Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/c8d91b25-ec9f-37a7-8ea8-533a2af338c4.roa
File:                     c8d91b25-ec9f-37a7-8ea8-533a2af338c4.roa (raw, json)
Hash identifier:          fqzeJFdgeZ2/qlqAqVlXv5q8OjXwzVUGqmU0D4c+8Xo=
Subject key identifier:   73:DE:56:AE:DF:90:C4:D8:99:B6:D3:90:6C:F8:56:94:A9:A2:D0:6E
Certificate issuer:       /CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
Certificate serial:       010D0C9F4328584D24DFA580BB9511FD60EA3540
Authority key identifier: A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/c8d91b25-ec9f-37a7-8ea8-533a2af338c4.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     198949
IP address blocks:        2602:fd59::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:a5:80:bb:95:11:fd:60:ea:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=ea61f525-0ee0-400a-b791-7eec44fff44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a4:6d:19:57:85:bc:42:5a:2b:cc:69:9b:03:
                    a1:91:50:09:6e:42:1f:9f:29:e9:d0:b3:ed:d3:66:
                    d9:46:e1:9c:b9:66:4f:a9:84:f5:05:56:9a:8f:00:
                    62:b6:25:ec:95:7b:85:3f:d9:21:d5:57:dc:02:2b:
                    e2:9e:01:ee:06:ab:2c:8b:a1:cf:6a:41:1d:ae:af:
                    cf:39:b6:b3:a4:e6:96:a9:93:b0:10:77:f9:3b:ec:
                    34:97:96:db:f6:9f:17:34:bd:21:25:1c:ea:aa:c6:
                    61:03:9d:f4:af:b4:fb:90:71:8b:0e:8d:bc:41:60:
                    4f:dc:11:f0:83:9d:97:3a:22:2a:8d:b5:3a:9b:07:
                    fc:0e:b2:32:2e:74:9b:1d:81:08:da:20:80:1d:05:
                    84:d2:d7:ff:2f:69:7a:8c:28:e2:8c:4d:f0:88:cd:
                    92:1e:1c:0a:73:13:52:4e:90:bc:64:28:fd:91:8d:
                    9b:34:ae:ec:5e:3f:02:7e:2a:bc:e4:25:6e:50:09:
                    d0:ca:3a:e7:83:29:6b:64:83:15:76:f4:78:5c:f4:
                    6f:3d:e3:3b:d9:94:f3:cd:f7:00:e6:f8:20:ed:40:
                    99:0a:bf:a6:c5:8b:d7:0e:1e:5d:68:8f:2a:61:a2:
                    cb:e0:50:db:b6:5e:50:fb:68:ea:ea:d5:7f:c2:16:
                    8c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DE:56:AE:DF:90:C4:D8:99:B6:D3:90:6C:F8:56:94:A9:A2:D0:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/c8d91b25-ec9f-37a7-8ea8-533a2af338c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl

            X509v3 Authority Key Identifier:
                keyid:A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd59::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:12:d4:55:6d:b0:20:95:98:ff:cb:7a:46:d2:f1:65:2b:93:
         7e:fa:3e:10:fc:52:ef:ac:d4:51:aa:af:5a:12:cd:af:4f:00:
         c8:48:ce:a6:43:45:ae:89:1a:de:58:3d:8c:dc:97:37:3c:e2:
         7a:1f:56:36:30:6a:42:00:99:e9:4d:40:53:1e:63:8d:e5:18:
         ba:f5:aa:17:e3:bc:09:1b:6e:a3:b9:b1:b2:06:ae:27:2a:89:
         4d:4d:5e:fc:c2:84:fc:2e:73:ee:b5:11:f9:6e:ab:81:85:5f:
         c9:5d:11:89:89:28:21:35:bb:a3:a8:0b:f9:70:5a:2f:3c:04:
         9d:66:3c:94:5f:6c:3d:b7:27:39:85:e0:7f:2d:57:dd:71:87:
         b8:c1:29:92:5e:2c:49:ad:d1:79:90:ab:ab:20:76:e0:4b:1f:
         e2:19:62:43:8b:20:70:f5:dd:dd:e1:c9:a9:18:fc:29:ad:ef:
         1b:17:c0:05:9a:54:2b:92:12:45:04:98:96:b4:4d:1c:ea:a1:
         85:50:ee:7b:83:5b:63:f5:68:3e:16:65:c5:cf:45:50:8f:ca:
         1c:e5:7f:d5:78:7d:5c:2b:d0:02:41:30:f4:72:ee:60:4d:dc:
         1b:d0:23:cc:d4:bf:bd:c0:9a:82:cf:45:fa:6f:df:f3:dd:eb:
         40:20:11:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:32:15 2026 by rpki-client