Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/a34e0a39-ebf5-3bf4-86d8-e767622a9796.roa
File:                     a34e0a39-ebf5-3bf4-86d8-e767622a9796.roa (raw, json)
Hash identifier:          5t32WUEv1r26AcVQl8afOyONAVU1lFc71MNNWHQvMSE=
Subject key identifier:   A0:D3:48:9A:18:5D:A4:0F:0F:04:13:55:3D:7E:98:EF:5D:95:B3:24
Certificate issuer:       /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial:       010D0C9F4328584E6145600FC9F667CD66F59280
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/a34e0a39-ebf5-3bf4-86d8-e767622a9796.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     62787
IP address blocks:        2602:f6d0:eb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:60:0f:c9:f6:67:cd:66:f5:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=2f145206-64a6-440c-8c23-c7ebdb60a017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:88:66:df:89:55:64:d8:90:34:72:86:ef:21:
                    2b:59:d1:7e:25:99:57:f9:15:e3:bb:75:11:5a:4c:
                    0e:df:a7:17:92:85:48:71:54:ba:df:d3:6c:b0:b3:
                    c5:6f:3e:71:6c:f4:65:cb:21:2b:7d:8c:fb:ea:7a:
                    b2:c5:de:bf:d5:43:dd:8f:4e:ad:20:8d:8b:b7:9b:
                    23:42:b9:8a:99:b0:5b:78:58:34:30:7e:d4:6e:c7:
                    30:65:c3:b7:a2:ba:cb:c8:30:e8:9e:36:5f:fb:a7:
                    10:8a:d2:7c:c9:33:93:a8:66:cb:e2:51:58:0c:5a:
                    d9:f0:fc:fa:f0:1d:e2:1c:3c:ad:28:ae:bb:04:9b:
                    fb:64:b2:39:80:3d:94:8b:db:6f:3f:8f:9e:39:a3:
                    e1:c7:b6:d9:ae:a4:2c:61:1d:4c:84:77:1c:4d:41:
                    fa:a4:be:c5:7d:31:d9:d5:4d:d6:d6:0f:29:b0:8c:
                    40:8b:e3:61:ac:e2:5b:75:04:5a:6f:c0:41:11:81:
                    82:a4:af:81:9b:16:09:83:fc:62:af:18:69:7c:19:
                    af:65:91:a3:fc:94:74:ac:ca:a2:ff:46:b2:c5:53:
                    fa:c7:12:1b:29:25:f6:a4:15:cb:c8:c2:b2:22:af:
                    79:b3:e6:38:a4:8e:11:c7:02:52:3e:85:30:fd:0e:
                    3a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D3:48:9A:18:5D:A4:0F:0F:04:13:55:3D:7E:98:EF:5D:95:B3:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/a34e0a39-ebf5-3bf4-86d8-e767622a9796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl

            X509v3 Authority Key Identifier:
                keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6d0:eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:5b:96:ec:ae:11:98:f5:7e:f1:ca:d5:18:f7:70:af:ba:33:
         7d:b4:1c:5c:5f:ff:dc:09:72:20:93:f0:16:68:4e:87:82:13:
         e7:55:03:07:57:af:f1:e1:d0:2e:a1:11:90:c6:0f:65:b1:97:
         4f:13:0b:be:33:91:ba:28:93:45:68:f8:57:4e:bc:be:48:ee:
         92:28:5e:cc:27:5c:60:53:7e:62:75:6c:2e:9e:fe:86:2b:f0:
         02:67:5d:0c:c3:ca:6c:22:a0:5a:0f:55:6a:d3:af:59:11:c8:
         b4:44:99:46:04:cf:b5:e0:d1:ce:db:42:95:75:17:5f:68:2a:
         11:28:f9:0f:a9:6a:0a:02:e3:2b:78:94:1f:98:06:a6:d8:76:
         22:2a:87:b6:7e:f1:08:4c:5d:17:b2:83:7c:a5:a0:66:7c:00:
         21:af:3d:1d:14:5b:df:41:2f:1b:e2:dd:fa:de:34:15:88:36:
         4b:08:bc:1b:ba:bd:83:2d:a2:8e:85:07:61:71:9d:91:90:1f:
         6e:f5:9b:be:6b:8e:54:26:62:1f:b5:a6:49:10:e0:c4:9b:2a:
         41:d3:fe:57:65:f0:09:b8:08:de:82:39:0a:1a:36:e3:26:61:
         bd:ab:26:7b:59:0f:ca:be:98:8c:df:d0:75:ae:cb:ff:55:f5:
         30:dc:e5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:50:34 2026 by rpki-client