Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/53cc85f2-f6cc-31ad-8f29-1c1c00f5efd3.roa
File:                     53cc85f2-f6cc-31ad-8f29-1c1c00f5efd3.roa (raw, json)
Hash identifier:          aPbfDSMDg55NbP73VvtD3GFT3nwCaGOA6KWOk3AfZKo=
Subject key identifier:   F8:81:1D:56:A5:E5:5B:F4:62:EE:C4:BA:BC:2C:3B:A0:EF:6F:EB:0B
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584A66C069E8AC76B4B813B04700
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/53cc85f2-f6cc-31ad-8f29-1c1c00f5efd3.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     40676
IP address blocks:        2602:fd92:cc0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:69:e8:ac:76:b4:b8:13:b0:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=9ee77b77-318a-4ee5-87f3-1462ae064bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b4:eb:8c:31:26:4d:ee:7e:7d:30:3b:cf:db:
                    28:e1:90:8e:0e:e2:23:64:4a:71:c4:50:1e:92:89:
                    ac:d7:54:86:77:d0:0c:89:f9:6b:dd:03:9f:97:7a:
                    2d:2b:ac:b7:55:31:a3:4b:16:8e:c7:54:bc:20:6d:
                    1f:2b:b6:69:11:58:54:d9:65:ea:a3:00:53:bf:2c:
                    5d:58:04:17:2c:81:3d:ac:97:2c:72:fc:bd:11:d3:
                    51:b3:29:17:f8:49:ac:ed:1a:06:d5:67:f0:b6:c9:
                    72:eb:54:a0:61:0d:e7:ef:77:8f:0f:3e:c9:e1:52:
                    63:e7:b8:ad:7a:f2:93:e0:35:2a:90:74:19:61:5d:
                    27:be:57:94:b5:10:36:0d:8c:26:74:42:1e:b4:9a:
                    26:b2:3c:7a:d9:f9:91:22:33:82:79:af:c3:9c:c7:
                    41:91:58:85:3b:cb:47:a6:c9:1c:ca:1b:df:aa:1a:
                    86:7a:0c:69:50:fc:fb:15:35:30:8b:ab:0e:8c:d8:
                    38:de:cc:df:61:df:53:56:dc:04:8e:c3:d2:64:89:
                    e5:dc:21:2e:c6:a4:af:44:40:ce:a7:cb:90:1a:f0:
                    e8:b6:57:63:63:79:97:17:75:47:c9:bf:de:b2:83:
                    01:6c:1e:41:de:5c:26:ae:55:1e:6b:bb:16:21:8d:
                    74:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:81:1D:56:A5:E5:5B:F4:62:EE:C4:BA:BC:2C:3B:A0:EF:6F:EB:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/53cc85f2-f6cc-31ad-8f29-1c1c00f5efd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:cc0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:68:47:cf:bb:34:e2:49:f9:a1:8a:78:a8:99:85:f3:73:45:
         c0:d5:6f:86:4b:ef:17:22:e0:dc:9e:72:85:1f:96:bc:f3:f7:
         bc:40:28:ce:63:77:48:8f:06:82:c5:0b:af:24:a8:7a:37:1e:
         56:e6:d2:bb:69:f8:4e:6f:65:89:b8:de:df:c0:e1:16:8b:c0:
         ec:37:c9:21:32:8d:62:b6:10:eb:3e:e8:86:b2:f9:da:7f:95:
         00:ec:14:3e:1d:50:cd:a8:86:0f:90:3c:c6:08:4b:4d:04:ee:
         fe:e3:ce:6c:19:2a:d1:be:cd:83:54:80:98:b6:d9:c0:01:09:
         eb:9e:70:35:23:ee:f2:b5:2a:f5:ea:16:49:ce:0a:47:ad:be:
         6f:f0:58:43:77:5e:bc:a9:ee:3e:37:8d:92:a9:b8:28:b3:ad:
         e1:32:e0:f3:59:66:5e:04:31:6f:5b:8b:08:e2:da:11:3c:99:
         8c:2a:19:fb:43:e5:30:aa:8d:3f:c6:37:66:c0:5f:aa:49:47:
         93:2a:fb:d3:a6:23:cf:e9:18:4f:5c:a3:12:08:f1:f6:a0:a1:
         96:d1:89:da:0f:10:d9:f2:3f:92:fc:d7:06:9c:5b:81:ef:4e:
         3b:81:b2:38:50:ea:62:47:7c:65:78:10:59:f7:8e:e8:6b:f5:
         f5:83:75:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:09:12 2025 by rpki-client