Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/91a1f677-3c17-320d-920c-7a6755bcf4dd.roa
File:                     91a1f677-3c17-320d-920c-7a6755bcf4dd.roa (raw, json)
Hash identifier:          A80lqHB6ycWAi3xpdCXFD+GVH0zMIAypA/EeNEWfvo4=
Subject key identifier:   39:2E:50:9A:15:BF:2F:B0:64:CC:FC:3A:20:73:B3:DE:7C:13:CD:89
Certificate issuer:       /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
Certificate serial:       010D0C9F4328584ECBD1CF1A2E505DA71CA60B00
Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/91a1f677-3c17-320d-920c-7a6755bcf4dd.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     62707
IP address blocks:        2602:fe12::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:cf:1a:2e:50:5d:a7:1c:a6:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=39dc29a0-edaa-40a6-be81-3695da2ea551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:79:29:97:e5:7b:9a:9c:7b:39:65:0d:ec:37:
                    62:ca:01:b3:5b:e4:e0:f8:9c:09:92:5f:b9:49:79:
                    e4:b1:d7:7b:cb:eb:ac:cd:8f:4b:e8:65:de:0e:ad:
                    23:b3:8c:29:0e:fa:8c:03:23:77:96:2b:cb:98:72:
                    53:ee:92:1a:25:ed:03:f6:61:41:f6:14:a7:86:1e:
                    af:e8:df:df:d7:f1:df:3b:aa:c6:0a:c8:79:3e:99:
                    fd:c1:cc:26:c2:d6:02:06:84:dc:72:ff:69:20:23:
                    02:bd:b7:66:01:f6:d8:5c:0e:53:ab:e6:1b:23:b5:
                    d2:00:b3:ea:ed:00:d8:f5:30:ee:bf:16:23:9e:52:
                    5d:35:f7:a2:54:6a:d8:21:e6:62:69:78:f3:72:10:
                    a1:b6:99:56:f9:3a:9c:e3:80:67:50:e5:d6:1b:24:
                    1d:c0:a8:e6:b0:55:85:21:c0:7c:7b:c9:01:8f:ff:
                    bb:af:4b:8c:64:d3:83:63:6b:8d:21:b7:9f:3f:b6:
                    a2:49:49:b8:b1:af:71:60:2e:3f:4c:fb:82:e1:99:
                    0f:79:0b:77:8b:c9:e4:08:2a:fe:55:90:cb:29:6d:
                    95:90:32:02:c3:13:f1:51:81:43:73:50:3e:3f:c9:
                    9e:bd:29:9c:4f:9d:4a:32:e9:5d:0e:60:ee:0b:0d:
                    01:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2E:50:9A:15:BF:2F:B0:64:CC:FC:3A:20:73:B3:DE:7C:13:CD:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/91a1f677-3c17-320d-920c-7a6755bcf4dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl

            X509v3 Authority Key Identifier:
                keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe12::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:c6:2a:a1:50:5a:11:70:78:d9:00:b7:c1:ff:44:55:ff:4f:
         49:06:86:68:d6:55:81:a1:e4:f1:4d:83:63:cb:79:d4:21:58:
         04:de:f5:43:6e:9e:ce:8e:37:8d:7c:9b:48:a3:ce:b8:98:23:
         a8:c9:09:48:45:97:d5:c9:e2:ca:84:e7:80:08:18:bf:94:89:
         ff:39:05:b5:33:76:76:35:cd:dd:b5:3a:43:87:cd:7a:2a:88:
         73:bc:69:6c:b2:28:bf:d3:0c:53:eb:ff:2a:a7:9f:fa:5a:81:
         31:bb:90:aa:08:f8:45:d2:2f:50:ad:c3:43:d5:2b:9c:73:13:
         81:c4:ae:0e:05:e1:22:0f:4b:6e:e5:30:5b:da:ff:71:34:3f:
         52:0a:58:5b:c1:03:f5:ac:e8:fa:67:af:a9:33:e1:af:bb:61:
         03:a3:25:b6:f7:29:fa:f6:f2:e0:ef:61:c9:90:8c:8e:1d:f4:
         b1:c8:ce:cc:53:ce:50:02:5f:35:cc:1b:65:16:f3:66:03:16:
         a9:11:98:9e:94:5b:c8:e1:73:be:0a:34:b4:42:c2:c7:a0:43:
         d3:80:49:f8:6e:af:92:15:31:19:6f:43:9b:52:2e:2a:8b:5c:
         47:0b:70:1c:79:83:ba:27:55:6c:45:42:44:a7:e1:3c:3b:a2:
         c4:b7:bb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:22:05 2026 by rpki-client