Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/2a3a9889-4ec0-3e8c-ab6a-501a0b672d83.roa
File:                     2a3a9889-4ec0-3e8c-ab6a-501a0b672d83.roa (raw, json)
Hash identifier:          Lng4xh+iE7mA997INxI8jf0ncoI0/m0jqlWG9M+1Xmk=
Subject key identifier:   DC:73:E1:CD:09:93:CF:17:29:05:9D:A7:FF:2C:A7:C9:5A:4D:6E:4E
Certificate issuer:       /CN=efb87759-36c4-4e5a-9c2b-34e00c0fbc30
Certificate serial:       010D0C9F4328584F2EED2945F4635B4275FC4D80
Authority key identifier: 78:B3:DD:12:3A:8A:DC:D5:D0:BE:67:7F:27:F9:41:B9:1E:A1:86:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/2a3a9889-4ec0-3e8c-ab6a-501a0b672d83.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     11832
IP address blocks:        2602:f6b1:1::/48 maxlen: 48
                          2602:f6b1:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:29:45:f4:63:5b:42:75:fc:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efb87759-36c4-4e5a-9c2b-34e00c0fbc30
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=9c474511-f6cd-475b-8a56-f7c860ad980f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:49:99:68:99:19:6d:06:6d:df:42:58:7b:12:
                    9d:c4:ae:94:0a:cc:3c:f4:bc:89:3b:e2:f2:fe:b6:
                    31:4e:f6:8d:cd:21:f4:b8:cb:7a:56:c5:3c:bc:60:
                    c9:d8:96:50:29:82:f3:7e:88:49:f6:15:7f:83:9c:
                    9f:73:5e:49:a1:0d:4e:64:32:4d:e0:a9:2d:65:d7:
                    41:99:1c:31:9b:36:fc:3a:c9:47:cb:34:b4:dc:fa:
                    51:95:67:45:d8:2e:c0:8b:d4:44:2a:e0:e6:4a:74:
                    13:09:d4:f0:69:eb:fe:af:52:ec:d9:48:e6:7c:3a:
                    5c:26:02:60:c1:4a:de:06:b5:d8:ea:b2:e5:5b:33:
                    10:70:4e:08:4d:f3:8c:be:3f:4c:64:4f:e7:57:7c:
                    5e:78:98:05:e1:57:bb:88:4f:08:ac:1c:d5:a4:67:
                    3d:93:4f:9f:80:9b:1c:89:4a:54:3f:0b:f7:77:85:
                    e9:61:6d:3e:c8:ea:55:6b:53:3c:b8:3b:fb:87:53:
                    34:f7:7a:34:cc:12:bf:32:ed:29:d9:c5:4f:fd:1f:
                    75:79:6b:be:ce:23:66:bb:5e:fe:18:d4:01:2c:1a:
                    8f:29:b1:88:e8:52:9e:25:01:1a:9a:9d:80:bd:7b:
                    72:4b:22:66:db:d0:c5:84:4f:96:40:d8:3f:78:35:
                    d1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:73:E1:CD:09:93:CF:17:29:05:9D:A7:FF:2C:A7:C9:5A:4D:6E:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/2a3a9889-4ec0-3e8c-ab6a-501a0b672d83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.crl

            X509v3 Authority Key Identifier:
                keyid:78:B3:DD:12:3A:8A:DC:D5:D0:BE:67:7F:27:F9:41:B9:1E:A1:86:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6b1:1::-2602:f6b1:2:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:56:22:79:21:46:0e:f5:ac:1f:14:9b:21:ad:ae:af:b1:e5:
         5e:ae:e0:02:39:9f:4f:e9:5e:b9:30:09:d6:d5:19:06:e8:09:
         d7:4d:7d:d7:25:53:60:50:77:37:6f:d6:b2:cf:29:2b:d6:5b:
         2e:cf:17:75:c3:87:df:df:92:f6:61:f0:ae:fb:57:f1:a2:f1:
         a0:6e:71:29:f1:68:6c:9e:62:5c:59:7f:e8:aa:13:ab:9f:1b:
         5d:30:b1:62:8e:c7:db:80:16:dc:e2:78:4e:a6:15:8a:f1:c1:
         64:dd:2e:fb:66:dc:e5:86:81:7d:e2:02:60:19:c7:2e:8c:cf:
         a3:de:a4:17:1e:b8:1f:dc:22:91:cd:e5:b9:be:62:ba:de:79:
         a3:a7:7a:15:3b:2c:3f:07:59:c0:de:90:9b:d9:7a:f2:30:60:
         22:95:a4:25:ec:84:c8:7b:4c:b4:c2:5d:17:52:e9:03:fb:11:
         31:12:9f:f1:e6:39:41:dd:1c:c8:9d:cf:3e:0c:2a:7b:f7:0b:
         66:e7:fe:4d:9e:9b:5d:fb:1e:e9:88:cf:52:a8:7a:4e:91:f6:
         07:9f:04:6b:a4:bf:e4:f9:c0:46:80:ef:4c:9a:7c:6c:c3:bd:
         d8:73:1d:ab:66:cb:e8:7a:21:0e:f0:28:a2:f5:33:34:7c:f0:
         80:fb:95:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:34:50 2026 by rpki-client