Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/53cc85f2-f6cc-31ad-8f29-1c1c00f5efd3.roa
File:                     53cc85f2-f6cc-31ad-8f29-1c1c00f5efd3.roa (raw, json)
Hash identifier:          WZgOavbctVoYMxe/Z5ZvI/VqMYyaH+FxaCpQ76c8rMM=
Subject key identifier:   EF:DA:49:BA:95:21:14:D0:90:53:2C:5F:67:F9:28:71:45:B7:E2:FE
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584B477C680090DC6F862FB52F00
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/53cc85f2-f6cc-31ad-8f29-1c1c00f5efd3.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     40676
IP address blocks:        2602:fd92:cc0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:68:00:90:dc:6f:86:2f:b5:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=57bac310-f488-4373-acce-b84695ff073e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6f:78:32:2a:b7:3d:19:11:e7:b8:4c:f2:91:
                    03:47:5f:82:81:1f:01:c7:3f:14:4f:39:67:18:74:
                    6e:74:9b:ab:50:40:05:e6:0b:3a:d2:b9:48:6d:62:
                    ab:ae:f0:70:14:9a:2c:b1:2c:59:15:fb:dd:a1:97:
                    09:f1:25:c4:3e:0c:76:af:e5:79:f2:c6:51:51:9a:
                    3e:26:d4:37:4b:4a:fc:57:34:85:fc:d5:35:0d:1c:
                    ac:e1:54:73:37:c0:76:57:a8:37:58:29:c9:79:e1:
                    69:00:de:22:6d:14:3a:5a:ae:57:88:d0:21:3c:af:
                    96:99:33:4f:8f:73:d1:e0:10:fe:bb:cf:33:0c:c0:
                    c0:38:85:fc:00:08:f4:aa:90:98:a6:f4:a9:61:a0:
                    9a:c3:04:d5:d3:ad:44:91:f0:5c:11:72:f1:fe:b8:
                    0b:5d:3e:d7:57:de:1f:26:76:44:73:ee:a2:ac:ea:
                    7d:15:c3:3f:4a:8f:a9:cd:99:ad:ff:33:8d:a9:72:
                    c2:4c:54:47:e1:19:1c:b1:f1:f2:f7:81:3c:f1:79:
                    0f:40:e3:61:a9:81:85:6d:c2:fa:eb:6f:8e:d8:a2:
                    f9:3b:2c:7e:fe:51:1d:34:c1:34:10:88:e0:d1:0c:
                    20:45:96:26:1b:4a:83:4a:85:cf:31:68:81:56:fa:
                    19:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DA:49:BA:95:21:14:D0:90:53:2C:5F:67:F9:28:71:45:B7:E2:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/53cc85f2-f6cc-31ad-8f29-1c1c00f5efd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:cc0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:a5:67:a3:6d:c0:0f:46:f7:a3:2e:a9:63:83:b2:a0:a4:4b:
         a5:e8:69:d2:8d:9a:71:7b:b1:7b:e4:ec:9d:a7:15:6d:17:c0:
         57:3d:69:4e:d5:87:da:a2:99:3e:34:8e:eb:98:4e:b5:e4:ea:
         af:52:be:1b:31:d9:91:f1:ab:51:df:8e:0d:2a:3b:9c:e4:cc:
         42:c1:1c:3c:7a:8f:3e:0a:1c:8a:30:7d:01:7c:ed:1e:7f:64:
         86:09:a2:ef:89:a5:10:6a:11:00:92:2d:40:32:1e:8d:da:a7:
         50:c8:0c:d4:88:be:c7:3c:4a:21:69:b1:b9:71:f8:ab:ed:6a:
         57:3f:ea:ab:bd:02:61:e0:21:68:86:7c:25:80:b4:69:de:ce:
         41:be:30:39:c9:aa:d2:b4:75:08:d1:e3:33:75:eb:6d:81:f9:
         8a:a1:5e:e4:60:e1:a4:40:8e:7c:ef:a9:77:aa:c3:15:f6:c6:
         e8:b9:1f:6f:2d:4f:52:2c:b5:b2:dc:cf:ac:fe:87:58:94:05:
         ab:1c:bf:57:5a:81:1f:70:46:25:1f:14:63:42:c2:e8:17:b0:
         da:e9:cf:2d:b0:ec:e9:63:45:48:7e:16:5f:88:0d:0b:01:6b:
         cb:53:2d:32:27:65:69:66:4f:5d:4f:c5:e8:72:11:75:dc:35:
         94:0e:32:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 23:50:36 2025 by rpki-client