Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/1a6e9a2e-33db-3454-aed6-ff6f23be57e8.roa
File:                     1a6e9a2e-33db-3454-aed6-ff6f23be57e8.roa (raw, json)
Hash identifier:          sU3ZLtSd3L0QMjkSYpNnS97DORST83PiYjq8tSErkTM=
Subject key identifier:   7C:42:04:CF:5B:4B:22:03:4C:F6:12:5B:C6:BB:AE:9E:D9:76:5A:FE
Certificate issuer:       /CN=efb87759-36c4-4e5a-9c2b-34e00c0fbc30
Certificate serial:       010D0C9F4328584CCA41EF01CE44D6552EAB1900
Authority key identifier: 78:B3:DD:12:3A:8A:DC:D5:D0:BE:67:7F:27:F9:41:B9:1E:A1:86:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/1a6e9a2e-33db-3454-aed6-ff6f23be57e8.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     11832
IP address blocks:        2602:f6b1:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:ef:01:ce:44:d6:55:2e:ab:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efb87759-36c4-4e5a-9c2b-34e00c0fbc30
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=1e7b9f26-1164-4fef-ae7c-5524700b1074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6d:95:40:2d:3a:da:3b:61:cd:e1:83:3f:c3:
                    ad:7f:64:ca:e5:61:30:ad:43:d6:76:b4:93:d9:9d:
                    83:4f:4c:41:0b:47:98:1d:06:34:ab:84:bb:75:53:
                    bd:2f:95:13:23:76:82:ee:60:54:c9:87:ae:89:20:
                    d7:ca:ae:50:7a:13:e1:2b:8e:f4:00:79:6f:96:2d:
                    4a:17:60:5b:3d:83:5f:a2:39:78:03:6b:f5:db:b8:
                    8f:bb:bb:f2:48:7c:5e:ec:18:e9:e8:9d:be:49:e4:
                    bb:d7:96:75:f1:26:53:be:6f:df:bd:f5:0b:0b:7a:
                    21:b9:e0:5a:18:89:5d:91:05:d4:ba:a9:7f:a7:bb:
                    d1:ea:7a:e5:8f:c6:ea:7b:b4:bb:7c:2e:64:6b:21:
                    67:1a:f2:c5:70:29:2e:4b:78:6e:bf:59:6f:02:6a:
                    17:37:b0:83:22:69:db:bd:58:4b:5f:8f:8e:13:a1:
                    0b:e6:3a:e9:fe:26:cc:a8:82:2f:ae:c9:c9:15:db:
                    57:b8:6f:df:a2:95:03:29:e8:c9:d2:22:eb:a1:6a:
                    4b:8f:75:20:98:a3:32:4f:9d:c4:74:e9:7b:7c:f1:
                    79:e0:6d:47:2e:d7:0a:c0:84:19:38:ca:f2:60:24:
                    58:02:21:fd:39:be:e9:f4:02:45:a6:45:5e:ff:03:
                    e0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:42:04:CF:5B:4B:22:03:4C:F6:12:5B:C6:BB:AE:9E:D9:76:5A:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/1a6e9a2e-33db-3454-aed6-ff6f23be57e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.crl

            X509v3 Authority Key Identifier:
                keyid:78:B3:DD:12:3A:8A:DC:D5:D0:BE:67:7F:27:F9:41:B9:1E:A1:86:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6b1:a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:25:60:22:88:39:63:50:dc:ae:76:ea:d7:ad:c6:3b:e7:4f:
         84:d4:8e:0d:e1:e5:cc:c4:a2:6c:53:1d:b1:2e:23:e7:23:be:
         47:6a:77:69:cb:84:64:f8:60:80:eb:1b:ac:4d:9f:3b:12:8d:
         0e:53:47:8d:de:d2:91:3b:ba:b3:90:f6:fe:3d:f2:d6:bc:bf:
         f8:04:fe:58:16:23:2d:ab:1d:e4:b2:91:f8:ef:18:ad:31:fb:
         f9:c9:07:9a:91:fe:fe:ff:d0:df:74:5a:57:c6:7f:e3:f6:a4:
         68:85:f8:88:c7:1f:e7:39:25:eb:f4:7c:41:1a:10:f2:e7:01:
         43:b6:9f:68:93:7b:53:14:a7:57:a2:bb:cf:51:36:5d:91:f5:
         d3:89:ef:b6:40:ee:1d:03:9d:6a:81:90:c0:6c:65:e0:06:78:
         89:aa:e0:94:cb:6b:1b:34:84:6c:4d:c0:1b:57:44:a7:c6:cb:
         9b:b9:f6:b1:66:3f:80:3f:2c:40:ec:a3:31:59:9b:6e:ed:f2:
         4a:b9:26:2f:90:a1:fe:49:34:38:4a:bb:59:db:b7:f4:44:22:
         7e:f1:5a:32:0e:67:e7:df:62:cd:4a:58:a3:0a:e3:55:8c:5e:
         f8:26:b5:5e:a4:55:99:2f:f0:94:9d:a2:21:c2:fd:66:25:65:
         67:06:89:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:07:47 2026 by rpki-client