Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/b0197982-2cd9-36e0-b53f-c1b7df8bfa69.roa
File:                     b0197982-2cd9-36e0-b53f-c1b7df8bfa69.roa (raw, json)
Hash identifier:          XmGHrfQ6mph72SYhRvCvYuLtT3+sxtbefHlXVpR7YaA=
Subject key identifier:   4F:27:51:34:38:DB:B4:61:4F:42:2B:C8:34:9F:E6:7E:69:F8:BA:BC
Certificate issuer:       /CN=efe14a74-8339-4fa1-885a-2ed37947399a
Certificate serial:       010D0C9F4328584EA787FA8FF31DFBA7F6F18400
Authority key identifier: C4:97:9D:67:D0:B6:2B:EF:A3:AB:9E:1C:7A:30:B0:6D:1A:88:5D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/b0197982-2cd9-36e0-b53f-c1b7df8bfa69.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     53667
IP address blocks:        2602:fa59::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:fa:8f:f3:1d:fb:a7:f6:f1:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe14a74-8339-4fa1-885a-2ed37947399a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1be59623-d6a2-45b6-9ca0-954f19fbfd78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:71:f2:5f:90:2a:fe:36:25:95:c6:e2:cb:7c:
                    34:21:fe:37:d7:36:f0:89:5a:df:b7:87:f4:93:75:
                    94:35:89:1f:af:53:a8:74:b4:1b:33:7b:29:8c:d6:
                    7a:0f:7f:22:83:e0:6a:15:39:0d:e0:a2:9a:f0:1e:
                    6b:9d:c7:88:58:1b:46:35:2f:ec:5b:c9:21:bf:77:
                    11:75:de:46:82:ff:e4:d3:78:ef:54:ae:61:09:07:
                    ce:7f:78:6b:84:63:50:de:b3:00:5c:7d:28:ca:3c:
                    65:92:b7:77:3b:33:9b:7f:40:c4:3d:3c:de:d9:fc:
                    14:e0:3f:b7:9b:1c:b9:02:5f:f0:75:f9:7f:9a:cb:
                    00:2a:ea:0c:7f:fb:bb:cb:90:63:ce:5d:f1:49:15:
                    a6:c1:08:7d:ca:33:f6:63:92:a0:7b:45:cd:f2:04:
                    06:41:f8:fd:40:aa:33:4a:7f:43:3a:ae:ae:6f:2a:
                    32:76:4f:db:c4:ed:f2:1c:c4:1f:12:01:83:dc:c7:
                    75:a5:38:35:a7:ac:7d:90:3d:76:5d:3d:b1:21:66:
                    92:36:05:58:6e:48:e2:52:36:df:a6:68:4a:0c:24:
                    3a:67:32:75:ba:4f:df:6d:44:a3:12:4f:a7:9a:de:
                    53:97:a9:6e:59:fe:f7:7b:29:79:e8:ca:34:d5:69:
                    08:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:27:51:34:38:DB:B4:61:4F:42:2B:C8:34:9F:E6:7E:69:F8:BA:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/b0197982-2cd9-36e0-b53f-c1b7df8bfa69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.crl

            X509v3 Authority Key Identifier:
                keyid:C4:97:9D:67:D0:B6:2B:EF:A3:AB:9E:1C:7A:30:B0:6D:1A:88:5D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa59::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ff:d7:1f:ae:66:66:0a:57:36:7b:a9:88:a7:4b:6d:07:6f:
         11:ca:00:c5:91:df:29:0b:98:b0:46:a2:9f:6e:96:c0:17:80:
         0a:64:a9:f7:d1:14:a2:9d:40:89:fd:c1:f8:94:3e:57:14:7a:
         99:d9:06:9d:9e:b5:85:87:bf:fa:3e:b1:4b:3b:bc:15:78:2d:
         3d:ed:c0:83:e3:6e:2d:77:c2:d3:21:83:44:0d:63:40:b7:65:
         fe:b9:31:88:31:93:00:27:8c:5f:fc:f6:fa:ca:0c:a0:0a:b5:
         a0:b4:fe:ce:71:7d:13:43:5f:5c:5b:a5:82:d3:a4:08:92:06:
         7d:20:00:de:aa:98:93:b3:72:82:d9:07:3c:48:86:01:fb:c9:
         5f:90:dc:22:a8:c9:67:f3:de:4f:d4:2b:88:9c:7a:43:f9:a4:
         e0:f9:9e:c0:26:7c:65:db:5f:c6:33:1f:10:6d:f6:12:55:e9:
         41:6d:f1:e9:d8:2a:99:00:bd:a9:ad:0f:71:e6:6d:31:af:17:
         1f:ce:51:bb:1c:a0:08:e4:a1:cb:fd:7c:b1:8b:96:61:41:c6:
         d9:11:fe:d4:00:11:5e:83:80:65:cf:46:35:57:a3:6f:ef:c7:
         07:ea:0b:9a:74:cf:95:9c:7e:f8:96:b7:17:c1:69:a5:ff:15:
         e6:89:11:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:54:04 2026 by rpki-client