Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/4570ad1f-c97b-3736-a481-a836efbbee20.roa
File:                     4570ad1f-c97b-3736-a481-a836efbbee20.roa (raw, json)
Hash identifier:          tSgsP2M4uaswCFzrxJTGVERElW1qJnDz9a9brrU59S4=
Subject key identifier:   AD:19:1B:87:99:A6:F3:AB:2C:91:9D:53:A4:F0:5B:FB:FA:5F:59:07
Certificate issuer:       /CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
Certificate serial:       010D0C9F43285849D42FA0140E190001AB846A80
Authority key identifier: A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/4570ad1f-c97b-3736-a481-a836efbbee20.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     48851
IP address blocks:        2602:fd59::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:a0:14:0e:19:00:01:ab:84:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=6bda3823-4999-47b4-81b9-02a36d4e6b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3a:f6:4c:26:b2:67:71:e4:f7:3b:e6:5e:91:
                    c8:b0:2a:f5:9f:38:85:cd:96:3e:98:56:02:30:01:
                    52:59:6d:38:06:91:af:94:6e:6c:c9:73:e0:56:57:
                    24:68:1c:f1:8a:a6:b3:10:b3:4a:f6:30:5a:ab:cb:
                    0f:ad:6f:92:a4:35:dc:5e:d3:f3:47:a1:34:f5:08:
                    8b:d4:60:43:7c:b1:88:ad:98:ee:f7:bf:48:4b:f9:
                    1b:e2:c5:6f:36:77:d6:db:39:b7:41:4f:a3:16:f4:
                    62:7f:97:17:b8:05:6e:07:dd:42:8c:86:36:6c:50:
                    80:f9:72:16:99:6d:26:24:3f:3b:df:c8:85:ab:9e:
                    37:a8:08:82:6b:3f:aa:dd:aa:23:98:63:a3:88:bc:
                    4b:f1:ab:bb:28:81:3b:dc:e0:ea:31:18:55:24:72:
                    49:56:a2:82:4a:1f:17:d7:ca:6a:e4:76:a9:57:b6:
                    69:03:34:b9:0d:6b:15:53:e8:a8:48:6a:1c:d9:39:
                    33:81:b6:67:c4:04:e7:23:14:93:6b:db:84:58:11:
                    6b:21:2b:3f:de:b5:40:9f:86:bc:86:79:41:e5:94:
                    82:d3:ee:0b:fd:6f:ee:c7:09:89:f6:fe:56:19:e9:
                    e4:b3:a4:ad:7e:6a:33:d4:a5:62:53:15:19:d3:a0:
                    45:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:19:1B:87:99:A6:F3:AB:2C:91:9D:53:A4:F0:5B:FB:FA:5F:59:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/4570ad1f-c97b-3736-a481-a836efbbee20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl

            X509v3 Authority Key Identifier:
                keyid:A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd59::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:a3:d2:dc:91:d2:80:c6:3a:9a:fd:81:ab:28:9e:8b:16:30:
         93:6b:2c:1b:01:ed:83:3f:80:9f:e2:a0:4a:d4:e5:a2:06:e1:
         56:b4:b5:01:6e:fb:07:86:56:15:55:6f:6c:0c:b5:5a:a3:c3:
         12:05:6b:fd:a8:67:47:98:fa:9c:3d:1d:b5:cc:43:a0:d1:bc:
         f7:3b:18:7a:ba:01:e6:08:76:8a:ab:b9:15:3f:86:04:7c:0e:
         f4:85:05:ce:7a:d3:61:af:49:73:d9:19:f1:6b:81:57:1e:5e:
         62:1d:91:07:88:28:f8:a0:99:4b:1e:dd:cd:9c:d1:e4:30:9d:
         40:44:66:2b:2b:82:60:49:9a:d0:73:3e:6c:0c:c8:08:96:22:
         7f:a3:ab:a7:f0:15:93:84:10:b2:2a:c6:5e:db:91:09:5d:6c:
         22:48:e4:90:6b:0d:b8:ef:a6:20:bc:6a:f8:6d:b1:3b:d2:a7:
         13:29:41:fa:3f:56:37:91:a0:4c:89:6f:d6:c8:d9:30:9d:8d:
         a0:bf:89:1a:6a:b1:87:20:6c:26:4f:3b:76:fb:0f:c6:25:ba:
         e2:74:99:63:10:ed:bc:20:f9:43:55:f5:30:88:ee:66:ad:5f:
         f2:57:2d:29:71:27:8c:59:87:8a:03:ed:7e:e3:87:b7:ff:7d:
         53:f5:f5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:45:44 2025 by rpki-client