Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/cfca0b26-20bd-3bbd-8dc9-c679c479bf46.roa
File:                     cfca0b26-20bd-3bbd-8dc9-c679c479bf46.roa (raw, json)
Hash identifier:          lsCyMvnkYyp6OyWzuQ1qLw4QKsBJ7SoaSscqyr/U9D0=
Subject key identifier:   88:AF:3A:69:CA:DD:25:DA:B6:01:FE:87:8E:D2:92:E4:98:C4:7D:C7
Certificate issuer:       /CN=757305d9-2b1e-4783-945b-e7d6cc2e49a8
Certificate serial:       010D0C9F4328584F90CAD8EF7658084992CDE180
Authority key identifier: 53:C3:B8:6A:90:10:C7:27:BD:73:12:C9:5F:1C:B1:B7:D8:AC:0D:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/cfca0b26-20bd-3bbd-8dc9-c679c479bf46.roa
Signing time:             Tue 20 Oct 2026 14:20:34 +0000
ROA not before:           Tue 20 Oct 2026 14:20:34 +0000
ROA not after:            Mon 18 Jan 2027 15:20:34 +0000
asID:                     400941
IP address blocks:        2602:f66b:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/757305d9-2b1e-4783-945b-e7d6cc2e49a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/757305d9-2b1e-4783-945b-e7d6cc2e49a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Nov 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:90:ca:d8:ef:76:58:08:49:92:cd:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=757305d9-2b1e-4783-945b-e7d6cc2e49a8
        Validity
            Not Before: Oct 20 14:20:34 2026 GMT
            Not After : Jan 18 15:20:34 2027 GMT
        Subject: CN=169e037c-f003-4491-be79-4b4e0dc32f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:91:cb:2e:4f:81:ad:27:77:f8:11:b4:37:be:
                    6e:a5:0b:a6:3b:72:0c:84:01:1c:99:80:be:36:ce:
                    cd:99:a6:4c:e1:1e:d5:35:df:9d:28:9f:a7:8c:38:
                    63:1f:45:12:72:34:fd:ef:fe:1a:94:f9:35:a9:9e:
                    d7:d6:01:f6:62:0d:0b:16:29:4e:dd:fb:be:77:f3:
                    22:04:1a:0a:f3:53:3a:c0:24:f9:e9:85:fb:00:ae:
                    58:fb:18:de:a8:ab:bc:08:f7:b1:be:f6:a1:63:13:
                    2e:a6:08:26:c7:e7:d0:b4:51:96:32:75:cc:0e:9a:
                    68:1a:c5:82:51:32:07:1d:c0:c7:d4:ba:91:4f:b4:
                    02:e0:8b:1c:c0:27:db:a6:89:58:e2:29:87:86:8e:
                    c0:4a:bf:f8:d9:00:05:ac:ef:df:5b:bd:7e:24:e8:
                    0a:c7:cc:a2:00:ae:77:ee:3b:4b:ac:2b:58:97:2d:
                    db:4b:3f:71:ed:2c:b0:a4:4b:f4:77:05:e8:9c:73:
                    d1:76:2c:e3:eb:6b:2b:fc:5f:6f:48:65:89:07:4c:
                    10:0e:94:fe:1a:09:d0:04:cc:a6:2b:f2:dd:64:ec:
                    e6:1e:d6:ad:70:73:64:7b:fc:dc:ea:e5:82:6d:c8:
                    b4:0a:ce:5e:35:3d:bf:c3:1e:30:2d:7d:07:d4:3a:
                    23:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AF:3A:69:CA:DD:25:DA:B6:01:FE:87:8E:D2:92:E4:98:C4:7D:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/cfca0b26-20bd-3bbd-8dc9-c679c479bf46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/757305d9-2b1e-4783-945b-e7d6cc2e49a8.crl

            X509v3 Authority Key Identifier:
                keyid:53:C3:B8:6A:90:10:C7:27:BD:73:12:C9:5F:1C:B1:B7:D8:AC:0D:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f66b:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:57:d0:a1:08:24:28:eb:83:a0:26:a6:c9:55:1b:11:93:88:
         8e:a3:9d:d0:da:73:c4:c7:d4:a4:74:0e:b7:6a:40:27:fb:29:
         80:ad:6f:98:a5:53:1d:71:d7:7c:c9:e7:fc:96:00:a9:d3:55:
         14:3a:96:14:28:be:5c:c4:87:2a:1e:a0:52:6b:46:f0:09:b9:
         dd:4c:71:43:95:77:c9:34:02:d5:be:ea:31:e0:34:26:44:23:
         76:79:0f:80:5e:9a:a2:99:0b:3d:10:38:3b:24:ac:66:bf:51:
         f9:54:1a:26:78:d1:1c:d4:0c:47:30:48:08:1e:e0:16:21:79:
         65:27:ba:7c:9d:04:07:63:b7:e7:dd:c5:0b:5a:4f:1a:d8:a4:
         85:78:9b:c7:6f:17:af:40:1e:59:6a:15:a0:2f:c8:b9:e3:05:
         1b:2a:66:ee:a2:02:6f:90:25:bd:e1:63:fb:b2:9b:9b:50:f4:
         f0:5a:cf:94:a3:e3:cf:e7:ef:55:11:40:f0:4a:19:a9:3d:c2:
         eb:96:62:77:1a:c2:ba:44:75:9b:e5:6b:73:b0:c4:2c:83:75:
         99:22:fd:18:5e:a8:2e:2a:1b:7e:ed:84:72:1b:99:66:76:6e:
         d6:58:87:28:c1:86:3e:96:a8:bc:a3:ff:61:f0:02:6f:8b:54:
         da:08:d8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 16:48:11 2026 by rpki-client