Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/468cfc20-af9f-3468-bf97-835ce5245200.roa
File:                     468cfc20-af9f-3468-bf97-835ce5245200.roa (raw, json)
Hash identifier:          si+8JIYCzjbsh5mOee7wdcgIEWgn5jiil+Dz5Up3dF8=
Subject key identifier:   FC:01:F8:5F:DE:A5:1A:C5:F7:BA:95:AB:96:A2:A8:28:69:11:D6:FA
Certificate issuer:       /CN=efe14a74-8339-4fa1-885a-2ed37947399a
Certificate serial:       010D0C9F4328584F549D6FD67D27E22AF471DF40
Authority key identifier: C4:97:9D:67:D0:B6:2B:EF:A3:AB:9E:1C:7A:30:B0:6D:1A:88:5D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/468cfc20-af9f-3468-bf97-835ce5245200.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     14956
IP address blocks:        2602:fa59::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:6f:d6:7d:27:e2:2a:f4:71:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe14a74-8339-4fa1-885a-2ed37947399a
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=338ae797-2201-4e42-bf64-041b2c75575a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:66:de:16:f2:c2:03:51:4f:27:27:6d:f8:8a:
                    ae:07:ac:66:2a:63:f7:79:c1:fe:91:ca:7e:e3:6d:
                    9f:ea:e8:48:8b:4b:74:13:cf:91:2c:87:46:f6:69:
                    89:5a:19:b1:be:00:51:dc:07:de:be:68:94:06:64:
                    de:a2:d3:70:5f:84:85:b9:64:ba:ae:c3:b4:8f:98:
                    2b:c4:0b:52:2b:93:03:d9:68:c8:86:32:7c:a0:70:
                    8c:c9:f4:3a:de:0d:f5:a2:7a:29:89:49:1d:4b:3c:
                    5e:65:dd:38:c8:4d:98:ef:e8:ed:bc:ea:f2:a0:26:
                    ae:c0:ea:fb:f9:07:54:5d:6e:94:e9:75:79:e9:97:
                    1b:3b:4c:6f:64:9c:af:d5:55:f9:a6:ae:e7:d0:97:
                    d1:19:23:5c:5a:1d:d5:3b:4d:35:53:74:35:6a:d9:
                    b2:87:4e:37:41:75:4e:3f:4c:16:db:9d:a4:9a:2f:
                    79:fc:b2:a9:cc:74:2a:76:cc:d6:1e:66:27:41:03:
                    be:8d:36:89:59:32:0f:43:45:fa:57:15:f2:03:e1:
                    4f:bf:52:5b:1d:9d:63:47:5e:24:96:27:1b:76:60:
                    67:75:79:9e:93:0a:1e:c2:8b:aa:5b:81:ba:20:26:
                    20:b6:96:21:97:d4:ef:32:35:c1:29:e5:8b:57:e8:
                    97:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:01:F8:5F:DE:A5:1A:C5:F7:BA:95:AB:96:A2:A8:28:69:11:D6:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/468cfc20-af9f-3468-bf97-835ce5245200.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.crl

            X509v3 Authority Key Identifier:
                keyid:C4:97:9D:67:D0:B6:2B:EF:A3:AB:9E:1C:7A:30:B0:6D:1A:88:5D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa59::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:20:a3:b5:29:bf:31:9e:77:3d:d6:86:9d:c6:bb:d1:78:c2:
         d7:0c:89:e5:04:08:58:95:ce:d3:99:cc:77:22:a6:ca:7e:e6:
         15:1b:32:90:3c:9e:74:51:74:b9:6f:1c:f3:09:72:77:b4:61:
         2c:81:90:c3:db:26:59:78:0b:ff:08:ad:d7:40:d3:82:e1:16:
         5d:55:33:01:dc:54:bb:55:35:53:61:78:ed:8d:2c:da:53:f1:
         63:d9:79:84:f1:fd:03:ae:89:b0:e2:69:c7:a9:5b:1a:f3:dd:
         4d:5b:d2:d5:be:72:a5:49:3d:3e:50:8d:35:eb:de:0d:e1:ba:
         21:b7:25:81:fe:0b:bd:15:31:b4:2c:30:76:72:cb:28:bf:ba:
         4f:df:62:4c:a5:5b:b5:2d:c2:ab:32:5a:4d:c5:c1:83:2d:67:
         fd:46:7b:ab:c2:1e:81:ef:50:de:52:75:b8:11:ef:df:e9:06:
         9b:77:97:3d:cb:f6:8c:70:38:0c:32:34:45:02:5c:75:53:cc:
         19:fb:ae:a8:c3:9c:b8:d0:21:e9:c2:26:25:a7:3b:01:d8:28:
         6e:40:8f:5f:c2:80:56:94:1b:56:ab:02:4b:02:39:41:38:84:
         e6:78:c5:29:78:ba:5d:b1:0f:da:d8:06:86:87:72:0a:50:90:
         e5:2a:61:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:19:31 2026 by rpki-client