Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/b01b8d20-ebfc-319f-a335-b51bab059943.roa
File:                     b01b8d20-ebfc-319f-a335-b51bab059943.roa (raw, json)
Hash identifier:          fycd06icuzn69MtS6hdbRbOY/eZdXahx8nMY0F7zjZc=
Subject key identifier:   58:6F:97:8B:A6:7C:04:AA:40:43:CB:30:DC:7A:B8:C2:3B:C9:45:DC
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584A2ABAE922E1622C175F8AEB00
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/b01b8d20-ebfc-319f-a335-b51bab059943.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     11232
IP address blocks:        2001:48f8:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:e9:22:e1:62:2c:17:5f:8a:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=8a336c19-beba-4950-8986-6651e8fd1930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:34:19:0d:0f:6c:97:ca:29:be:e1:f2:aa:de:
                    96:58:8e:1d:12:af:fa:b6:60:c2:08:c0:94:3c:04:
                    64:f9:5c:d7:fc:e0:57:e9:87:d0:a7:95:87:77:2f:
                    6b:d8:86:80:be:0f:50:ae:a2:6b:9d:55:01:d1:27:
                    14:2f:f3:11:26:01:d8:c1:79:a6:71:58:b2:38:1e:
                    d1:fb:56:ee:e9:2a:de:6c:6e:e1:01:9d:84:cf:d9:
                    68:9a:90:44:17:1a:2f:05:a6:54:f4:41:f6:f9:57:
                    d7:4b:9a:06:06:ee:73:68:93:62:39:52:19:22:f7:
                    58:93:6c:1a:1c:7d:3a:4e:24:33:ba:55:ce:53:bd:
                    54:1d:cf:4e:98:b5:f3:8c:4f:55:74:c6:d5:bc:d4:
                    a0:b9:b4:75:50:47:bb:e1:bc:22:28:5c:78:c5:94:
                    e0:74:ed:fb:22:bc:7a:e8:68:be:2d:3a:a3:7b:8f:
                    68:de:40:9e:94:61:a7:65:82:67:74:83:53:f9:76:
                    94:4c:f0:64:86:34:b3:e9:42:dd:ea:12:15:5a:62:
                    5e:d5:88:ed:c3:47:b0:de:dd:6e:c4:85:54:16:fc:
                    80:1b:d7:cc:4e:8d:20:95:ab:41:16:22:4e:04:01:
                    66:d1:51:ab:49:23:44:02:24:e8:e9:db:55:b2:e8:
                    b1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6F:97:8B:A6:7C:04:AA:40:43:CB:30:DC:7A:B8:C2:3B:C9:45:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/b01b8d20-ebfc-319f-a335-b51bab059943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48f8:b000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:d2:36:66:a8:91:1c:de:88:48:a8:28:0f:76:f9:f0:37:62:
         e0:b9:da:ae:cb:de:dc:9f:00:0e:09:9e:0e:a8:bb:69:c7:c4:
         16:27:71:1f:3a:2d:95:ad:73:3b:46:98:7e:54:f7:11:eb:7c:
         02:8f:19:17:92:4c:85:30:4e:7e:db:ce:1c:4c:06:bc:8c:af:
         b8:d7:b1:c5:2c:36:99:8a:1b:13:29:4b:71:46:96:11:c3:0d:
         49:92:9b:e4:02:5b:09:f9:4a:10:25:36:a0:73:6f:f7:35:7c:
         18:2f:42:35:af:d8:e6:50:b3:f8:20:61:63:0a:2b:07:dd:8b:
         91:86:a7:a7:66:8a:40:42:80:97:5c:da:ad:fa:02:85:ac:75:
         5f:38:a6:79:82:1a:86:22:a6:fa:8d:8d:bc:4a:28:e7:7e:00:
         2c:82:a6:d8:f4:8c:9a:94:97:55:00:0e:95:c4:97:93:6e:ea:
         8c:b3:88:b2:c4:72:73:6b:be:65:e5:7f:28:89:9e:dc:c7:3b:
         e9:76:44:4e:d4:67:e1:0d:f0:b1:8f:47:f5:6c:38:60:1e:a6:
         39:49:a8:0c:a5:7b:3d:1e:90:f7:44:87:f0:19:ed:bb:35:ad:
         1e:74:fa:6c:ca:a1:9f:8c:06:24:14:c3:df:9a:3b:57:37:5a:
         fa:f2:bf:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:32:04 2025 by rpki-client