Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/2a3a9889-4ec0-3e8c-ab6a-501a0b672d83.roa
File:                     2a3a9889-4ec0-3e8c-ab6a-501a0b672d83.roa (raw, json)
Hash identifier:          iXnb1JaTfX8uq10zDql152wDfAV9EeOTeUhkb7344o4=
Subject key identifier:   4A:7C:A0:71:67:13:9A:AC:50:AF:63:CB:48:76:A8:10:77:F1:4E:D7
Certificate issuer:       /CN=efb87759-36c4-4e5a-9c2b-34e00c0fbc30
Certificate serial:       010D0C9F4328584DAC459469FF922C5DE86DFAB0
Authority key identifier: 78:B3:DD:12:3A:8A:DC:D5:D0:BE:67:7F:27:F9:41:B9:1E:A1:86:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/2a3a9889-4ec0-3e8c-ab6a-501a0b672d83.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     11832
IP address blocks:        2602:f6b1:1::/48 maxlen: 48
                          2602:f6b1:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:94:69:ff:92:2c:5d:e8:6d:fa:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efb87759-36c4-4e5a-9c2b-34e00c0fbc30
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=7157d6a6-bba5-4fa5-ac33-6eebae9f9190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:43:f5:5e:00:61:e0:9c:0b:1d:23:8d:4c:4f:
                    89:c8:26:a8:79:48:ac:d1:af:26:7e:2a:71:1c:79:
                    44:6e:35:e4:20:44:d7:9a:6c:a4:3b:7d:28:1b:9b:
                    13:21:22:6f:16:c3:1c:c3:3c:bf:cb:fa:ca:2d:d1:
                    e9:18:49:84:06:ee:a5:32:c3:ad:c6:62:4c:42:38:
                    97:5b:28:c9:c4:bb:39:06:0f:38:43:d5:6c:fa:9b:
                    e8:e0:db:46:70:dd:59:a4:bd:df:a5:2f:db:8f:6e:
                    2e:22:f5:d2:cf:dd:10:4f:6e:67:9e:2e:c3:8e:03:
                    5f:3f:5a:ad:68:67:49:7c:4e:59:46:1a:f0:ad:26:
                    4c:c5:8a:f4:15:da:d6:b4:c1:97:1a:0b:aa:a2:64:
                    4b:a9:62:09:01:48:7e:e1:d4:5a:54:83:04:b0:6b:
                    92:c6:dd:e4:17:99:ae:4f:03:26:e6:90:cd:df:db:
                    b4:c5:1f:6e:77:15:0e:5a:76:67:3d:d6:5b:cd:27:
                    04:ae:26:86:90:fe:83:4f:7d:21:da:df:2e:78:ae:
                    93:c5:ef:71:65:8b:ad:7e:46:a7:78:1c:94:3d:3e:
                    e4:98:b1:12:04:be:9a:df:f3:40:e7:ed:a3:1e:f9:
                    c4:6c:bc:a9:67:2e:f2:f7:6c:b9:83:39:a2:ad:17:
                    ca:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7C:A0:71:67:13:9A:AC:50:AF:63:CB:48:76:A8:10:77:F1:4E:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/2a3a9889-4ec0-3e8c-ab6a-501a0b672d83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.crl

            X509v3 Authority Key Identifier:
                keyid:78:B3:DD:12:3A:8A:DC:D5:D0:BE:67:7F:27:F9:41:B9:1E:A1:86:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6b1:1::-2602:f6b1:2:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:76:a8:94:2f:3b:6f:f6:50:ed:45:4d:e1:89:ca:42:f6:cd:
         e5:97:9a:2d:d1:6d:41:67:27:3b:04:fb:be:65:3e:60:03:c4:
         96:77:e9:3a:c3:3f:30:f7:ab:86:42:df:8a:e4:54:b6:a9:24:
         97:ef:1c:22:64:6c:4b:d2:6a:10:76:04:05:88:59:29:94:7f:
         ce:81:34:2f:a5:28:4d:a0:af:32:b0:ab:ec:e4:17:3e:77:24:
         87:cb:e3:94:01:59:8d:db:c1:06:42:4f:6a:61:95:4c:fb:bb:
         b5:f2:f5:e7:5e:97:5c:26:66:9e:63:b4:ec:13:21:54:c6:2c:
         3b:ba:72:2e:ed:bd:aa:57:a6:f7:40:47:94:ec:1d:45:83:e1:
         7e:1c:1f:e9:76:58:81:d8:a4:1b:7e:d5:3d:d4:e4:5f:9b:f6:
         02:a9:cc:fb:97:1c:42:de:24:73:c8:00:31:5d:04:57:3c:57:
         95:8e:47:15:58:77:33:3d:12:2f:c1:be:93:dd:d2:8c:b1:7f:
         8a:8f:5b:75:c5:9f:48:e9:df:ec:f6:e6:91:ae:0f:74:e0:e3:
         81:31:95:3c:f3:2f:72:9b:e2:77:c0:fe:29:1f:53:ff:e6:10:
         2d:3c:3d:bb:a1:33:fe:ef:6e:43:f7:6f:0d:e2:07:f5:f3:d9:
         6d:b8:7f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:39:27 2026 by rpki-client