Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/4570ad1f-c97b-3736-a481-a836efbbee20.roa
File:                     4570ad1f-c97b-3736-a481-a836efbbee20.roa (raw, json)
Hash identifier:          61jFA7QpSYN5dmVV2GHkP7oD23ETue6ytUZcp4qU92g=
Subject key identifier:   DB:08:43:A4:57:60:81:B3:A8:B9:A4:8A:71:76:0D:89:2F:10:98:C6
Certificate issuer:       /CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
Certificate serial:       010D0C9F4328584D55BA379DBBE12361FDD06F00
Authority key identifier: A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/4570ad1f-c97b-3736-a481-a836efbbee20.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     48851
IP address blocks:        2602:fd59::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:37:9d:bb:e1:23:61:fd:d0:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=3271370d-cdfc-439e-9d8e-4836f733f14b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e8:31:b2:65:b6:4d:ec:50:94:6b:ed:79:7d:
                    c7:7a:2f:f0:e7:3d:f7:4f:91:e9:9c:1c:22:7a:53:
                    ba:6a:f8:5b:95:b7:05:52:c0:1c:11:6a:33:a1:b8:
                    af:ec:8d:31:8e:9f:ce:68:1b:27:2b:b4:52:69:c1:
                    fa:89:eb:07:f0:7f:4f:fc:28:ae:4f:d2:23:3a:4d:
                    f7:f9:4c:cb:77:88:6c:c2:ad:7c:8e:7f:6c:ab:c5:
                    72:f4:47:72:a9:d6:7b:fe:4d:db:d4:32:3e:95:b5:
                    d2:d6:2e:d2:3f:9a:ce:30:63:c0:0c:1b:46:ca:93:
                    08:02:7c:dd:32:ce:89:b2:aa:4f:2c:c6:d8:0e:af:
                    f6:fb:5a:d2:ca:1a:65:33:61:bf:05:ef:9b:35:35:
                    59:32:c9:04:d9:7d:f1:55:72:16:8d:e2:d8:4b:a1:
                    b4:12:0c:5d:46:41:76:83:a8:e4:c1:8f:43:9f:48:
                    67:af:fa:ee:57:2f:63:83:19:13:66:a6:41:9c:c7:
                    06:f0:f7:70:d8:11:f8:02:14:2e:92:20:42:6b:6d:
                    c7:71:47:e2:8b:c2:38:30:e9:e0:a9:07:70:c0:1e:
                    bf:7e:c8:87:2f:10:a0:db:91:0a:23:42:4b:20:59:
                    fb:c4:1e:c0:76:f6:b0:1e:90:03:96:ae:49:68:23:
                    95:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:08:43:A4:57:60:81:B3:A8:B9:A4:8A:71:76:0D:89:2F:10:98:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/4570ad1f-c97b-3736-a481-a836efbbee20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl

            X509v3 Authority Key Identifier:
                keyid:A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd59::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:0e:87:6e:bc:52:76:07:56:4f:79:18:2a:9e:59:aa:b3:09:
         94:2f:92:da:8b:a6:36:e1:fc:e6:ee:88:d0:37:ed:5e:8a:52:
         dc:8d:2b:cb:0b:b2:82:26:3c:aa:f2:42:d7:db:b5:88:b8:14:
         c7:4d:42:ff:be:dc:20:64:15:ba:a2:7f:04:34:63:2e:db:4d:
         26:bd:69:ed:cd:56:fd:1e:93:2d:2f:a9:c5:82:55:4e:0f:34:
         d5:1d:5a:6d:c4:f8:7c:06:b8:65:48:49:52:14:cc:8a:08:6e:
         0e:b5:b1:0b:10:95:ad:e9:41:31:46:1b:ad:55:41:76:60:42:
         a9:3a:84:74:a2:d0:9b:19:9a:94:ad:18:97:a4:6c:2c:ea:92:
         a1:2a:d8:8f:82:5b:39:a2:a5:17:7c:bb:00:83:09:9f:1f:51:
         01:72:a8:99:72:70:bf:11:75:92:82:87:e1:5a:2c:02:c6:27:
         c3:4d:6f:a4:c0:af:cf:f1:6e:33:6a:9d:4e:1e:b3:66:76:10:
         a4:a8:e0:8e:ef:3a:bd:21:bf:40:70:07:57:c8:73:60:24:9a:
         0f:ef:c0:d3:f9:f1:7a:a4:c5:6d:32:2d:da:a5:bf:d0:c0:6f:
         6a:c1:7d:84:19:98:7a:3c:a9:21:8d:cf:13:eb:06:ec:57:0d:
         b8:d5:4b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:18:10 2026 by rpki-client