Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/fed6d93f-9e64-3b05-92de-3bd2bbe5cd27.roa
File:                     fed6d93f-9e64-3b05-92de-3bd2bbe5cd27.roa (raw, json)
Hash identifier:          SchUA//cWy+geshnVquFxuPS2zzuX1kq4f1gPoh4TdY=
Subject key identifier:   37:31:76:0A:CE:BA:08:BF:D5:16:81:07:58:ED:FF:B1:3E:E8:46:22
Certificate issuer:       /CN=efe14a74-8339-4fa1-885a-2ed37947399a
Certificate serial:       010D0C9F4328584EA79D5C90CE749F7F6C11CE00
Authority key identifier: C4:97:9D:67:D0:B6:2B:EF:A3:AB:9E:1C:7A:30:B0:6D:1A:88:5D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/fed6d93f-9e64-3b05-92de-3bd2bbe5cd27.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     198983
IP address blocks:        2602:fa59::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:5c:90:ce:74:9f:7f:6c:11:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe14a74-8339-4fa1-885a-2ed37947399a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9bc38185-a96d-4175-816a-bb9fd9af99ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:69:19:76:dc:0d:6a:3f:72:94:fb:49:34:9f:
                    18:73:8f:07:c9:c0:d7:96:48:b8:16:34:3b:5a:82:
                    b2:7b:22:46:5c:4e:02:c1:10:40:38:32:e6:8b:d2:
                    e0:54:73:fc:9e:a6:47:c9:fe:19:8e:fb:f6:fe:0b:
                    05:46:59:b2:fc:c2:e5:01:5e:2d:f8:6e:b0:ca:0a:
                    c9:d3:26:f1:36:8d:86:90:ef:23:f9:d9:6e:1d:c0:
                    c4:cc:96:7a:af:5d:f5:26:fe:68:e1:5b:8b:73:42:
                    b0:0c:e5:85:cd:21:78:15:bc:08:47:2f:8f:8a:3c:
                    25:76:f8:88:60:cf:3d:f3:7e:37:d2:1c:6a:df:2a:
                    08:63:f1:99:cf:db:b1:2c:dc:52:43:49:67:6c:23:
                    2f:02:1f:25:1c:d5:c0:7e:c2:9a:bb:30:51:5e:38:
                    f6:71:ad:b6:06:fa:a3:d7:13:52:5f:01:fd:8e:d1:
                    b5:00:d6:78:82:d2:f6:6a:7e:3f:19:36:cc:cf:2a:
                    c5:a8:f1:98:d0:e5:9c:55:05:a6:a8:b4:02:7d:6e:
                    40:c6:6e:31:73:0f:75:1f:f3:38:c0:06:3c:b4:d4:
                    ad:30:ec:e1:8b:b3:94:d6:7b:a0:66:82:29:c3:21:
                    70:23:e7:de:6e:48:e7:fe:6b:c1:cb:3c:0b:ff:fd:
                    47:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:31:76:0A:CE:BA:08:BF:D5:16:81:07:58:ED:FF:B1:3E:E8:46:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/fed6d93f-9e64-3b05-92de-3bd2bbe5cd27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.crl

            X509v3 Authority Key Identifier:
                keyid:C4:97:9D:67:D0:B6:2B:EF:A3:AB:9E:1C:7A:30:B0:6D:1A:88:5D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa59::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:ad:91:49:76:4d:e1:1e:b6:80:50:f9:24:ab:25:5b:f6:1f:
         25:7a:b2:d9:28:d4:41:7e:42:75:4a:a3:e8:b0:77:0e:4f:23:
         8e:4f:04:14:68:bd:53:b0:95:90:0d:a7:72:78:59:14:ac:27:
         c7:d7:ed:74:c4:e2:ee:85:61:1d:d9:ed:3b:ba:a7:39:24:0d:
         a1:f8:0b:1a:9c:5c:d8:72:7d:3d:fe:5d:bf:ce:50:1c:05:61:
         65:8f:fe:2f:cf:a2:5a:44:eb:00:c6:ef:c7:3e:8a:02:27:85:
         7f:f4:bc:78:91:cd:72:e8:59:4b:69:24:4f:fd:24:8c:45:52:
         53:c7:74:34:c5:f9:93:11:01:41:3b:3b:10:bb:4d:e1:c0:a9:
         1a:68:65:84:5f:eb:ae:b8:2b:91:93:59:5d:80:f7:77:c2:9d:
         f8:3f:90:66:9e:4f:43:fd:e8:d1:47:76:2b:68:02:7e:75:ee:
         e1:25:dc:9c:c2:4e:ad:2d:f0:ac:85:58:1e:9f:9e:92:5b:5a:
         cb:e3:6a:4f:4c:52:c7:35:b3:3c:2a:04:02:7f:4a:85:d0:33:
         b4:06:aa:20:5a:b6:dd:c9:fc:13:72:74:51:c6:2c:57:88:f6:
         af:f1:6f:4c:e6:79:a1:f2:61:e6:d4:50:a0:2d:84:41:8b:c3:
         76:75:9b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:28:38 2026 by rpki-client