Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/4accede5-69b4-3cf4-86a3-9dcf0f9ce964.roa
File:                     4accede5-69b4-3cf4-86a3-9dcf0f9ce964.roa (raw, json)
Hash identifier:          ALcG/AwiJc4e1Iwq7H6sAmy4p0BUttNF7Gbbop+VE7s=
Subject key identifier:   3A:DF:55:3C:19:BE:73:F6:9E:68:45:6F:15:A0:8D:4B:A2:8B:0E:79
Certificate issuer:       /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial:       010D0C9F4328584D80FFD58D02FE8DE3C3F1A920
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/4accede5-69b4-3cf4-86a3-9dcf0f9ce964.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     62787
IP address blocks:        2602:f6d0:e9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:d5:8d:02:fe:8d:e3:c3:f1:a9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=c284f8aa-38ec-4d8f-9903-bc21a2a0b1fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:da:77:56:ba:5b:18:28:34:c2:97:ee:c1:6a:
                    23:a3:d4:ce:c3:46:b5:fa:18:d8:49:a0:47:dc:3b:
                    12:07:b3:79:4c:6e:99:9e:0d:b1:6b:24:22:14:a9:
                    05:34:7a:1a:bc:c3:54:86:3d:37:68:ec:7e:1c:51:
                    f4:c7:ab:ff:cc:24:e5:75:03:8c:9d:6a:bd:8b:45:
                    a5:d1:e4:22:e8:4f:d0:5d:fb:8f:df:3f:ef:8e:f7:
                    1d:7e:80:78:0a:5b:83:09:5b:e1:da:59:45:03:6d:
                    0f:31:e3:07:4c:0e:82:7f:9a:10:80:99:c1:21:f7:
                    d1:bf:f9:fe:e6:25:59:2e:e8:e3:16:20:2c:f8:00:
                    15:c2:95:51:1b:10:ac:11:d0:b0:8a:ce:8a:f9:bb:
                    e1:ce:ee:44:ff:e6:55:68:7c:88:20:90:37:40:9d:
                    53:3e:8b:73:a9:df:8f:f4:ce:3c:24:a5:e1:0f:f5:
                    df:01:43:74:0b:f3:b1:9d:1e:66:bf:87:82:a1:24:
                    20:f7:b7:d9:4b:65:4a:dd:84:ca:88:b0:41:49:cf:
                    f0:98:6a:3e:51:d8:60:0f:1f:0c:b5:83:06:e5:dd:
                    04:77:4c:aa:2e:c6:66:37:08:33:78:9a:fb:f9:df:
                    5e:3a:a9:73:93:5d:bf:ea:0b:50:69:64:ef:f9:bd:
                    a8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DF:55:3C:19:BE:73:F6:9E:68:45:6F:15:A0:8D:4B:A2:8B:0E:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/4accede5-69b4-3cf4-86a3-9dcf0f9ce964.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl

            X509v3 Authority Key Identifier:
                keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6d0:e9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:88:01:29:5a:3c:4d:a0:2a:d8:a7:09:b8:6f:44:d4:3c:61:
         cd:1c:12:29:73:39:ab:49:3a:ed:02:e7:6c:e4:df:c0:9c:ae:
         97:48:35:ff:21:c0:25:f2:f3:cc:7b:c6:fd:e8:6b:3f:7c:11:
         cc:77:0b:23:21:81:cf:cd:45:88:9d:87:67:b9:69:e8:15:73:
         c0:b8:93:b5:a1:6d:80:5c:e9:8f:e0:c6:a1:4e:23:de:54:cf:
         62:26:b0:24:77:1c:c7:27:aa:2e:42:a0:44:d0:ed:ce:b4:40:
         19:c7:ef:e8:10:bf:49:a6:43:97:fd:e6:4d:d3:1c:d8:d8:63:
         c6:d1:b3:0e:7e:7b:f4:d1:6a:34:5f:35:d2:aa:2b:ef:cb:ce:
         15:08:a4:26:e6:e4:56:ad:62:ed:aa:5f:a0:83:81:9f:ee:a5:
         c0:c4:c0:eb:9f:dd:a3:65:ea:19:6f:15:03:22:9e:12:a1:ae:
         b5:0f:dd:89:df:4d:a4:37:0b:c5:c6:0c:de:88:38:82:b2:c8:
         e9:7c:7a:3f:0f:09:3c:e0:31:ec:46:a4:f6:63:d8:a4:5a:a0:
         40:d7:e0:d1:29:12:81:48:3d:ef:34:f3:df:ee:59:61:71:15:
         06:02:5c:77:de:ca:2e:99:bb:c4:0c:7e:8e:40:2e:c0:25:29:
         67:01:9a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:04:57 2026 by rpki-client