Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/2a3a9889-4ec0-3e8c-ab6a-501a0b672d83.roa
File:                     2a3a9889-4ec0-3e8c-ab6a-501a0b672d83.roa (raw, json)
Hash identifier:          5oMklEYTX31jnfHCo1N3YXJHS/btgUIJ5q/SGkfmk+A=
Subject key identifier:   88:F1:4E:92:B5:76:E5:0C:CF:EB:38:86:B9:85:0B:DD:7A:B0:6C:C2
Certificate issuer:       /CN=efb87759-36c4-4e5a-9c2b-34e00c0fbc30
Certificate serial:       010D0C9F4328584E8C8A613106F5803DB9128040
Authority key identifier: 78:B3:DD:12:3A:8A:DC:D5:D0:BE:67:7F:27:F9:41:B9:1E:A1:86:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/2a3a9889-4ec0-3e8c-ab6a-501a0b672d83.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     11832
IP address blocks:        2602:f6b1:1::/48 maxlen: 48
                          2602:f6b1:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:61:31:06:f5:80:3d:b9:12:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efb87759-36c4-4e5a-9c2b-34e00c0fbc30
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=65310bc3-ffd5-4fcd-9785-d31177a13d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0a:1e:d3:2c:c6:e1:82:6f:b1:6a:42:09:e9:
                    3f:2e:ec:36:16:69:f6:e3:94:b8:73:d7:cf:49:92:
                    18:6d:ee:7c:5a:66:a9:ac:c5:20:53:e2:52:2e:64:
                    a0:1d:e3:2a:97:49:03:56:f5:fc:f9:f5:53:e1:26:
                    be:ce:99:bd:34:b3:18:59:26:cf:16:c9:81:eb:88:
                    aa:47:74:64:bb:fa:6b:2b:4b:36:12:ef:5c:22:de:
                    28:8c:f8:f7:3b:28:d8:17:a8:f4:f3:67:50:38:70:
                    6e:1e:13:3d:d2:a0:fc:73:4b:93:93:db:22:c3:08:
                    de:6b:fd:8d:c7:fa:09:35:65:a7:12:dd:e3:a1:3e:
                    b9:f6:30:b0:5c:d0:62:4b:7e:95:13:27:91:51:9f:
                    3a:62:10:27:5d:93:aa:42:6e:99:a7:81:ce:bf:e1:
                    93:97:0b:03:86:da:00:9c:bf:51:66:53:1f:60:a3:
                    83:78:03:d4:0e:19:5f:27:21:73:2c:a5:ef:7d:22:
                    02:25:7d:fc:33:ed:17:cd:0a:2e:45:ff:2c:55:5d:
                    4c:e7:f2:b0:29:a6:f2:b3:75:db:5f:a1:33:11:3b:
                    ab:e8:df:b6:b0:4a:b2:b9:8b:0d:8f:cc:b6:28:6f:
                    d8:65:95:14:10:2a:d3:d0:43:72:eb:7e:e5:e6:05:
                    b0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F1:4E:92:B5:76:E5:0C:CF:EB:38:86:B9:85:0B:DD:7A:B0:6C:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/2a3a9889-4ec0-3e8c-ab6a-501a0b672d83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.crl

            X509v3 Authority Key Identifier:
                keyid:78:B3:DD:12:3A:8A:DC:D5:D0:BE:67:7F:27:F9:41:B9:1E:A1:86:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6b1:1::-2602:f6b1:2:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:c8:b4:ef:2f:ec:aa:a3:62:e8:66:77:f6:06:e8:a0:11:f2:
         62:33:7c:ac:fc:76:d8:2b:a3:44:59:1a:a1:4f:4d:9d:8e:c8:
         ff:6b:f2:a9:35:b3:b9:67:b7:c1:96:dd:b9:6f:7e:64:7c:47:
         7f:42:d8:e9:8b:d1:99:f5:eb:ce:58:7c:59:b8:1a:be:ee:da:
         44:7e:07:37:36:cf:d3:fb:bb:ad:e8:66:06:20:41:17:ad:5a:
         bc:59:dc:70:27:c2:5b:6b:c3:ef:c6:bc:21:f9:14:6b:36:74:
         96:23:36:04:c3:19:b0:d8:af:e6:b2:97:ee:1c:2f:0d:cf:22:
         c8:09:5a:4b:3d:3c:10:fe:f3:00:c8:b1:77:cd:a9:7b:65:c4:
         54:89:0b:b5:da:0f:c2:7d:eb:72:8e:9a:90:33:1b:46:34:9b:
         15:71:e8:27:c7:d6:cd:79:81:f3:73:97:74:30:80:c0:96:66:
         df:92:c3:47:8c:43:73:7a:db:71:99:8d:24:f8:6e:19:32:34:
         db:02:ca:f9:8f:43:2d:dc:73:7a:6a:c2:49:6d:3a:4c:ee:cb:
         7b:20:82:ad:04:d0:6c:69:3a:07:50:c6:f7:bb:40:77:c3:13:
         8a:f8:ad:25:e3:4d:c4:15:fd:3f:9a:aa:df:20:6b:02:1e:bb:
         49:51:3c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:15:20 2026 by rpki-client