Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/689d0932-9e89-3a1e-87c9-e79053ebc7ab.roa
File:                     689d0932-9e89-3a1e-87c9-e79053ebc7ab.roa (raw, json)
Hash identifier:          LL5a3H1ffAS7eLAIRbvHEmKbT70Slb2M146VCRAzPgE=
Subject key identifier:   0F:98:64:52:4D:49:B7:D1:41:91:62:39:05:F4:5F:85:18:C9:F0:C2
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584B33F1A691BEF1114AED2AF4C5
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/689d0932-9e89-3a1e-87c9-e79053ebc7ab.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     62896
IP address blocks:        2001:48f8:f300::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:a6:91:be:f1:11:4a:ed:2a:f4:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=7da83f04-9813-499b-9b0b-be71e5de1284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b3:f6:7d:1c:95:14:c4:44:9a:16:9d:66:0d:
                    23:91:ee:5c:3c:41:68:76:83:d8:e6:e6:64:9a:d8:
                    05:6b:ba:0d:81:ab:c5:f7:15:8c:c1:cf:8e:c0:51:
                    df:4c:93:97:00:34:b7:fa:a9:6c:98:8c:cd:70:e4:
                    03:cd:5d:4e:97:d8:cb:fa:f7:3e:3c:1e:39:13:45:
                    c2:f6:2c:42:88:6c:a5:99:c0:dd:a0:2d:cc:41:9a:
                    fb:2c:54:a3:82:dd:20:f7:11:a2:46:79:5f:8c:9b:
                    d5:d7:7e:77:7b:90:26:4e:b8:ed:7d:8b:47:75:68:
                    5c:70:18:ff:68:d6:b1:8a:63:2d:31:a6:86:3d:f3:
                    90:3d:cd:86:0b:12:f3:51:76:66:1b:31:e9:df:97:
                    c8:4c:49:76:ed:1e:bf:68:58:d3:76:10:76:5b:a7:
                    d7:2c:08:4d:35:e8:e9:98:ac:25:0c:a3:e7:e8:44:
                    60:32:83:bf:35:76:37:1d:20:c5:45:e5:6f:e9:e5:
                    45:f8:66:68:57:f1:68:27:fb:e8:77:98:ce:77:ee:
                    38:da:14:68:54:b1:70:6e:36:c0:94:28:7e:2e:2a:
                    53:3e:49:73:93:8b:8a:ad:5b:bf:c4:53:81:d8:68:
                    84:56:3f:90:9b:7d:2a:d6:1a:3c:dd:2c:6d:b1:bd:
                    43:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:98:64:52:4D:49:B7:D1:41:91:62:39:05:F4:5F:85:18:C9:F0:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/689d0932-9e89-3a1e-87c9-e79053ebc7ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48f8:f300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:32:92:cd:7b:7a:cd:22:98:94:18:65:ff:81:ff:cc:94:d0:
         b7:51:82:bc:46:4d:2a:73:a4:2d:ab:58:a7:13:0d:29:ec:f8:
         07:3a:16:d7:0b:f5:b6:01:a6:46:d5:25:eb:cc:f4:6c:27:1e:
         c1:e4:fa:0a:8e:fd:5f:d8:b0:da:d4:9f:48:23:dc:0c:4b:02:
         0f:cf:d6:4d:d7:09:82:de:0c:b1:7c:f8:3e:c8:26:f6:00:5a:
         3f:9d:fb:0c:65:91:78:88:0d:96:62:2d:20:d9:d8:b2:67:8c:
         b7:df:24:7c:6e:9d:71:ab:4c:71:dd:6b:b8:09:40:42:08:fc:
         c1:9a:78:19:9d:bf:0c:f6:17:a2:02:5d:35:b2:50:a5:8a:b6:
         e3:4e:a4:de:41:e0:9d:96:28:4f:53:bf:75:8a:f1:69:65:28:
         37:45:3f:30:72:3a:2e:81:e8:f1:7d:e7:be:23:7c:fb:1a:1f:
         6d:f9:ba:98:ab:32:2d:9b:67:7c:41:ea:53:ff:63:88:d0:03:
         d2:9f:71:ba:21:7f:a5:43:d9:1a:69:4c:2c:28:d0:6e:83:b1:
         fb:f1:ee:c0:da:66:7b:e1:9e:62:84:a4:c7:88:6d:22:d2:a8:
         0c:72:98:f0:22:24:77:fc:b3:e6:ea:b1:ea:42:08:58:4f:8e:
         a2:69:de:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 00:39:35 2025 by rpki-client