Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/748db48d-3ed7-344e-9a30-5004776c24fb.roa
File:                     748db48d-3ed7-344e-9a30-5004776c24fb.roa (raw, json)
Hash identifier:          ToqJyCphY3Byc6OuXohj9Cp0eZ57U1sfsGCgz1kq6K8=
Subject key identifier:   A4:D0:4D:8F:79:71:D7:41:EB:CD:57:07:09:CA:9F:4C:C8:2C:3E:7C
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584F2EED1A9A48B0063A7149B580
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/748db48d-3ed7-344e-9a30-5004776c24fb.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     11232
IP address blocks:        2001:48f8:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:1a:9a:48:b0:06:3a:71:49:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=805941ee-8923-4908-a696-78ddc599b11e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:40:ac:42:5a:59:05:16:0c:d3:24:ac:d6:68:
                    31:aa:78:b7:30:0a:56:ff:16:86:0d:5e:96:7c:2b:
                    79:a3:25:cf:85:68:c8:42:c4:d4:97:eb:9d:e3:40:
                    6b:1c:d0:81:df:61:04:4b:de:75:98:ae:fb:ef:fd:
                    ab:a9:9a:12:13:4d:7b:7e:20:36:a4:fe:10:e5:9d:
                    23:40:30:3c:02:8a:66:96:ff:a3:41:e7:ec:f7:fd:
                    5a:f8:89:6a:f3:1e:a6:aa:0d:2e:06:3a:6f:1f:27:
                    13:91:68:a8:8c:f6:90:6f:bd:0e:c1:9a:ba:11:65:
                    99:80:ca:3e:91:e3:7f:35:47:49:14:4e:d8:cc:24:
                    2d:10:6b:e0:34:1c:30:c7:c1:0a:f1:27:19:ea:09:
                    89:0d:60:62:6f:ac:6c:6e:b9:0f:7a:ea:d0:25:b5:
                    4e:31:12:a2:3c:8e:0b:8f:96:ca:e4:d8:8e:2b:64:
                    45:18:ab:3d:b5:ad:fa:84:16:89:6e:58:4b:91:79:
                    38:d4:bc:23:2a:80:99:d3:17:d8:06:87:fc:00:5b:
                    b0:58:66:f4:6a:6c:81:00:42:75:0a:8a:45:ae:38:
                    54:a1:c8:99:e9:10:1c:f1:67:58:93:84:01:c7:28:
                    57:0e:eb:93:16:34:e2:02:07:b5:81:0b:f3:12:55:
                    27:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D0:4D:8F:79:71:D7:41:EB:CD:57:07:09:CA:9F:4C:C8:2C:3E:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/748db48d-3ed7-344e-9a30-5004776c24fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48f8:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:27:32:b6:4e:3f:31:f7:3f:e6:13:24:9e:e1:0b:81:5c:75:
         9f:f2:4b:b4:00:8e:0b:a0:73:ad:0e:61:e7:1f:cc:91:ef:f2:
         c8:be:d7:89:d0:d9:4b:f9:23:a5:73:15:41:5d:93:89:38:b2:
         0d:14:e3:f5:b8:b8:c0:02:16:d2:1a:92:ee:d8:db:48:8a:97:
         67:6d:7e:0a:9c:42:8d:52:0a:af:d9:15:73:ce:b8:84:5b:6a:
         28:76:f6:00:e3:4b:c7:90:9b:d8:91:e8:50:b2:1e:64:ba:9b:
         71:d2:ef:6a:5c:14:28:27:da:53:9f:32:f8:95:9e:75:8e:5f:
         56:9f:87:46:c9:3c:c1:e4:ab:8f:cf:9f:41:bc:92:dd:4f:53:
         49:68:d0:71:0a:bf:e1:51:a9:f7:20:a9:f4:c6:a6:af:71:ce:
         3f:e2:26:c2:9c:e8:b0:bf:30:df:55:62:c4:ad:42:19:1a:09:
         45:db:c7:f7:8a:4f:08:3e:8b:98:f5:18:85:3c:8b:2f:e2:12:
         30:c2:ee:af:a2:5c:04:20:7c:25:ba:d4:ea:7f:83:25:0f:f9:
         5a:9f:4e:53:e8:46:ef:21:96:3d:71:a7:b2:85:d1:91:ec:cd:
         68:02:aa:1c:65:01:d8:9a:3f:bb:65:05:8c:fd:88:bc:5f:26:
         16:14:09:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:08:19 2026 by rpki-client