Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/4570ad1f-c97b-3736-a481-a836efbbee20.roa
File:                     4570ad1f-c97b-3736-a481-a836efbbee20.roa (raw, json)
Hash identifier:          cJ4PX30+miyn9RE1mdvws1lzN+9Chz0ofy7BT5WYCzQ=
Subject key identifier:   9C:1C:A3:D2:5B:7E:B9:1B:4B:82:10:05:8B:40:96:E8:44:7B:FC:53
Certificate issuer:       /CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
Certificate serial:       010D0C9F4328584F7A4D8AC144A37681F3A51500
Authority key identifier: A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/4570ad1f-c97b-3736-a481-a836efbbee20.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     48851
IP address blocks:        2602:fd59::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4d:8a:c1:44:a3:76:81:f3:a5:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=1dc83078-13c4-4a2c-b955-973bec76045a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:01:e7:a0:a4:38:aa:25:b3:93:e6:72:ce:8f:
                    c5:ca:43:dc:58:48:87:2f:4c:a4:da:53:1c:87:3d:
                    c5:5c:f6:7e:41:0a:23:da:87:4c:00:30:c3:dd:d0:
                    bc:3d:48:f3:92:a8:7e:94:44:e9:f1:a6:0c:69:8e:
                    9b:3b:5f:13:97:1b:cf:9a:98:42:ef:67:be:09:0f:
                    06:f9:c5:a9:36:4f:e7:de:6c:95:73:6c:cc:72:71:
                    f8:61:29:2d:54:7e:38:06:a4:2a:bf:49:be:f2:04:
                    9a:f1:ce:0e:c2:a7:19:d0:f4:5f:d2:71:66:89:b5:
                    81:2b:80:a5:00:6f:90:97:9a:8d:0b:cc:e6:bf:9d:
                    b6:0c:51:2d:7b:bc:7c:6a:f6:c5:31:71:23:94:20:
                    80:ef:86:2a:3d:03:be:06:6d:d2:c6:cb:d2:e5:7f:
                    82:4b:b7:ad:4a:75:6e:17:69:8c:32:e3:5d:fe:7b:
                    48:24:76:72:95:e2:12:7a:16:1b:ad:3c:af:52:8d:
                    af:2f:c2:13:4f:10:90:c4:81:6a:2c:7e:c7:49:14:
                    00:b4:35:88:28:ed:65:a1:8e:fc:f5:2f:45:24:a5:
                    9d:5f:96:0e:93:5e:c1:52:89:32:04:37:15:19:a5:
                    b3:92:e4:bb:10:13:87:78:e8:41:8f:16:71:bd:40:
                    07:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1C:A3:D2:5B:7E:B9:1B:4B:82:10:05:8B:40:96:E8:44:7B:FC:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/4570ad1f-c97b-3736-a481-a836efbbee20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl

            X509v3 Authority Key Identifier:
                keyid:A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd59::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:20:38:1c:b8:61:4b:70:fb:e2:4d:fb:4b:c4:ba:f2:1e:72:
         30:d0:6f:77:04:87:d8:1d:da:a7:f6:56:72:d5:d6:0e:25:be:
         c1:50:b7:aa:10:b6:69:55:a8:71:40:17:6d:71:9d:fc:1a:7c:
         22:c3:04:cb:e3:fe:3b:60:e6:8b:61:05:16:5d:53:42:5b:97:
         d4:d4:bc:49:54:61:d3:47:bb:09:46:26:66:b3:3f:2d:87:c2:
         be:95:b5:ff:25:4a:4f:7a:2d:c9:bc:45:73:ca:cf:cb:e6:2d:
         55:c8:8e:b0:61:94:26:93:8a:00:80:f1:45:e6:79:6b:82:c6:
         0b:05:2b:64:a1:a9:8d:37:fc:ee:33:e7:5f:81:bc:e6:55:4f:
         d8:e2:6d:ee:67:6e:e9:cb:a3:5f:0b:9e:b3:53:05:6b:23:4d:
         97:34:b2:2b:ef:55:81:eb:4a:23:3b:40:d9:34:e4:dc:f5:17:
         e7:64:ea:91:15:81:2f:ab:38:b7:5f:cb:cc:c4:f2:b6:f9:b9:
         e5:12:39:ea:d7:68:89:3c:75:7f:ff:d1:f6:00:d1:ab:b4:11:
         2c:2a:91:bc:b6:b7:90:59:8c:66:79:d4:05:50:b9:57:eb:f8:
         eb:23:ee:a6:1f:e1:41:d9:5a:12:ee:63:c8:c6:35:2c:30:4e:
         82:f8:66:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:31:50 2026 by rpki-client