-2a1e0b9da864.roa (raw, json)
Hash identifier:          uJYmvkB14Ab9Q+rP+42q34ArpURYtLjIacEXFk1AMwE=
Subject key identifier:   68:F7:32:8D:47:92:A5:6A:63:C9:F9:84:25:89:3C:50:63:1E:CC:D4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AE196BF33C26AFB17A4C60B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd73bbf1-b40b-35e2-b4e6-2a1e0b9da864.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     22394
IP address blocks:        2001:4888:8051::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:bf:33:c2:6a:fb:17:a4:c6:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=cefbd278-4c4e-455a-8b04-1fadfd2a1f0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d2:d7:25:f3:4b:12:31:0b:62:fd:28:07:db:
                    b6:20:ce:cc:b9:3f:dd:b5:0d:24:cb:14:98:ee:a3:
                    19:4f:a6:a5:02:f3:8c:ca:1b:98:3e:39:60:ed:f0:
                    14:65:ec:c0:e7:5f:5c:b7:4a:26:92:f3:ab:5a:ca:
                    17:db:2c:5f:5d:6c:af:1e:90:da:d6:8f:67:fd:cf:
                    f0:53:20:06:ab:b9:28:f5:ea:c6:c0:d3:86:71:2a:
                    3b:bc:d4:8e:fa:a9:8b:40:1a:9e:6e:fb:c2:52:d4:
                    a6:f3:d6:56:df:58:8e:67:ae:fc:03:3e:12:60:34:
                    10:f2:d4:b2:10:58:7a:a8:70:8a:16:59:c4:bd:04:
                    eb:ba:e6:69:52:07:da:0f:0f:f2:92:70:84:48:97:
                    b5:8a:65:55:0f:d6:ab:bb:10:0a:fe:b2:7b:0d:52:
                    2b:85:e7:10:2e:12:78:ab:d4:67:32:9e:f4:0b:e3:
                    aa:fb:ad:0b:ff:94:5e:f5:d7:2b:ae:ae:54:82:59:
                    2c:8f:52:dc:c8:e8:2e:c6:08:79:d5:37:b3:02:a4:
                    82:48:c1:8e:e8:27:a2:5a:7c:52:5f:30:e5:d5:23:
                    c2:7e:94:dc:1e:04:9d:a9:98:66:0b:75:d3:a5:97:
                    dc:05:1c:0f:03:27:3f:a2:ab:5a:4c:ed:d5:13:54:
                    6b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F7:32:8D:47:92:A5:6A:63:C9:F9:84:25:89:3C:50:63:1E:CC:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd73bbf1-b40b-35e2-b4e6-2a1e0b9da864.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8051::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:c3:b5:ab:58:5c:3c:32:2e:8e:04:5e:99:6a:71:10:5d:62:
         83:54:f8:f1:9a:f8:81:c1:b4:f9:1f:e3:17:40:d7:9f:28:64:
         36:3b:e8:1c:23:ec:4b:09:a5:4d:69:8f:52:ae:27:b9:37:4a:
         6d:51:84:07:9b:31:bc:10:60:40:45:ab:38:ee:7b:98:19:23:
         89:99:cc:a2:0f:8a:bd:70:2d:b1:2d:13:2d:46:77:80:09:06:
         97:42:7a:8f:b4:df:d7:75:69:4f:a1:11:7e:f2:80:33:8c:80:
         bc:19:cb:8f:35:c6:fc:24:e9:0f:c0:61:cf:7a:48:14:5e:93:
         b3:0b:6d:cc:f3:5e:65:ad:d8:9d:55:a6:3a:58:e5:a6:38:35:
         2b:39:78:1f:af:1c:f8:e7:5f:6c:fb:f8:72:2f:12:0f:eb:0a:
         f2:30:29:28:7b:d5:74:51:99:48:fb:42:06:f9:c2:20:5d:e5:
         30:8f:48:74:e5:9e:ec:77:2a:1d:1b:f3:72:9a:b8:d8:7d:4d:
         bd:f7:63:e5:f1:a8:88:40:78:57:21:9a:62:29:ad:c6:58:ee:
         a6:2b:b6:57:15:bf:b7:6e:93:f8:1f:4b:0e:01:3c:b7:de:4d:
         08:8b:31:de:3c:8c:9c:1e:a7:0b:26:d7:5f:e2:70:bb:6a:17:
         9b:c9:dd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:22:47 2025 by rpki-client