Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/efa9cbc1-8733-321d-a16e-ac2e93ca5e28.roa
File:                     efa9cbc1-8733-321d-a16e-ac2e93ca5e28.roa (raw, json)
Hash identifier:          7C7iFf1wT9+772HMEl1l0ZvcCO13ysACxXQ3e5idX0A=
Subject key identifier:   9D:E0:C8:F8:73:3D:46:1C:DC:E1:CF:53:ED:08:B9:67:3E:C7:2E:02
Certificate issuer:       /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial:       010D0C9F4328584B6631FEB2C08B4F190F7ABD80
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/efa9cbc1-8733-321d-a16e-ac2e93ca5e28.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     44324
IP address blocks:        2602:f9f6::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:fe:b2:c0:8b:4f:19:0f:7a:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=21bf35a3-5fd7-4890-aaf4-e070357e03ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:13:3f:ec:8a:cf:f0:9d:63:65:ab:03:6f:84:
                    3c:80:0e:f3:76:ab:08:b7:78:5d:e1:6c:27:85:03:
                    50:95:8a:ec:83:29:09:5b:1c:f3:c3:77:40:5d:64:
                    fb:3c:95:4d:0d:7f:32:de:ce:d0:00:c1:e0:00:9a:
                    29:4c:e7:6f:b5:37:f7:c7:ee:2b:d2:75:b8:50:b3:
                    1f:f7:04:4c:28:34:aa:07:c5:e3:01:f9:dd:f4:a2:
                    cf:03:1a:36:18:5c:04:ec:d2:21:21:d3:e2:03:af:
                    55:ec:f9:10:06:ad:1e:56:f9:e6:45:85:29:f1:1e:
                    25:bf:0a:8b:f6:48:a5:db:9a:ae:6b:ad:78:fa:be:
                    cc:b7:32:c9:a4:f2:b5:39:64:85:3b:bb:7a:49:ac:
                    ed:c5:ad:59:7f:d4:bf:9c:31:22:ee:26:13:83:c0:
                    ba:1a:78:df:53:78:7e:28:3f:fe:17:af:2e:be:d2:
                    6b:84:af:8f:5c:a0:27:85:0e:b3:f6:6c:4d:99:5c:
                    86:c6:e2:02:3c:d0:ef:1d:14:b6:1a:12:26:ae:65:
                    47:36:f3:ad:e8:04:c2:b3:6c:44:22:0c:5a:b0:ad:
                    2f:6a:1b:df:b0:b0:86:7f:2e:2b:39:3a:07:b8:b2:
                    26:e6:c0:9e:eb:dc:6f:09:38:7e:ba:cf:90:9c:d6:
                    32:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E0:C8:F8:73:3D:46:1C:DC:E1:CF:53:ED:08:B9:67:3E:C7:2E:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/efa9cbc1-8733-321d-a16e-ac2e93ca5e28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f6::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:23:7f:a8:17:ae:d9:c1:77:94:52:90:22:28:c8:00:cd:84:
         bf:27:b2:67:0e:36:c6:d1:b8:9c:bf:0c:a6:8e:c3:24:4e:0b:
         38:cf:a7:83:ab:d0:cb:80:00:d6:bd:5d:a6:38:f0:6e:ce:b9:
         f7:1c:73:2c:7c:07:93:e7:6e:5f:40:6c:e0:22:2c:9b:ba:cf:
         9b:90:a0:90:51:8e:71:d6:6d:b1:a8:d8:30:b5:f4:07:99:1e:
         6e:6d:16:1b:61:d5:7a:bf:1e:13:7f:0f:c0:54:b1:6f:dd:bf:
         6b:d5:c1:55:79:04:19:e8:15:b6:67:f8:5e:35:8b:88:ca:e4:
         2b:9b:06:bc:f2:5d:fc:ba:fb:b2:a0:84:d8:91:f6:af:28:db:
         c1:7a:01:41:50:23:cc:6c:4e:63:0c:cf:c2:15:da:39:19:ce:
         4b:c3:b9:49:35:b8:74:1b:a2:3e:77:27:40:bc:93:b0:a9:ad:
         4c:4d:34:7c:d5:b4:5b:1d:40:cc:47:2b:f1:9a:e2:3c:50:98:
         1c:c6:5c:7e:e2:57:6b:6e:26:5a:bf:6f:70:81:aa:9d:00:cd:
         47:c5:21:64:4d:0a:5e:ba:e2:fb:dd:4d:79:e5:47:fd:92:ed:
         bb:c9:91:d1:0f:52:52:c4:6b:34:ac:a5:de:ff:2b:b6:fa:a6:
         99:1a:8b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:36:38 2025 by rpki-client