Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/20f9edc3-4240-36d0-b647-3d2816703cb3.roa
File:                     20f9edc3-4240-36d0-b647-3d2816703cb3.roa (raw, json)
Hash identifier:          EHymIfXf6Z32HF0BmTl3y1Y4EO+bjF8j7/EjJAxNDDQ=
Subject key identifier:   9D:FE:1D:4D:CE:8F:15:AA:78:99:A1:F9:F2:9B:76:C1:32:FA:5E:07
Certificate issuer:       /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial:       010D0C9F4328584BBE405C9AF6FBE81FD0AFD6B8
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/20f9edc3-4240-36d0-b647-3d2816703cb3.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     62787
IP address blocks:        2602:f6d0:fd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:5c:9a:f6:fb:e8:1f:d0:af:d6:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=e9c2b73b-6c27-44b4-8fc1-2d490caaa541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:76:6b:8b:e6:7a:1e:71:95:71:3c:61:6b:45:
                    2c:a5:a7:0b:d3:7c:83:25:f4:12:c6:b3:70:aa:ad:
                    78:6d:ec:1d:28:02:cf:f8:25:21:6e:a5:d7:9f:22:
                    62:8b:5a:66:f6:26:6a:41:75:92:eb:8e:0a:1b:46:
                    e0:c4:b6:5f:d8:07:dc:5a:7a:20:b2:10:8c:ff:40:
                    1f:46:a5:7b:14:ad:da:a9:f8:3b:64:05:45:b9:94:
                    82:94:08:87:4b:f5:12:32:8d:39:65:f4:49:f9:ed:
                    94:e4:cd:54:80:dd:f9:80:5d:a0:70:b5:dc:a7:0b:
                    97:73:63:c3:6c:18:bb:8e:d6:36:06:bd:d5:59:09:
                    1e:d1:7a:dc:2c:05:5a:8f:46:ca:f8:89:f1:f1:cd:
                    f1:f3:d6:a6:69:35:83:2d:55:e1:4a:cf:4e:c2:70:
                    e0:97:75:84:58:9b:92:73:51:3a:55:c9:cc:1a:8a:
                    8b:a0:3b:0d:c5:c7:d2:d6:74:9f:5b:cd:b9:c6:9f:
                    21:e9:4e:01:d9:bd:66:4f:2f:ae:34:c0:83:e4:0d:
                    62:79:40:e8:00:33:ac:16:e8:4b:70:c3:54:33:86:
                    6b:8c:f8:07:34:2a:61:4a:a5:7d:2b:6c:7b:64:7e:
                    78:56:96:22:49:20:d9:60:4f:87:93:2a:94:fe:1d:
                    58:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FE:1D:4D:CE:8F:15:AA:78:99:A1:F9:F2:9B:76:C1:32:FA:5E:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/20f9edc3-4240-36d0-b647-3d2816703cb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl

            X509v3 Authority Key Identifier:
                keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6d0:fd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:3a:d0:bd:10:01:3b:45:07:0c:29:22:43:6a:fa:b0:1b:c4:
         43:e2:e0:91:1d:cb:07:5f:f5:cd:12:43:d4:28:64:30:3d:83:
         ce:65:12:5c:e9:57:11:73:39:70:d0:44:cf:00:e4:ea:2b:7a:
         73:47:1c:2e:25:40:c3:83:02:33:43:ba:8f:75:cd:a4:4a:7d:
         7e:b7:eb:aa:2a:73:02:38:2f:c9:14:58:0d:59:1a:f3:80:ae:
         a5:ca:b3:85:b0:6b:25:eb:ea:ec:d6:07:22:57:77:dc:9f:e5:
         ec:57:82:38:88:6d:4e:99:78:63:3a:ce:e6:d0:c2:70:aa:84:
         70:7d:f6:5c:c1:a2:2a:8e:bd:94:79:c9:04:da:5b:03:a1:26:
         f3:f5:f6:b7:b6:c5:b5:9f:e2:e8:5c:b0:0a:af:9c:83:ab:04:
         e5:05:c3:d9:5f:99:34:47:e4:53:c3:65:33:ae:f8:b2:cb:bd:
         1e:63:19:94:70:d2:45:d6:a2:a8:92:7e:6e:71:13:79:19:a2:
         b4:ad:d7:cf:92:05:e8:68:06:51:f7:99:f4:69:ba:1f:70:11:
         68:43:2b:0e:5e:ea:c8:73:86:da:2e:d1:9d:af:cb:18:83:94:
         10:1a:c5:23:f4:84:a7:67:35:e5:e3:5e:f7:33:22:1e:b6:ae:
         df:0a:2b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:32:50 2025 by rpki-client