Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82f36e71-6ecb-4315-846e-5cbc1f4770fe/0ebadde0-fc40-3cc2-b7e4-c50d04e887b1.roa
File:                     0ebadde0-fc40-3cc2-b7e4-c50d04e887b1.roa (raw, json)
Hash identifier:          99s9DBnL6+Esw0CHp5vOyTV1qgXaiOTPE4bKvs+9Hbs=
Subject key identifier:   34:52:3F:C4:12:BC:E8:11:D5:5A:A4:83:65:D0:05:65:E1:D5:74:AE
Certificate issuer:       /CN=82f36e71-6ecb-4315-846e-5cbc1f4770fe
Certificate serial:       010D0C9F4328584FA7A6B07A437D545D0133C680
Authority key identifier: E9:0D:30:C9:87:25:36:29:94:22:73:AC:19:C8:9A:C5:B1:7A:5C:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82f36e71-6ecb-4315-846e-5cbc1f4770fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82f36e71-6ecb-4315-846e-5cbc1f4770fe/0ebadde0-fc40-3cc2-b7e4-c50d04e887b1.roa
Signing time:             Wed 28 Oct 2026 18:51:18 +0000
ROA not before:           Wed 28 Oct 2026 18:51:18 +0000
ROA not after:            Tue 26 Jan 2027 19:51:18 +0000
asID:                     14016
IP address blocks:        2602:fbcb:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82f36e71-6ecb-4315-846e-5cbc1f4770fe/82f36e71-6ecb-4315-846e-5cbc1f4770fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82f36e71-6ecb-4315-846e-5cbc1f4770fe/82f36e71-6ecb-4315-846e-5cbc1f4770fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82f36e71-6ecb-4315-846e-5cbc1f4770fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a7:a6:b0:7a:43:7d:54:5d:01:33:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82f36e71-6ecb-4315-846e-5cbc1f4770fe
        Validity
            Not Before: Oct 28 18:51:18 2026 GMT
            Not After : Jan 26 19:51:18 2027 GMT
        Subject: CN=9298bbe0-8098-4cd0-bdde-ccb14c495885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bb:15:6f:c0:90:dc:fc:93:c0:c8:fa:09:bd:
                    68:55:57:86:00:c5:32:54:bb:c7:c4:ff:1a:cd:28:
                    53:32:ef:88:ff:b5:7f:5e:c1:36:3f:c1:dd:74:f5:
                    79:d2:6b:66:02:f5:b7:68:6b:f8:33:23:aa:75:15:
                    72:e6:fc:55:79:bd:2d:1e:58:58:ed:f2:59:75:fb:
                    91:c4:df:6f:ae:6c:9d:0a:5f:fb:64:87:11:1c:85:
                    43:5b:b0:0d:74:f3:9b:32:05:ad:df:f1:39:1d:73:
                    33:0d:7a:76:50:bb:6c:76:f7:ce:f3:33:ac:dc:a5:
                    49:aa:e4:a9:71:a0:9f:e9:72:c8:31:fc:29:2b:65:
                    90:5c:46:f0:84:e2:1c:a7:7a:bd:d4:d8:21:25:64:
                    4b:c7:40:08:f5:25:c1:e4:04:35:44:da:51:c9:50:
                    75:28:6d:58:9a:5e:a3:6a:7d:a0:75:e4:20:c6:ac:
                    41:60:a5:d7:b9:c4:8d:61:5c:9c:8c:58:4b:51:2e:
                    29:43:fc:31:f7:52:7b:f4:f8:63:66:33:c5:fe:a4:
                    ac:3d:32:66:02:a1:dd:62:77:a1:35:40:44:7f:2c:
                    fd:f4:33:8c:82:0b:94:11:e9:b6:76:46:7b:b5:d5:
                    a2:df:60:6e:02:12:a4:a0:e5:e6:7e:1a:e4:a5:22:
                    a6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:52:3F:C4:12:BC:E8:11:D5:5A:A4:83:65:D0:05:65:E1:D5:74:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82f36e71-6ecb-4315-846e-5cbc1f4770fe/0ebadde0-fc40-3cc2-b7e4-c50d04e887b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82f36e71-6ecb-4315-846e-5cbc1f4770fe/82f36e71-6ecb-4315-846e-5cbc1f4770fe.crl

            X509v3 Authority Key Identifier:
                keyid:E9:0D:30:C9:87:25:36:29:94:22:73:AC:19:C8:9A:C5:B1:7A:5C:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82f36e71-6ecb-4315-846e-5cbc1f4770fe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbcb:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:37:e2:58:b9:25:9c:cc:cc:59:55:22:33:42:20:c7:54:67:
         49:4d:15:f9:fa:cd:a3:8a:f5:ba:94:09:88:fa:09:4a:a2:2d:
         4f:4d:e8:9f:24:2c:a6:d8:5d:73:5b:95:e6:d6:08:7c:ea:d6:
         93:29:8d:46:07:04:c8:b7:55:d2:9a:95:51:0a:f7:e0:1d:39:
         63:f1:c3:5d:38:8a:aa:20:2d:b2:7a:74:13:cb:e7:c7:9e:20:
         82:8d:f0:7a:d2:71:23:75:09:3a:84:d8:56:ba:01:06:8a:f7:
         77:b2:05:be:c4:81:25:13:f5:f7:f9:fc:ac:4d:ab:33:1b:e7:
         46:17:a6:98:3d:14:2b:2f:56:cd:cf:b8:86:1e:e0:82:ea:e2:
         7d:85:4a:f1:ef:cb:89:fc:38:97:33:b9:57:21:a6:59:a1:c1:
         1b:8d:57:c5:2e:44:39:81:ee:64:f3:68:2f:4b:04:d5:4d:2c:
         9c:6c:4b:19:b9:0d:92:50:0d:21:30:5d:81:b0:a2:ec:fa:32:
         83:10:a6:0d:39:80:8f:c8:35:5e:9a:dc:64:d4:6d:c1:e2:3c:
         c7:94:85:10:38:87:ac:08:0f:cd:f5:9a:c4:75:f0:fb:09:3f:
         0a:09:9a:2f:60:0b:c1:18:64:b2:2b:3d:3b:af:63:0b:79:6c:
         9a:34:35:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 04:16:06 2026 by rpki-client