Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/efc746f0-f8d2-385b-85f0-01e0ba70dbbe.roa
File:                     efc746f0-f8d2-385b-85f0-01e0ba70dbbe.roa (raw, json)
Hash identifier:          /vk0m2l5HcmwLEZqNncNLjreCmRHoblgiN9vW2K/ZWI=
Subject key identifier:   43:EC:8E:03:9F:DD:E7:38:48:B4:A7:DC:96:EC:40:E7:B9:2A:34:A1
Certificate issuer:       /CN=a123a5f1-e9e7-4d53-b615-f8afb17b29c5
Certificate serial:       010D0C9F4328584DC29AF531163968D3572B0780
Authority key identifier: C9:6D:7C:45:E3:4D:69:A5:8D:F7:D2:D3:C2:BA:78:28:70:3C:4E:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/efc746f0-f8d2-385b-85f0-01e0ba70dbbe.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     401578
IP address blocks:        2602:f739::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:f5:31:16:39:68:d3:57:2b:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a123a5f1-e9e7-4d53-b615-f8afb17b29c5
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=d6b64aa3-b869-4ac1-b6b3-f852910e5846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:5b:fa:9d:c5:9c:77:05:57:14:39:75:7d:
                    02:60:95:fd:b1:8c:73:c0:53:b9:a7:12:5b:78:9e:
                    15:43:aa:15:81:af:ca:2d:d5:da:d0:7b:e5:43:5d:
                    3a:8a:59:25:6b:fb:3c:53:8d:4c:9e:26:63:c1:16:
                    a8:78:29:71:eb:f8:df:4e:8b:02:a5:31:85:b3:22:
                    70:69:9e:fd:61:c4:5c:36:6c:2b:ad:4f:8b:34:0f:
                    e8:b6:94:7c:07:ec:6f:58:8f:62:94:e5:65:f3:86:
                    c4:12:35:09:1c:6a:f3:e0:89:4c:5b:fd:53:3a:ad:
                    cf:4a:22:7c:5e:fd:3c:9d:7f:d1:27:0d:f3:13:1c:
                    d4:c9:15:e7:04:fe:b9:86:6f:bc:70:b0:4e:fd:01:
                    39:8c:66:a5:8e:d9:e8:68:0e:86:c9:12:78:92:71:
                    ee:b0:f7:b9:db:65:65:58:a3:e8:13:a7:89:dc:07:
                    e8:3b:6b:0a:6a:1b:08:5a:7b:0f:04:2b:cb:20:e9:
                    71:a3:aa:7c:3c:28:64:ae:87:7f:4d:a9:ff:c8:0d:
                    ce:6c:55:a6:e4:86:e7:ae:72:11:c8:e6:d3:a9:08:
                    1d:6a:3a:72:52:2a:ba:40:15:a9:bc:3d:5c:f3:6e:
                    a2:3d:11:c8:da:b7:3f:9d:42:f8:06:a9:b5:9c:67:
                    b1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EC:8E:03:9F:DD:E7:38:48:B4:A7:DC:96:EC:40:E7:B9:2A:34:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/efc746f0-f8d2-385b-85f0-01e0ba70dbbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.crl

            X509v3 Authority Key Identifier:
                keyid:C9:6D:7C:45:E3:4D:69:A5:8D:F7:D2:D3:C2:BA:78:28:70:3C:4E:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f739::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:16:4c:c0:95:2f:fe:ef:89:2b:58:7e:6a:a7:d8:a4:6b:9a:
         7d:6a:47:0c:ae:75:e9:51:f4:92:9b:4b:9d:f4:cb:54:2c:17:
         a2:ae:b8:77:01:ea:02:d1:fe:fb:0f:e8:31:6f:cb:e4:b1:c8:
         d9:00:dc:3a:75:72:6e:0c:be:40:3b:a9:e6:fe:ac:c7:6a:85:
         dd:35:c1:90:8e:fd:d4:85:c9:45:74:cc:fa:ae:ee:f6:34:10:
         41:ee:d7:15:2f:4c:e9:eb:13:b9:42:82:d3:0a:e0:1c:7b:19:
         3c:c7:c2:07:fd:07:22:00:2b:47:17:0a:22:f1:b0:a4:83:fe:
         e1:84:d7:3c:52:11:eb:ba:3b:69:b4:9c:49:ca:79:84:91:5e:
         f3:36:f6:db:c5:de:80:8a:cc:39:2f:00:bf:f3:71:84:a0:15:
         c5:09:30:1c:bb:96:fb:23:07:08:a8:77:b5:20:36:20:ee:27:
         a9:1f:79:1f:b0:cf:5f:38:57:44:b5:83:d9:c0:66:da:ae:a9:
         36:dd:57:df:c4:06:b9:a3:56:bc:70:5a:c9:42:15:1d:b2:1f:
         d0:ac:61:08:85:9d:59:2e:d2:56:4d:2f:c6:83:b0:77:01:18:
         69:0e:ca:86:59:03:55:1b:50:42:16:26:da:bb:27:12:ec:4b:
         5f:75:c5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:34:00 2026 by rpki-client