Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/2403fe1f-aff1-3ce3-aa85-cff51a2b67c4.roa
File:                     2403fe1f-aff1-3ce3-aa85-cff51a2b67c4.roa (raw, json)
Hash identifier:          sFK5oXE4klAnkpsa+m1XXR7SQctEa9umLuxmsL0MchU=
Subject key identifier:   18:1F:C8:A8:9D:C4:DC:A6:B3:42:CB:BC:04:29:94:D4:C4:E1:04:B8
Certificate issuer:       /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial:       010D0C9F4328584F03A77687632BA56DEAC30740
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/2403fe1f-aff1-3ce3-aa85-cff51a2b67c4.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     62787
IP address blocks:        2602:f6d0:e8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:76:87:63:2b:a5:6d:ea:c3:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=520865ca-b67e-44b1-9d73-d18e842a40f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3d:62:37:d2:e9:27:7d:d6:a6:c2:de:e4:f0:
                    76:e0:af:7d:0b:07:77:6d:eb:2e:4e:da:c0:ad:ce:
                    e2:81:29:ae:56:ac:07:c9:1b:e4:3b:18:1c:b4:4e:
                    5c:f4:a3:03:b2:65:5a:2b:e8:89:cd:5c:03:dd:4e:
                    96:63:fa:fb:8f:b9:66:80:3e:e4:32:8c:e4:92:cb:
                    44:f9:1a:28:7a:88:9f:37:ab:fc:cd:fb:c6:07:d8:
                    20:8f:45:b7:c5:12:a8:4c:f4:e2:43:91:9f:1e:79:
                    fc:2c:85:92:00:0b:7b:cf:65:4f:07:c7:9f:bc:00:
                    f2:c4:e1:93:bc:74:42:b6:5a:c3:3c:1b:52:a1:2c:
                    28:1e:32:69:90:e1:d1:8d:e1:1c:dc:f0:e9:97:aa:
                    f6:e8:13:74:27:55:bc:4a:d5:88:52:b9:05:69:d6:
                    a9:e7:22:df:da:1f:e7:ed:6e:bb:81:7f:f7:ef:d4:
                    ca:f0:e8:24:4e:7c:64:66:ee:28:04:cd:d9:30:8d:
                    73:88:fd:aa:b0:88:90:4f:44:31:25:eb:9d:99:dd:
                    54:b4:7b:b1:ad:c0:f9:fc:24:09:45:e2:aa:a3:b4:
                    ad:88:a4:7b:c8:e3:ce:28:4d:ef:bd:68:4d:8e:11:
                    cd:ce:a4:aa:31:3a:6f:29:ed:5c:a0:82:16:7f:c5:
                    59:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1F:C8:A8:9D:C4:DC:A6:B3:42:CB:BC:04:29:94:D4:C4:E1:04:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/2403fe1f-aff1-3ce3-aa85-cff51a2b67c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl

            X509v3 Authority Key Identifier:
                keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6d0:e8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:7b:43:45:3e:c0:3c:8c:26:60:08:f7:4f:c6:92:59:ce:7f:
         2b:96:4c:8a:2f:58:3a:91:c6:b8:00:ba:1c:a7:40:92:e9:1b:
         58:16:35:d5:b7:cb:2d:d6:87:c3:39:c3:77:bf:a7:d1:f1:19:
         86:2b:5f:75:c6:6f:57:0a:20:56:49:a9:87:9c:78:46:b2:b9:
         08:b1:8c:37:5e:8c:83:94:e8:2c:dd:cb:4f:94:fc:3a:18:5c:
         8c:c5:e5:24:7c:97:a7:88:0b:38:38:6e:b0:5e:e0:e1:11:6e:
         43:4c:00:f5:65:2e:10:b3:26:17:e6:a4:ed:96:a0:0c:79:87:
         60:6f:33:c2:68:2e:95:29:b4:47:33:99:b6:bc:d1:83:44:a4:
         be:b6:68:61:98:84:79:e8:8a:ef:3a:ce:58:9b:ba:cc:d2:4c:
         c2:d8:bd:25:55:03:0b:fc:d8:2c:e6:b9:83:8c:f9:13:82:14:
         c0:8c:b6:dc:84:10:a5:75:cb:b7:ad:22:f9:2c:c6:60:36:90:
         03:e4:b7:5a:ca:7d:8b:3c:38:1c:63:db:c1:7f:1d:d0:61:86:
         d6:c1:41:1e:35:12:f4:f5:bb:46:9b:28:9a:fa:e2:a9:c9:bf:
         5c:da:d7:56:59:76:75:cd:ee:06:eb:f1:f7:7b:51:f4:6d:9c:
         b2:cb:d0:62
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8Dp3aHYyulberDB0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTNkOTcxNWEtNWVkYy00ZDlmLWE5YTItODMwYTE2ODI2
MTMxMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
NTIwODY1Y2EtYjY3ZS00NGIxLTlkNzMtZDE4ZTg0MmE0MGY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj1iN9LpJ33WpsLe5PB24K99Cwd3besuTtrA
rc7igSmuVqwHyRvkOxgctE5c9KMDsmVaK+iJzVwD3U6WY/r7j7lmgD7kMozkkstE
+RooeoifN6v8zfvGB9ggj0W3xRKoTPTiQ5GfHnn8LIWSAAt7z2VPB8efvADyxOGT
vHRCtlrDPBtSoSwoHjJpkOHRjeEc3PDpl6r26BN0J1W8StWIUrkFadap5yLf2h/n
7W67gX/379TK8OgkTnxkZu4oBM3ZMI1ziP2qsIiQT0QxJeudmd1UtHuxrcD5/CQJ
ReKqo7StiKR7yOPOKE3vvWhNjhHNzqSqMTpvKe1coIIWf8VZxwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBgfyKidxNyms0LLvAQplNTE4QS4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81M2Q5
NzE1YS01ZWRjLTRkOWYtYTlhMi04MzBhMTY4MjYxMzEvMjQwM2ZlMWYtYWZmMS0z
Y2UzLWFhODUtY2ZmNTFhMmI2N2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTNkOTcxNWEtNWVkYy00ZDlmLWE5
YTItODMwYTE2ODI2MTMxLzUzZDk3MTVhLTVlZGMtNGQ5Zi1hOWEyLTgzMGExNjgy
NjEzMS5jcmwwHwYDVR0jBBgwFoAUZwucipDtk9MgM+wjN5eQ+ihFt5EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi81M2Q5NzE1YS01ZWRjLTRkOWYtYTlhMi04MzBh
MTY4MjYxMzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL20ADo
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKB7Q0U+wDyMJmAI90/GklnOfyuWTIovWDqRxrgAuhynQJLpG1gW
NdW3yy3Wh8M5w3e/p9HxGYYrX3XGb1cKIFZJqYeceEayuQixjDdejIOU6Czdy0+U
/DoYXIzF5SR8l6eICzg4brBe4OERbkNMAPVlLhCzJhfmpO2WoAx5h2BvM8JoLpUp
tEczmba80YNEpL62aGGYhHnoiu86zlibuszSTMLYvSVVAwv82CzmuYOM+ROCFMCM
ttyEEKV1y7etIvksxmA2kAPkt1rKfYs8OBxj28F/HdBhhtbBQR41EvT1u0abKJr6
4qnJv1za11ZZdnXN7gbr8fd7UfRtnLLL0GI=
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:31:14 2026 by rpki-client