Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/11c37892-03bb-3f86-bb48-d5eaff6d21ed.roa
File:                     11c37892-03bb-3f86-bb48-d5eaff6d21ed.roa (raw, json)
Hash identifier:          VHZ+q43F6M79v1HcLhrqz1igjNmsSYWhB4bb78laHzM=
Subject key identifier:   BB:13:F7:ED:AC:D5:81:8A:BB:D0:C5:A8:49:66:BE:D9:7E:DC:F4:43
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584B0B76CC4889A864E85442CC00
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/11c37892-03bb-3f86-bb48-d5eaff6d21ed.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     11232
IP address blocks:        2001:48f8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:cc:48:89:a8:64:e8:54:42:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=89e28289-ed1c-47de-b0b0-a63dfa716fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f8:c5:61:52:71:b1:dd:43:0b:d0:93:2d:3f:
                    22:1d:7e:c1:60:8b:cd:59:e6:08:26:0a:6c:d5:13:
                    f4:08:2b:e7:b2:38:af:59:e4:d0:2a:a7:de:dc:22:
                    4f:15:dc:a6:22:a7:7d:5c:33:bb:2c:b2:1b:c0:97:
                    67:dc:4a:8e:68:c6:71:35:17:f0:dc:cc:c9:3b:9f:
                    58:80:0c:76:df:89:ef:f1:6b:2f:4c:04:12:dd:fc:
                    b5:f5:05:75:cb:d0:e7:0d:0e:24:37:b4:35:f2:80:
                    39:eb:a0:b5:71:c1:9a:15:42:6b:16:ea:e5:e9:cb:
                    a6:b6:d5:a3:b6:d7:98:bc:a4:13:ac:26:56:c5:d6:
                    98:55:4b:d6:87:c8:06:5f:2e:25:76:3d:bd:28:f9:
                    0c:fd:2f:7f:98:00:f2:dd:59:73:85:ac:6f:fc:22:
                    79:93:f9:a4:84:07:9e:f8:8b:39:ad:d6:2d:14:cb:
                    04:fa:46:c7:5d:98:a3:af:52:eb:91:c5:bd:89:d8:
                    1e:35:d8:05:a7:0f:a6:3d:5b:ee:9b:2d:87:35:5f:
                    c8:46:66:2b:56:1e:82:4a:88:3c:67:69:5e:ca:37:
                    7a:77:9c:07:39:53:5e:ae:6d:4e:d3:4a:28:21:7b:
                    52:bc:60:91:c5:4b:68:db:7b:13:4f:60:72:ad:92:
                    34:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:13:F7:ED:AC:D5:81:8A:BB:D0:C5:A8:49:66:BE:D9:7E:DC:F4:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/11c37892-03bb-3f86-bb48-d5eaff6d21ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48f8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:66:40:96:06:99:a9:07:41:bc:db:e1:05:e3:b7:fe:39:9f:
         2e:15:8a:be:e7:f6:ba:0d:78:7c:72:b5:93:dc:d5:73:c1:7e:
         38:29:18:a6:d5:c0:58:1f:cb:e0:d9:ad:fb:92:c8:3f:bb:54:
         f7:b0:13:66:2d:98:78:4a:ca:54:89:a3:68:e8:cc:47:c5:b0:
         ef:91:54:29:2e:55:9f:e3:e4:ee:6f:25:68:5b:58:c2:34:e9:
         0c:d2:d4:74:25:ee:eb:9d:ec:66:e7:cf:ef:13:6f:ce:6c:2d:
         e4:de:0d:f2:2d:1b:8a:76:d9:98:1f:93:75:9b:81:60:99:88:
         72:7b:dc:ac:cc:e2:3b:d5:db:95:1c:f3:7d:2d:1b:53:3a:e5:
         3f:3f:b9:b9:7a:63:d5:81:ad:29:7c:0f:2f:6e:e2:ae:d4:c4:
         71:34:9c:08:de:87:b7:6b:aa:09:5b:64:2a:58:4d:51:68:da:
         d9:15:8f:72:54:4d:d9:e5:ec:6f:c3:81:77:f3:4e:a5:f0:d0:
         96:93:27:73:3b:4d:60:fe:8a:dd:08:71:c4:e0:3c:72:7d:39:
         bc:99:e4:29:fc:14:73:67:4c:1f:b3:7e:81:f0:31:b4:2d:64:
         37:df:41:40:1e:c5:86:84:29:28:05:a7:1e:c6:99:d9:d9:7b:
         7a:07:2d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 00:42:53 2025 by rpki-client