Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/2bd6cacb-122a-3575-98c7-5fafe2268e65.roa
File:                     2bd6cacb-122a-3575-98c7-5fafe2268e65.roa (raw, json)
Hash identifier:          VGcgxZsDKPuVfp6J4B1yQAHdZN6mLTAWV/YJ8ubfEqI=
Subject key identifier:   33:2B:4B:1B:D2:1E:8C:55:3B:39:1D:73:E1:14:BE:CF:54:A1:4F:04
Certificate issuer:       /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial:       010D0C9F4328584E5FDF7671F4D5A4E862DD10A0
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/2bd6cacb-122a-3575-98c7-5fafe2268e65.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     62787
IP address blocks:        2602:f6d0:fe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:76:71:f4:d5:a4:e8:62:dd:10:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=994c09dd-8d78-4f3a-847f-7eb0cef4d9b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:27:94:a2:2a:6b:d3:29:ed:1a:e4:d6:10:35:
                    cc:a9:83:d4:96:00:04:8e:3a:74:19:48:0b:97:46:
                    b0:58:9a:0b:b5:28:be:49:8a:2f:18:7a:1b:ca:77:
                    6f:97:ea:9d:2d:d9:de:3d:5c:f2:6f:de:89:bd:a6:
                    96:ea:41:15:71:74:82:b4:75:85:57:30:62:c7:a5:
                    63:21:f4:20:bf:a8:a4:1f:fc:49:b6:06:33:22:d1:
                    d1:bb:f9:cb:d8:73:f6:7f:8c:9a:6d:49:54:fb:95:
                    a0:a9:c3:34:e6:d2:42:f7:cb:1b:09:70:33:67:d3:
                    2e:3b:4a:58:59:ca:7c:02:72:ae:75:82:21:ec:47:
                    70:19:84:4f:ff:42:ff:92:a9:3c:6c:f4:49:c7:98:
                    23:fb:96:cb:2b:13:d6:f3:98:f2:ac:6d:d4:ee:fa:
                    a6:3a:6a:12:a5:65:f2:37:ac:c6:28:63:b7:b3:71:
                    bc:60:d9:ee:e9:90:c0:9f:33:e1:9a:9a:3c:9b:6d:
                    6c:b6:35:f5:e7:9e:7b:8e:c2:2d:63:bd:d4:6e:f6:
                    77:36:6e:94:97:5e:3d:31:40:f7:b8:9d:3e:b1:67:
                    fd:78:84:00:97:27:d3:77:f6:1a:e3:e3:ca:35:29:
                    35:ea:f9:3a:e2:ea:9a:3c:93:8e:20:db:5e:26:c9:
                    b8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2B:4B:1B:D2:1E:8C:55:3B:39:1D:73:E1:14:BE:CF:54:A1:4F:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/2bd6cacb-122a-3575-98c7-5fafe2268e65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl

            X509v3 Authority Key Identifier:
                keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6d0:fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:22:fb:e5:43:93:50:83:2a:45:66:ff:8c:92:db:7c:34:1d:
         9f:4c:cf:08:f9:a8:19:c0:40:72:92:a7:89:de:de:e6:65:24:
         72:ba:47:66:7d:1a:96:0d:83:36:32:55:75:32:36:05:9a:99:
         a8:15:49:20:ba:ae:21:22:2f:3f:16:9b:ce:a3:60:48:97:58:
         6d:eb:bb:9f:d9:52:cb:34:7a:39:ae:60:e4:27:64:c0:37:c4:
         88:7c:f1:59:31:e4:f3:91:f5:72:4c:de:22:f4:ea:d4:f4:b0:
         ca:b8:a4:ca:dc:51:16:22:d1:d7:d7:60:53:58:37:1b:14:4f:
         e8:e3:1a:98:a2:e2:5a:06:a3:20:05:a2:d9:74:17:32:af:3f:
         40:d1:70:1a:0f:60:c9:9e:cb:2d:18:ef:40:50:33:ea:fb:11:
         d1:0a:f5:55:34:59:7b:16:3c:d8:29:4e:54:e1:0c:4b:24:14:
         8f:85:5b:f2:c5:35:ed:bd:8a:cc:4f:5a:5d:f6:4e:67:d9:59:
         d8:e4:04:df:01:5c:2b:10:e2:0f:90:f1:b4:d1:1e:d5:da:b1:
         12:c8:5f:43:fb:43:83:27:d3:6e:5e:fa:7f:ec:31:41:f5:5a:
         47:d1:fe:78:11:04:f8:87:aa:46:40:f0:aa:20:85:c4:e6:9c:
         20:1a:d7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:51:19 2026 by rpki-client