Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/d770de6c-e795-3458-b3fa-76797a8fc14c.roa
File:                     d770de6c-e795-3458-b3fa-76797a8fc14c.roa (raw, json)
Hash identifier:          vG2OdV3KcTtoSLWZ0qRD/nBWhSpKuhzKhlNz/UBPMCE=
Subject key identifier:   49:90:8A:FF:04:55:26:41:E5:BB:99:FF:51:18:71:A2:DE:46:F2:2E
Certificate issuer:       /CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d
Certificate serial:       010D0C9F4328584EA78847823F8C4B885080DA00
Authority key identifier: E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/d770de6c-e795-3458-b3fa-76797a8fc14c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     229
IP address blocks:        2001:48a8:68f7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:47:82:3f:8c:4b:88:50:80:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=aeb3d6ba-5185-4123-a9ea-12889c5f8b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0e:81:4d:c0:87:4c:28:4e:b5:30:e6:22:41:
                    71:f3:ad:7c:37:ec:ee:66:50:44:29:b9:a5:d6:96:
                    12:dd:e8:23:59:73:45:45:b2:e6:92:64:0d:9e:fc:
                    e1:a3:12:22:81:78:da:0f:de:09:fd:55:dd:7f:82:
                    53:ba:27:dd:ab:b4:8b:77:f3:3c:e1:73:34:71:e8:
                    d1:52:8f:bb:92:b3:92:f6:80:ab:b1:f5:a9:02:85:
                    c8:81:cb:fa:b2:22:f6:69:e7:be:f9:a6:3a:0f:e2:
                    06:f8:56:a6:b2:6e:17:9c:51:e3:f3:26:6e:eb:ea:
                    cf:17:d0:47:52:2d:e6:72:69:9a:e8:11:85:15:c8:
                    e8:12:6c:8c:11:83:fe:ef:29:2b:08:03:09:5d:a5:
                    85:e4:ba:16:fc:07:5f:39:93:4e:29:8c:01:c2:10:
                    25:cf:31:bd:2e:7c:73:5e:cf:58:63:b6:88:a7:0d:
                    bb:75:7b:ef:48:82:c3:6e:ef:5d:13:78:c9:d4:63:
                    b5:74:15:50:24:e8:c5:45:08:6e:2f:14:8f:58:cc:
                    7d:82:de:dd:94:98:bd:5a:a6:e5:6f:6a:19:1e:02:
                    8c:08:c4:10:cc:29:7b:60:7e:cb:9d:08:9b:be:2f:
                    92:f9:91:49:0c:f8:4c:de:40:e0:5d:2c:00:51:79:
                    fa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:90:8A:FF:04:55:26:41:E5:BB:99:FF:51:18:71:A2:DE:46:F2:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/d770de6c-e795-3458-b3fa-76797a8fc14c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl

            X509v3 Authority Key Identifier:
                keyid:E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48a8:68f7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:54:84:f9:c1:47:9d:74:c7:2e:40:f3:99:c0:08:ec:4b:da:
         24:bd:29:d5:8a:b3:0f:85:29:6c:69:06:f9:7a:9e:92:0c:a6:
         44:bd:6b:5f:cb:00:a1:f2:f7:88:79:95:08:67:7b:6f:8e:ed:
         1f:1a:8f:27:2f:d1:e9:db:d5:5e:91:8c:35:18:6d:42:88:1d:
         c2:d3:87:10:88:5e:cc:c2:04:74:88:11:c3:2d:e7:e4:ef:8f:
         cb:76:ca:da:58:ec:db:c9:49:37:5d:42:9a:bb:14:ac:08:bb:
         ae:e8:dd:56:6f:ba:43:b4:b7:8d:d9:53:fd:21:dc:42:29:28:
         33:94:56:22:eb:55:cf:9b:e2:08:ab:f5:e4:68:b4:66:a8:b3:
         d7:88:b2:89:cc:95:42:62:73:ba:e3:63:49:e5:29:ec:c5:cf:
         ca:62:43:35:c9:b2:7a:f2:fc:20:81:6d:f5:99:d5:56:19:0d:
         de:6f:b3:3f:40:1f:86:57:9c:10:bb:78:6c:74:db:fe:83:59:
         6d:1b:c7:ba:e0:26:d6:d0:9b:45:55:31:f3:7b:5a:d8:53:be:
         0c:55:cc:cf:03:c7:f3:4a:8e:2a:24:e8:43:a1:0d:11:a6:e9:
         b0:3b:49:de:22:4d:49:92:35:d3:ef:ac:16:0b:bb:4c:54:11:
         e2:dd:d5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:55:04 2026 by rpki-client