Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/a28b22b2-6422-33ee-b15c-696fdbfd2aac.roa
File:                     a28b22b2-6422-33ee-b15c-696fdbfd2aac.roa (raw, json)
Hash identifier:          +Hj37Q3mNar1Mm6Al+nqJJ5FIlnXtVBWNRBru0HzxUc=
Subject key identifier:   18:4F:90:3C:7E:6C:07:53:C7:6F:22:F2:42:0A:3F:AF:A5:B2:07:AA
Certificate issuer:       /CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
Certificate serial:       010D0C9F4328584D55BA378DFC661BA5EBE8D5C0
Authority key identifier: A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/a28b22b2-6422-33ee-b15c-696fdbfd2aac.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     25773
IP address blocks:        2602:fd59::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:37:8d:fc:66:1b:a5:eb:e8:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=fe566d80-155b-402a-8b2b-ff18d0045e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:74:33:32:02:6b:09:53:7d:27:fb:63:27:e5:
                    93:23:c7:17:49:9e:7e:ec:c1:12:15:18:ef:77:3b:
                    73:ad:a9:db:7b:b5:9f:cb:4f:68:1e:a0:cf:00:b2:
                    9f:b0:97:91:42:b5:f1:ad:63:42:c6:bd:26:a9:24:
                    2e:56:f0:41:e7:e4:c0:5d:ea:04:85:6e:73:e9:55:
                    61:1e:8b:0d:f7:ae:e4:b5:21:ae:68:6a:41:cc:b7:
                    89:55:6c:3e:7d:c6:0d:8e:b1:02:06:9b:e5:01:46:
                    aa:e8:45:d8:7a:58:bf:26:3b:88:c8:e7:21:a2:67:
                    84:8b:b1:6a:e3:80:14:5e:4b:a4:55:04:0f:5b:65:
                    c6:83:eb:df:2e:5e:88:cf:b1:56:f4:b1:ab:01:a5:
                    5d:e2:b0:41:75:19:00:e1:ad:34:a2:7f:89:77:c9:
                    1f:5b:5b:55:df:cf:ec:d3:a8:5f:d9:df:97:7e:ce:
                    9e:66:c2:7b:b9:67:d2:73:5b:b3:13:99:ef:85:c7:
                    cd:74:36:7d:61:f0:e5:46:33:6a:1b:64:70:b6:3b:
                    c7:4d:91:a9:27:15:eb:63:d7:c6:c0:79:3f:3b:7a:
                    78:d2:50:f6:51:8d:1f:50:a9:06:55:f2:87:5d:c6:
                    04:4e:27:0d:17:89:69:88:2c:50:28:04:a1:73:8d:
                    e2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:4F:90:3C:7E:6C:07:53:C7:6F:22:F2:42:0A:3F:AF:A5:B2:07:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/a28b22b2-6422-33ee-b15c-696fdbfd2aac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl

            X509v3 Authority Key Identifier:
                keyid:A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd59::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:79:dd:e7:31:76:13:63:33:bd:4a:a5:8f:77:8a:82:7d:71:
         e1:a6:83:cd:17:80:2f:62:f5:84:d6:2e:57:a7:a1:64:ca:9f:
         69:23:01:76:66:ed:39:fe:e0:bd:3f:a9:36:bb:9b:dd:e6:1c:
         2e:01:2b:53:97:da:0f:ab:00:07:1c:7b:f0:e9:4b:6b:52:ce:
         9e:50:88:58:49:65:3f:ac:e2:02:6e:e9:ae:9d:08:93:c7:36:
         a0:43:25:21:7e:c9:cf:99:7d:44:4a:05:47:5f:69:57:9d:73:
         49:1d:40:b8:bf:8a:81:02:f5:a7:fc:aa:71:7f:b8:36:18:64:
         9e:45:97:82:cc:fd:15:65:79:4f:0c:b7:d6:9a:23:9a:9e:d6:
         a2:a7:dc:08:c3:50:51:21:e4:93:85:5c:af:81:94:e7:1f:e5:
         02:eb:f0:3c:45:f4:87:0d:b7:dc:5c:dd:d1:8e:d5:63:cf:c8:
         4f:9f:2d:0e:d9:66:81:03:47:a6:cb:5d:7f:96:c3:cd:c3:46:
         fd:f8:eb:e1:1d:6c:2d:83:27:2b:02:da:11:19:a2:de:6d:d3:
         ee:86:93:51:ec:0c:4b:82:f7:e3:cc:3f:9d:f6:fa:6f:a4:fe:
         89:0c:ba:35:ae:ef:8c:9f:c0:7e:13:a9:66:68:f4:7d:8b:02:
         e3:f5:20:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:18:28 2026 by rpki-client