Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/b01b8d20-ebfc-319f-a335-b51bab059943.roa
File:                     b01b8d20-ebfc-319f-a335-b51bab059943.roa (raw, json)
Hash identifier:          OG1Ug9G47soz5yybKjHh/JR+qODp45eOkdlQRwbSZpk=
Subject key identifier:   22:50:31:2A:5B:30:5B:87:4B:E9:FB:C2:FA:2C:6F:C5:6C:A8:4D:D2
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584B0B76B7DFBFFF203E9E7783C0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/b01b8d20-ebfc-319f-a335-b51bab059943.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     11232
IP address blocks:        2001:48f8:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:b7:df:bf:ff:20:3e:9e:77:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=1e03ca90-4cb1-4524-95ea-a0e3dd1dabb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:95:e7:91:19:3d:2d:b2:f0:c6:16:73:fa:07:
                    4e:9a:e4:5b:d5:06:df:72:d4:a0:91:f2:54:73:ee:
                    bf:61:5a:de:bf:5b:15:36:c8:64:70:b5:bf:c7:9f:
                    84:2c:a4:6b:e8:b1:16:e8:0b:d4:55:a4:d6:31:01:
                    ae:6d:06:c3:ac:9b:0f:58:d3:67:7f:4c:be:57:6e:
                    b6:8b:83:26:3b:26:1a:bc:5c:2e:51:22:9a:6f:d2:
                    0f:a3:c3:61:7c:86:59:7f:bb:ae:52:2a:75:b4:72:
                    1a:4a:e4:f2:e9:20:6d:45:95:8a:54:7a:37:59:e8:
                    2d:ce:6f:52:6b:7b:ec:f7:a2:de:11:bd:52:84:cd:
                    0a:8d:f2:75:4e:1b:67:6f:3b:9d:ef:c5:8b:00:c9:
                    a9:18:6c:48:0d:e0:a7:b4:f0:6c:0a:f0:44:42:2e:
                    13:62:ec:61:77:4e:d1:f9:c6:42:0f:81:27:ae:f2:
                    0f:d2:ca:c8:a3:b8:b7:18:fe:61:9e:01:2f:67:4d:
                    ca:ed:ab:fd:a9:b5:dc:d0:30:2c:81:86:c3:70:3d:
                    fc:dc:32:c1:a2:b2:c8:e6:a4:b5:99:ae:62:b5:16:
                    21:9d:72:b5:57:f2:6d:8c:27:9f:b1:d9:13:b3:18:
                    d9:06:5c:17:be:4e:7f:8d:c7:5e:54:24:48:9e:ed:
                    d1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:50:31:2A:5B:30:5B:87:4B:E9:FB:C2:FA:2C:6F:C5:6C:A8:4D:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/b01b8d20-ebfc-319f-a335-b51bab059943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48f8:b000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:65:ef:bb:3d:61:ac:41:c8:82:3d:01:bb:2d:c1:64:7a:03:
         e0:f9:e4:8e:d2:1d:82:75:3a:3c:d8:04:18:bd:30:4a:c3:c6:
         1f:ca:f5:73:27:a2:ca:c4:54:41:35:f2:57:db:60:3c:3b:30:
         ed:58:7c:a2:4b:45:47:e5:51:42:32:92:51:b0:c9:b4:f1:43:
         0c:e7:f6:23:bf:9d:bb:59:d3:b5:41:f2:35:f1:9b:b7:70:60:
         95:93:7e:48:4c:79:d7:5b:07:c6:0a:76:fa:45:f2:41:22:0b:
         41:27:7f:ff:3e:43:e7:d4:e7:71:1a:4d:fd:6b:68:d9:e2:29:
         cd:2d:81:0e:f9:d3:a6:70:e5:83:8c:30:d8:66:db:28:b3:03:
         fa:27:22:f2:28:dc:46:93:8e:ef:4a:37:c2:e8:33:6e:95:e2:
         2d:55:65:22:23:1c:bc:08:f9:97:29:d0:38:de:b2:11:85:9a:
         a2:b6:b3:cb:99:db:12:2c:7e:56:e0:ca:51:d9:7f:a6:c7:29:
         53:48:67:33:16:df:82:c2:bb:ab:3c:fd:e8:2f:23:a9:31:e2:
         85:4c:83:95:69:c2:83:e8:8b:b7:bb:73:25:57:e2:4f:d5:54:
         30:2e:1d:e1:9a:bf:d3:7a:89:3d:d0:58:95:47:fe:ba:0d:e4:
         33:7c:e0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 23:02:08 2025 by rpki-client