Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/a28b22b2-6422-33ee-b15c-696fdbfd2aac.roa
File:                     a28b22b2-6422-33ee-b15c-696fdbfd2aac.roa (raw, json)
Hash identifier:          nTPAHs1GRacfSmDctXHweCELX504ivlDnIa7FZwIaOg=
Subject key identifier:   22:05:9B:93:F2:B5:3F:B3:C3:91:49:82:D9:96:7A:16:64:75:7B:BD
Certificate issuer:       /CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
Certificate serial:       010D0C9F4328584B95A78927E1A0F0AE3BD58B80
Authority key identifier: A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/a28b22b2-6422-33ee-b15c-696fdbfd2aac.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     25773
IP address blocks:        2602:fd59::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:89:27:e1:a0:f0:ae:3b:d5:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=547b22f7-dd30-4859-8ca0-4a9b53240e96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c7:19:f8:17:09:cd:66:cd:ca:b5:e0:a6:97:
                    52:98:1e:1c:38:8a:f7:71:5a:27:87:0e:ee:70:8f:
                    f5:c3:74:ab:d5:59:de:4a:93:37:bd:b5:93:45:16:
                    7e:9d:14:03:bf:f8:a8:85:32:d8:5a:45:0c:22:65:
                    49:b1:1b:b4:bc:e3:de:4d:29:84:d6:52:4a:13:a7:
                    f7:91:1b:4c:ec:76:80:83:56:cd:a6:08:75:5b:37:
                    da:77:a5:6a:b0:b4:03:24:86:af:31:f2:33:c9:18:
                    45:7d:c3:4c:67:d6:e3:19:c7:27:4c:f6:28:51:29:
                    b8:10:05:15:cb:91:db:db:be:09:1a:04:cf:c8:84:
                    ff:57:5d:26:32:ae:70:49:5c:54:ab:b9:89:7c:c3:
                    78:3e:3e:77:26:88:25:c5:e3:21:1e:3b:59:9d:b4:
                    16:33:cc:3c:fd:c7:a4:ab:d6:06:d4:08:07:a8:de:
                    57:a4:6d:1b:5f:20:5e:89:cd:f4:24:86:2e:c6:e7:
                    54:54:e1:ba:99:07:00:1b:ad:55:ba:d7:76:80:6c:
                    6b:a5:7c:8f:a0:e3:06:7f:63:03:7b:47:ac:05:a2:
                    73:eb:8c:fd:81:f0:eb:a7:91:d0:1a:ba:cd:5e:e7:
                    b4:46:94:ff:50:3b:94:fe:78:9f:15:13:76:27:4c:
                    1c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:05:9B:93:F2:B5:3F:B3:C3:91:49:82:D9:96:7A:16:64:75:7B:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/a28b22b2-6422-33ee-b15c-696fdbfd2aac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl

            X509v3 Authority Key Identifier:
                keyid:A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd59::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:d4:36:b8:ab:aa:64:da:ee:9f:a2:62:21:f2:00:f4:a7:34:
         01:55:d8:2a:7f:0d:9d:fe:d8:45:40:2e:ae:28:23:9d:79:5c:
         a8:bd:6e:48:a5:19:54:5a:c5:5a:cc:b7:bb:fe:c1:b5:30:b3:
         e0:e6:a9:14:d3:23:5e:59:f0:c3:e3:d2:b6:d7:82:e1:cf:51:
         e1:99:5d:09:d2:25:09:fe:a6:e9:cf:5f:f6:06:4a:7a:30:e3:
         ab:05:63:96:41:bf:01:a6:f7:13:e5:af:82:e5:da:11:5f:ff:
         31:37:8c:e2:0a:df:57:ad:1d:b5:e4:2a:0f:5a:b0:28:1b:58:
         ef:52:57:ee:bc:09:7f:52:bc:dd:b3:a9:8f:bb:92:d2:d9:e2:
         23:05:b1:58:7f:40:66:f9:b8:6c:ec:df:da:26:60:ad:c8:6b:
         3b:69:6a:55:80:08:e4:d8:ba:be:d9:be:a4:b0:c3:bc:5d:e1:
         bc:e4:fd:ba:5c:47:d8:53:8e:22:0f:43:b1:c9:b5:ec:a0:4c:
         d3:a4:a6:94:47:bc:e8:ff:4d:9b:5c:d2:ff:8a:89:4d:f3:f1:
         91:b1:41:ee:78:2e:25:fa:81:28:6b:c2:5b:8f:ad:0a:f1:07:
         c9:c7:43:a7:97:e7:fd:22:ad:8e:9a:85:18:5e:6d:6d:24:00:
         b8:9f:2d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 06:34:53 2025 by rpki-client