Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/b0197982-2cd9-36e0-b53f-c1b7df8bfa69.roa
File:                     b0197982-2cd9-36e0-b53f-c1b7df8bfa69.roa (raw, json)
Hash identifier:          +p/HMNLSRkl8c5EZXWPId+Tw076lDLM3Zfc8etx+784=
Subject key identifier:   AF:C1:3B:AB:DC:3B:62:CB:8A:DF:77:DD:2F:34:EC:7B:2D:CD:83:63
Certificate issuer:       /CN=efe14a74-8339-4fa1-885a-2ed37947399a
Certificate serial:       010D0C9F4328584F498BF050762E2E9AF7007500
Authority key identifier: C4:97:9D:67:D0:B6:2B:EF:A3:AB:9E:1C:7A:30:B0:6D:1A:88:5D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/b0197982-2cd9-36e0-b53f-c1b7df8bfa69.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     53667
IP address blocks:        2602:fa59::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:f0:50:76:2e:2e:9a:f7:00:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe14a74-8339-4fa1-885a-2ed37947399a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ba0d33a1-8c5d-4682-9034-9abec3f1a093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1a:f8:6d:74:7d:51:4a:4c:50:36:8c:c8:01:
                    9c:4c:7b:20:a3:8f:b4:3b:69:01:b1:54:d7:66:87:
                    0e:ca:59:9a:fd:aa:53:98:1c:27:8e:83:7d:c0:e6:
                    1e:d7:a5:6c:ec:2f:fc:ee:56:6a:76:ab:32:7a:27:
                    6a:87:73:55:9e:84:1e:f0:46:07:d9:d8:cb:5d:9f:
                    fe:24:aa:15:a2:2a:00:0c:99:36:84:e8:55:e8:be:
                    51:cf:da:42:c8:b5:e2:6d:ad:99:f3:f1:c4:e9:3e:
                    2a:1e:d5:f2:b3:0b:ea:10:a5:49:ea:45:15:81:4c:
                    b2:5f:8e:ff:e0:bf:04:60:59:54:c8:c8:d9:f9:5a:
                    da:de:a9:38:3a:fc:98:16:aa:f1:9a:eb:f3:f5:ce:
                    b0:4f:9c:f7:2f:92:49:54:e3:b6:87:12:33:e0:38:
                    70:cb:59:d2:4f:99:c4:80:7e:df:e2:e0:93:03:bf:
                    8b:b9:f7:2a:06:c2:2c:de:78:a0:08:5b:f7:cb:06:
                    4f:4c:ac:cb:63:2c:14:3d:1a:dc:87:f9:e2:f6:37:
                    1c:df:9d:83:85:2f:15:c0:d1:29:50:89:ab:58:31:
                    06:32:06:25:79:d2:6a:eb:28:8a:c6:ef:1b:58:1c:
                    88:fa:ef:7b:70:9f:9c:b5:31:d1:14:8d:f1:68:d2:
                    d0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C1:3B:AB:DC:3B:62:CB:8A:DF:77:DD:2F:34:EC:7B:2D:CD:83:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/b0197982-2cd9-36e0-b53f-c1b7df8bfa69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.crl

            X509v3 Authority Key Identifier:
                keyid:C4:97:9D:67:D0:B6:2B:EF:A3:AB:9E:1C:7A:30:B0:6D:1A:88:5D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa59::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:87:27:fe:38:6a:dd:a3:28:2e:bc:d1:74:0e:b9:ee:a5:e7:
         23:cd:b8:01:e1:6e:ac:59:f5:e7:46:b4:95:b4:aa:b5:66:2e:
         dc:90:85:6a:2a:56:bb:3b:2d:70:f4:d0:82:2a:9a:c8:4d:25:
         23:7c:b7:d3:d9:a5:59:6f:7b:0d:64:eb:d4:2b:35:16:6b:38:
         c2:d3:8b:21:51:ef:0d:b8:fc:b4:78:f4:04:88:37:6e:b6:3a:
         96:83:89:8d:8c:19:99:9f:4e:57:a1:5c:68:9a:e0:72:09:6d:
         87:cd:64:95:d5:c7:78:7a:dd:05:db:48:85:04:23:2d:82:b3:
         f3:68:9e:99:7b:24:fc:c0:1c:b2:f3:b6:37:08:d8:6f:da:09:
         f4:25:31:76:f5:73:02:f7:ec:78:2c:84:3e:8e:f8:d5:25:e8:
         58:20:f0:cc:1b:8f:e2:07:7b:6f:ed:e4:37:6c:ee:73:de:24:
         2d:93:a3:3d:c8:1e:3a:95:b1:5e:cc:56:44:3b:ae:cc:7e:c7:
         8d:4c:e1:63:f2:0a:c0:c2:30:8f:27:a2:52:f5:e5:6d:b5:ac:
         cd:50:14:74:a8:12:8f:01:78:70:01:39:09:3f:90:46:56:14:
         28:41:ba:5d:f6:f4:eb:d9:86:82:24:a9:dc:4e:96:16:3d:e6:
         31:10:7c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:53:03 2026 by rpki-client