Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/4570ad1f-c97b-3736-a481-a836efbbee20.roa
File:                     4570ad1f-c97b-3736-a481-a836efbbee20.roa (raw, json)
Hash identifier:          iIB9DnVqzYvze5DjfX0s4VloPl154LiNFsxIpNzyBc4=
Subject key identifier:   BD:98:AF:51:6B:60:3A:54:28:5D:DD:F7:FC:7E:C4:00:27:E3:07:98
Certificate issuer:       /CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
Certificate serial:       010D0C9F4328584B95A7893AE0A7CF463F5C2F00
Authority key identifier: A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/4570ad1f-c97b-3736-a481-a836efbbee20.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     48851
IP address blocks:        2602:fd59::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:89:3a:e0:a7:cf:46:3f:5c:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=9e84373e-0122-450f-8266-2ddb85879196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:26:c4:a2:41:13:f4:02:c3:cb:bc:6c:7c:17:
                    3e:e1:20:5d:ed:26:6a:46:13:53:50:52:cc:79:2a:
                    b8:7e:03:4f:9a:6e:73:21:ba:53:1d:99:df:b5:37:
                    12:b1:51:02:9d:3c:a9:36:9a:2d:5b:94:70:88:1e:
                    35:8c:2c:aa:13:95:0b:68:83:02:e3:7d:81:74:ef:
                    d6:58:72:f8:a9:77:0d:2e:ac:a3:c5:e3:6e:1b:ad:
                    ba:c0:fc:95:35:35:2a:a2:0a:ab:7f:56:03:5f:1a:
                    b2:6c:39:1f:4a:a2:ed:c3:81:0f:bf:2b:a9:b1:fa:
                    ac:a4:32:c7:b2:aa:c3:31:e8:62:86:30:4f:a0:12:
                    67:28:de:e7:1e:6f:34:55:db:d6:33:92:95:1e:eb:
                    80:c8:e5:8f:be:f2:35:7f:9a:f0:00:45:bf:43:39:
                    27:30:be:f2:85:ab:d0:6c:d4:75:3f:64:55:15:b7:
                    99:de:af:3e:28:1a:63:ce:58:ef:e1:b2:d4:5a:cc:
                    ca:0d:0c:4c:2e:84:3e:1c:4b:2b:0c:36:95:47:a6:
                    74:3a:7c:11:f3:d0:cd:a9:f6:74:21:60:a9:ab:80:
                    30:0b:4f:b2:f2:dc:94:ba:24:c8:28:04:47:2c:d6:
                    8f:c8:b2:43:cd:fa:9a:5d:ed:af:b5:90:e7:76:56:
                    a2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:98:AF:51:6B:60:3A:54:28:5D:DD:F7:FC:7E:C4:00:27:E3:07:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/4570ad1f-c97b-3736-a481-a836efbbee20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl

            X509v3 Authority Key Identifier:
                keyid:A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd59::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:39:47:4b:84:de:86:84:f2:93:4e:5e:6a:e8:85:e0:53:c7:
         84:d4:4a:9c:7d:c3:4e:1e:13:8a:1c:22:52:bb:fa:81:0b:e3:
         84:c5:aa:d6:bf:2c:43:05:08:88:84:7f:a7:29:2f:d0:b9:b3:
         86:a2:38:a8:f7:3e:3e:f2:9b:dc:f9:cb:cd:4e:53:71:43:e5:
         55:ae:05:fa:75:ee:03:d4:73:35:1a:5d:bb:c9:d0:92:20:0f:
         ad:42:de:72:19:82:57:cc:34:2d:8d:33:4e:90:aa:15:0f:d1:
         24:a5:53:87:29:95:6a:a7:aa:b9:67:61:eb:22:e8:4f:ae:ad:
         39:87:64:2f:54:79:16:ef:c9:b8:27:83:d2:75:aa:fb:e9:47:
         5f:f0:17:2a:87:b7:c6:52:01:35:ef:d3:95:9a:d5:05:11:a5:
         04:ef:94:72:56:5c:07:c2:bc:dc:c8:83:d7:63:66:40:ac:bc:
         ae:9c:da:cb:0e:8e:84:e5:ea:a7:fe:d7:87:ba:1e:a5:57:ac:
         c6:b6:e3:21:9f:d2:69:3b:10:3e:ff:0f:36:08:20:ef:08:08:
         8c:6d:04:fb:84:54:8e:8b:e6:5c:53:47:fa:0d:81:0f:6b:3c:
         ef:01:75:a0:c7:44:0f:cb:35:2c:f1:53:12:51:8b:c7:e2:3f:
         99:fd:8c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:19:03 2025 by rpki-client