Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cabea0c6-d32b-4d88-86fb-1bff56951835/6b66a7da-e4ed-3537-aa40-4423c45f01a8.roa
File:                     6b66a7da-e4ed-3537-aa40-4423c45f01a8.roa (raw, json)
Hash identifier:          1xUg+yxOLM6+N433lj4ml3FJDAQExjvstJTPdKQ3pWk=
Subject key identifier:   0F:35:A4:47:41:E1:71:B8:E1:4A:9B:DD:F0:1A:E2:60:9C:D5:39:A2
Certificate issuer:       /CN=cabea0c6-d32b-4d88-86fb-1bff56951835
Certificate serial:       010D0C9F4328584F85CE2CAA2FCB44517DA92D00
Authority key identifier: E1:D0:FF:1F:42:39:C4:EF:02:A9:27:4F:6E:65:D7:58:DD:CC:AA:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cabea0c6-d32b-4d88-86fb-1bff56951835.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cabea0c6-d32b-4d88-86fb-1bff56951835/6b66a7da-e4ed-3537-aa40-4423c45f01a8.roa
Signing time:             Fri 16 Oct 2026 15:53:23 +0000
ROA not before:           Fri 16 Oct 2026 15:53:23 +0000
ROA not after:            Thu 14 Jan 2027 16:53:23 +0000
asID:                     62748
IP address blocks:        2602:f2ee::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cabea0c6-d32b-4d88-86fb-1bff56951835/cabea0c6-d32b-4d88-86fb-1bff56951835.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cabea0c6-d32b-4d88-86fb-1bff56951835/cabea0c6-d32b-4d88-86fb-1bff56951835.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cabea0c6-d32b-4d88-86fb-1bff56951835.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:85:ce:2c:aa:2f:cb:44:51:7d:a9:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cabea0c6-d32b-4d88-86fb-1bff56951835
        Validity
            Not Before: Oct 16 15:53:23 2026 GMT
            Not After : Jan 14 16:53:23 2027 GMT
        Subject: CN=0fe50c87-facd-432f-9d13-ead945257c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:41:d0:55:7c:7d:a2:00:b9:0b:81:b2:75:55:
                    16:a8:35:2f:67:eb:8a:fc:61:75:d9:52:9b:7f:46:
                    fd:e0:4e:a6:b6:dc:c0:8d:1f:df:b0:aa:09:0d:ce:
                    42:f0:ef:5b:ec:4e:c8:e8:c0:ee:03:ac:5c:f0:28:
                    51:7c:89:a3:ff:6e:8a:22:da:66:bb:3c:07:36:49:
                    15:15:44:5f:75:96:d7:99:c8:fa:fa:c4:e8:99:9e:
                    db:a8:e2:77:c9:e7:1b:cb:8b:cc:68:84:a5:df:39:
                    5b:d4:6c:8b:b8:bf:34:1e:66:75:e8:b8:b5:fd:5c:
                    56:1b:81:fa:97:66:99:11:7c:37:ae:f7:af:83:09:
                    f9:b6:38:43:d7:eb:1d:42:ea:08:9f:f7:63:c5:29:
                    58:95:88:1d:46:e6:18:d6:88:9e:35:94:69:c5:c1:
                    57:bb:0c:e4:bc:4c:1a:2b:8a:d9:89:65:43:d1:89:
                    c7:9a:f9:0f:53:f1:d2:43:29:14:0d:a3:d4:fb:c9:
                    ea:a6:c8:df:02:ed:d1:f1:e2:c5:ca:1f:a6:0f:fd:
                    58:44:26:7c:b5:44:e9:ec:3f:5b:82:1a:91:20:fd:
                    89:5d:70:fe:ff:35:01:93:ed:a2:eb:64:56:ca:c3:
                    b1:b8:ea:9b:33:8f:58:7a:98:b9:22:57:01:77:79:
                    38:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:35:A4:47:41:E1:71:B8:E1:4A:9B:DD:F0:1A:E2:60:9C:D5:39:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cabea0c6-d32b-4d88-86fb-1bff56951835/6b66a7da-e4ed-3537-aa40-4423c45f01a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cabea0c6-d32b-4d88-86fb-1bff56951835/cabea0c6-d32b-4d88-86fb-1bff56951835.crl

            X509v3 Authority Key Identifier:
                keyid:E1:D0:FF:1F:42:39:C4:EF:02:A9:27:4F:6E:65:D7:58:DD:CC:AA:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cabea0c6-d32b-4d88-86fb-1bff56951835.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f2ee::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:da:1b:3e:9b:76:09:82:99:84:66:29:7a:e7:30:e0:3d:fd:
         ba:33:31:3a:bc:4c:5a:47:e6:3d:e4:1d:9e:09:4d:f3:c9:7b:
         e5:ad:67:80:3b:b1:a2:af:a4:2d:e3:e2:b6:d3:2f:c3:26:94:
         72:f1:69:dd:0d:58:89:fc:a1:83:73:ba:d3:23:4b:9a:4b:56:
         42:c7:2f:27:dd:07:74:51:a9:76:e3:8f:4b:d3:55:5d:c5:14:
         eb:b3:93:f3:aa:24:66:19:d4:a7:da:76:2a:30:4f:56:3e:18:
         d7:24:41:cb:88:31:49:4e:37:94:ba:b5:9a:ce:f7:04:6b:f5:
         7b:1d:60:e1:6c:50:a3:a5:ed:ce:66:c8:f6:c3:36:11:2b:e2:
         e1:4e:5f:8c:97:10:c0:e4:25:52:66:af:54:30:80:b5:d4:d3:
         3d:f2:13:19:16:c6:1a:6a:74:a6:ae:39:60:2c:61:bb:2c:53:
         fc:ac:c6:21:86:ac:45:c6:e7:37:fc:f1:d5:a5:7c:b4:bc:1e:
         f1:39:2d:8e:2a:33:d4:02:c8:af:f1:f7:ae:4c:dd:2c:86:a9:
         d1:90:8d:6f:bc:35:4d:9b:52:62:18:ba:db:e4:39:03:f7:2a:
         09:e5:e7:dd:0c:5f:02:ed:52:73:1c:3f:ff:aa:b1:18:39:a0:
         97:0c:11:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 01:56:03 2026 by rpki-client