Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/689d0932-9e89-3a1e-87c9-e79053ebc7ab.roa
File:                     689d0932-9e89-3a1e-87c9-e79053ebc7ab.roa (raw, json)
Hash identifier:          /8X3sIgKHlhdRGes80Yqbo/C4hFj3+Dfmlom6XSpduQ=
Subject key identifier:   DD:43:B0:2E:25:4C:B9:0C:B7:52:B8:EF:B3:FF:17:82:C9:D1:22:88
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584EA7882B91C3BAAE8A9D86A5C0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/689d0932-9e89-3a1e-87c9-e79053ebc7ab.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     62896
IP address blocks:        2001:48f8:f300::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:2b:91:c3:ba:ae:8a:9d:86:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=28caf55a-6eb6-4987-bfe9-e9b0af0d38ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4a:05:4e:d7:e1:e0:0d:9b:45:2a:22:c3:33:
                    d6:c6:8c:db:21:2e:c3:c8:6f:88:4c:01:31:ed:ac:
                    a2:85:ff:92:2a:23:96:29:78:a0:72:06:3d:1c:0a:
                    47:29:e8:7a:08:43:fa:fa:b6:00:d4:2d:87:fa:b7:
                    53:26:b3:30:2e:7e:6e:b2:60:57:a7:6e:00:ce:8b:
                    0b:90:2b:cd:38:16:81:2b:fe:d1:0d:22:a0:c8:2d:
                    d7:e8:c2:a4:00:c0:29:29:49:e6:4b:84:96:ef:1c:
                    f1:1d:bc:19:3c:44:fa:7a:2c:0f:f2:c9:06:b2:a4:
                    5d:1f:1a:10:fe:3e:8c:df:3c:ac:34:fb:ec:35:6e:
                    c9:7b:d2:ee:02:ff:f3:89:55:68:ea:c2:4b:52:de:
                    37:3d:10:2b:5d:d7:d4:26:f8:5b:de:01:db:15:b4:
                    48:08:4d:c2:a1:0f:0f:10:7a:7d:8c:f3:33:7b:25:
                    a8:ae:4e:e1:4d:64:97:dc:8a:86:86:d6:95:3d:16:
                    57:06:64:e6:b1:45:e1:80:ca:55:ab:0e:49:6c:47:
                    9e:0f:ad:00:9e:95:f9:f1:59:65:8a:d1:64:ed:6c:
                    8e:a7:b5:bc:e4:ef:2f:4b:04:cd:a1:9e:f4:6e:7c:
                    b6:ae:93:a4:19:55:ee:e9:cd:3d:3b:a3:11:d8:16:
                    7a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:43:B0:2E:25:4C:B9:0C:B7:52:B8:EF:B3:FF:17:82:C9:D1:22:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/689d0932-9e89-3a1e-87c9-e79053ebc7ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48f8:f300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:98:69:65:70:32:ba:fd:00:33:a8:28:a1:f1:18:aa:11:8d:
         67:be:5f:26:ae:ba:0b:59:35:60:6a:1f:b0:ff:d5:c1:17:85:
         96:9e:12:ee:77:5f:26:75:ed:3c:4f:9a:3d:75:b6:06:bf:16:
         e7:24:83:f2:1a:86:bb:36:3c:29:84:43:3f:09:78:9f:6b:19:
         29:3f:67:ee:60:53:25:ef:a2:1b:18:39:61:15:52:a2:47:53:
         36:23:d5:35:ba:2f:ac:91:c9:53:57:b4:bc:eb:94:fb:94:78:
         2e:2e:9f:d1:9b:f7:d3:64:24:ac:31:55:d7:21:40:da:d5:c8:
         a3:00:f3:e5:b7:c4:af:50:db:ba:ac:d6:56:ca:2d:93:7c:1d:
         e5:8a:70:b1:83:3a:dd:61:3e:71:49:07:0c:cb:4a:ab:3e:a3:
         da:18:1a:64:db:65:65:d9:cd:2a:1c:03:84:d5:20:71:93:b5:
         69:05:5d:8e:30:38:99:57:db:4a:6f:fc:69:2f:c6:67:0d:19:
         01:a7:88:6b:8f:fd:42:4d:8f:53:86:23:0b:9e:81:f8:bc:5e:
         5a:d2:49:b6:a4:d3:e5:99:e2:3d:c2:76:e2:61:71:bf:05:7a:
         bb:fd:28:05:69:fd:1b:5e:b8:5d:b7:2a:3c:05:d1:43:2e:fb:
         2a:27:53:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:56:58 2026 by rpki-client