Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/4874dad1-e648-3185-8551-688e5cd436ca.roa
File:                     4874dad1-e648-3185-8551-688e5cd436ca.roa (raw, json)
Hash identifier:          BrYRm4Fvwi/qLukx0WNAVP4wAX1pJ5nRqo0rAzezxOk=
Subject key identifier:   48:5E:21:A2:43:00:38:C2:62:6F:EC:A2:C9:85:B9:2E:B5:42:3C:D9
Certificate issuer:       /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial:       010D0C9F4328584E6144A5788D052B99075E5580
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/4874dad1-e648-3185-8551-688e5cd436ca.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     62787
IP address blocks:        2602:f6d0:ed::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:a5:78:8d:05:2b:99:07:5e:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=870cf9e8-a086-41c7-82c1-2bf4d6603ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ff:b8:2d:b4:02:98:fa:49:cd:87:35:c7:f7:
                    28:45:f6:f8:1b:e2:5e:1b:59:70:13:08:f8:19:23:
                    df:d5:4a:70:a2:ea:3a:3c:96:20:59:53:a0:7e:ea:
                    f9:d0:35:08:15:ac:91:1e:bc:b3:5f:4c:2f:b2:6c:
                    c4:cd:65:40:56:99:0a:d8:10:26:fa:6c:1e:24:d6:
                    18:99:08:2f:ed:09:4f:6f:91:15:0c:1b:2a:02:10:
                    18:c1:6d:33:ad:34:cc:19:68:8f:d6:1d:6e:db:42:
                    2a:e0:e4:67:88:1b:8a:c2:89:1e:4e:ff:0f:78:df:
                    5f:93:19:73:36:b2:99:a3:79:b2:80:e4:bf:01:be:
                    f2:8d:e7:03:97:4e:9d:01:31:f9:a9:57:28:5a:c4:
                    77:ea:cf:53:a1:b9:27:ae:fc:55:25:71:f6:51:65:
                    c4:78:16:25:03:34:43:58:ec:d3:80:a4:a8:12:21:
                    e8:30:ed:0c:b9:60:d7:a9:15:29:01:97:8e:26:5e:
                    b0:78:74:5a:b6:c1:b3:63:9b:3e:8b:99:0b:87:67:
                    f5:f8:76:8a:00:0a:81:ef:0e:de:cc:c6:18:10:ec:
                    67:5a:65:86:45:86:1c:23:38:6f:db:ae:04:59:3e:
                    84:f5:f5:fe:73:d2:91:63:69:e3:93:f5:33:f4:00:
                    69:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5E:21:A2:43:00:38:C2:62:6F:EC:A2:C9:85:B9:2E:B5:42:3C:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/4874dad1-e648-3185-8551-688e5cd436ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl

            X509v3 Authority Key Identifier:
                keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6d0:ed::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:0f:eb:27:6e:04:44:ff:d3:4d:79:de:5a:bd:93:7c:64:fb:
         57:d9:bd:0e:47:ad:ac:15:d4:d3:a7:dc:3c:a7:94:8c:b6:fd:
         51:29:47:00:fe:fe:e9:c2:ee:79:e1:08:a4:de:21:fe:0a:11:
         aa:f8:88:13:7a:11:24:ee:51:89:3c:ba:8b:a3:d2:09:f1:30:
         61:3d:58:e0:2b:69:da:f7:78:1a:cc:10:4e:9e:d0:28:d5:63:
         5f:ca:01:3a:a4:17:38:7d:32:ed:b7:2d:e8:7d:02:30:6c:56:
         0a:45:11:08:bf:d6:a7:96:bf:e6:98:5b:1a:44:11:f8:70:0f:
         97:45:89:4d:e6:32:8c:2e:f1:fd:db:db:ba:f4:d2:c2:c7:ad:
         93:37:be:dc:fa:aa:af:e4:4b:02:d7:83:db:80:5a:2e:ee:ec:
         16:8a:38:e3:67:54:5c:fa:e2:c2:bf:5f:2a:1e:78:c4:d3:38:
         79:c7:ba:4d:6d:f6:70:1d:6a:7b:47:36:df:73:44:37:0b:76:
         95:8b:63:8a:5d:54:1b:7e:73:5e:7e:0f:ad:f2:c7:40:e3:df:
         23:1d:6d:33:f9:28:b6:82:cc:d9:89:bb:97:f3:6c:54:0e:0c:
         2e:b9:2f:b6:34:67:00:9e:17:de:9d:85:e8:35:c1:d1:c5:b7:
         64:23:af:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:51:03 2026 by rpki-client