Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/702dc008-57a5-3934-9f33-4b1e4ad6d563.roa
File:                     702dc008-57a5-3934-9f33-4b1e4ad6d563.roa (raw, json)
Hash identifier:          uPj/Fsm+SC4jJCF8otTDXNSdCng5ECErgqgNJXLbUUY=
Subject key identifier:   DE:D7:E2:27:06:EC:81:DB:FF:3E:89:C2:E8:EC:91:F3:16:D2:C1:35
Certificate issuer:       /CN=53f3af06-68ea-4591-9526-0c1fce331651
Certificate serial:       010D0C9F4328584DD35B11F0698CC3E617F89A00
Authority key identifier: 8A:FE:A7:10:44:F5:A9:14:8D:C7:0F:AC:74:09:68:60:5F:0D:7F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/702dc008-57a5-3934-9f33-4b1e4ad6d563.roa
Signing time:             Thu 14 May 2026 01:00:25 +0000
ROA not before:           Thu 14 May 2026 01:00:25 +0000
ROA not after:            Wed 12 Aug 2026 01:00:25 +0000
asID:                     395089
IP address blocks:        2602:fd53:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/53f3af06-68ea-4591-9526-0c1fce331651.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/53f3af06-68ea-4591-9526-0c1fce331651.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d3:5b:11:f0:69:8c:c3:e6:17:f8:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f3af06-68ea-4591-9526-0c1fce331651
        Validity
            Not Before: May 14 01:00:25 2026 GMT
            Not After : Aug 12 01:00:25 2026 GMT
        Subject: CN=2295e900-15cb-4945-b546-dd49a256d326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fc:b7:8c:51:fc:35:33:56:52:ab:2f:be:4c:
                    3b:70:b0:1a:cc:17:87:c0:0f:f4:f5:15:c1:c7:87:
                    ee:8d:de:8d:8e:46:ea:92:59:a9:80:b9:28:85:01:
                    84:a3:89:20:d0:1b:44:e0:e7:89:87:80:4b:59:27:
                    26:22:6e:a1:f3:a8:e9:f4:63:9c:36:66:0c:9b:15:
                    cc:3a:ec:75:a7:f0:2b:70:d4:26:cb:ba:70:83:1a:
                    84:aa:b3:17:3d:70:4d:f1:02:b6:fa:00:68:dd:2b:
                    8c:14:25:65:e3:cc:19:1a:df:cf:14:9d:30:bf:03:
                    36:b0:5a:e7:5a:6e:22:ed:ab:11:ae:1e:d3:a0:d9:
                    dd:f6:8d:d3:ef:ac:3a:12:ff:45:f6:d8:26:51:da:
                    f4:c7:a0:7f:5e:78:77:bb:a6:37:af:55:63:45:9b:
                    85:c3:27:40:55:87:d5:a6:28:a7:01:48:6c:ed:ec:
                    4f:7d:ec:8f:fd:fc:a7:b5:ee:df:97:29:92:58:b8:
                    20:8f:7c:03:02:37:10:b6:8a:18:c1:19:a0:7a:b3:
                    f0:f3:ee:61:44:f4:d1:0d:c9:7a:0d:c4:02:48:2c:
                    1d:84:e8:0e:0f:bd:89:7b:34:68:97:36:61:f0:d0:
                    68:70:25:e2:e4:44:fe:26:cb:02:f4:e6:06:d9:15:
                    3b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D7:E2:27:06:EC:81:DB:FF:3E:89:C2:E8:EC:91:F3:16:D2:C1:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/702dc008-57a5-3934-9f33-4b1e4ad6d563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/53f3af06-68ea-4591-9526-0c1fce331651.crl

            X509v3 Authority Key Identifier:
                keyid:8A:FE:A7:10:44:F5:A9:14:8D:C7:0F:AC:74:09:68:60:5F:0D:7F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd53:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:37:3b:7e:f0:39:b8:6a:98:7e:23:3f:4a:07:50:cf:12:73:
         bd:41:99:b6:ff:66:dd:b5:68:3c:29:00:ea:1b:c4:79:c9:fb:
         7a:21:f8:d5:6d:d1:70:c9:4a:ad:f8:36:48:4c:3d:46:69:16:
         aa:32:4e:9d:6f:68:9f:5d:4a:6c:29:5f:1c:2f:1e:d3:88:4a:
         c6:a5:9b:64:1b:62:f4:71:36:b6:a4:55:96:d6:f6:24:1a:12:
         5e:1c:11:37:0a:00:e6:52:f8:27:94:42:63:48:0a:5e:6a:fa:
         64:75:78:93:f9:16:57:47:b8:2c:bb:52:ec:24:c6:0d:d0:15:
         58:d0:7e:ea:87:63:05:11:27:6c:09:6f:77:6c:d0:98:ba:0b:
         95:63:3f:a8:eb:d6:58:cc:fa:10:ac:00:c1:10:f5:de:9f:9c:
         44:ba:fd:a3:0d:5e:eb:79:75:57:05:b5:bc:be:12:f7:91:c1:
         f8:08:e4:ef:2d:5c:eb:77:8a:56:fe:5c:27:e4:6a:7c:88:82:
         3f:f3:e6:8a:c8:ed:5a:44:7f:28:d6:04:99:7a:61:f6:17:d0:
         90:5a:9e:56:5c:2a:99:65:14:64:0f:0b:a5:dc:25:5d:61:eb:
         b7:4b:11:96:cc:2b:10:d0:c5:bb:76:09:54:ba:75:78:e0:bd:
         8d:c5:bf:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 04:28:56 2026 by rpki-client