Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/6c6daa32-713a-39d2-bb42-1e052b1d6b16.roa
File:                     6c6daa32-713a-39d2-bb42-1e052b1d6b16.roa (raw, json)
Hash identifier:          4mB+KFI6t2GNp/yFImGlEciesIe/Kg596szeK79N2u4=
Subject key identifier:   8B:AA:FA:72:E9:F3:93:4E:D1:77:9C:07:87:66:1A:A7:BE:07:7D:CA
Certificate issuer:       /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial:       010D0C9F4328584BBE405C5028F17E8DF7EAC0D0
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/6c6daa32-713a-39d2-bb42-1e052b1d6b16.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     62787
IP address blocks:        2602:f6d0:f3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:5c:50:28:f1:7e:8d:f7:ea:c0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=bff78210-0ad5-4aec-baab-061f4ea4b75b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c6:b1:0a:6a:35:d2:98:27:03:7b:87:88:24:
                    8e:01:c7:ad:d2:cc:e0:24:eb:d8:53:7b:21:e2:fa:
                    fd:99:65:cb:55:e9:44:60:c2:bc:ac:be:b1:ab:ca:
                    81:d6:fd:5a:de:62:80:49:5c:26:73:d6:c5:2e:d0:
                    f5:29:05:cb:36:cd:bd:32:5e:c0:c2:b2:b1:65:83:
                    99:6a:95:d5:ba:9c:18:16:d4:8c:c8:ed:5d:ca:e2:
                    93:44:7e:7c:77:d3:7d:6b:36:12:cf:a9:2e:b0:ce:
                    5a:0b:0b:55:a9:f2:f8:65:98:85:80:69:8d:af:e2:
                    88:53:53:20:9f:ca:88:ec:32:ea:2f:c2:fa:61:f4:
                    5b:82:40:2f:21:a0:cd:3b:d2:f0:e6:51:2a:1d:27:
                    02:ee:ec:a3:ae:53:cb:66:12:c9:62:a2:47:1d:ea:
                    d8:ec:77:c1:f3:30:63:02:16:c0:be:50:48:22:b9:
                    07:f8:45:1f:c0:69:45:7f:70:00:74:28:8d:bd:40:
                    2e:6a:42:ab:a5:1a:4b:84:14:04:74:4a:b3:23:1b:
                    b2:85:93:b5:fe:52:f2:be:19:73:53:c8:1c:fb:ea:
                    53:38:30:1d:0b:42:89:75:f7:38:ed:e5:09:c2:da:
                    90:e5:2d:58:16:29:7e:a2:23:55:f6:53:8b:24:03:
                    9c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AA:FA:72:E9:F3:93:4E:D1:77:9C:07:87:66:1A:A7:BE:07:7D:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/6c6daa32-713a-39d2-bb42-1e052b1d6b16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl

            X509v3 Authority Key Identifier:
                keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6d0:f3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:78:19:12:24:2f:6b:07:90:6e:f9:e8:62:24:df:03:6e:21:
         0a:2c:27:c5:26:10:a4:a5:7b:dc:ff:c7:f2:1b:41:3e:f2:ea:
         e9:f9:ce:b5:57:e6:3d:64:5f:9d:c9:af:3a:5b:73:bf:69:ab:
         3e:04:9b:2e:85:90:78:f4:73:c9:aa:29:76:cc:8c:72:6d:90:
         34:45:ca:3c:ce:8c:40:dc:84:8b:fd:6e:f1:54:db:91:50:c2:
         6a:5d:fa:0f:b8:d9:c7:c7:65:85:49:0e:da:96:4c:9a:ad:e0:
         61:dc:ac:a9:bc:a2:5a:30:f0:95:35:0a:22:60:5b:b1:25:b8:
         84:39:3f:6f:ad:11:46:10:59:cd:52:fc:43:31:d4:01:86:63:
         da:3f:d8:80:f1:22:a8:c3:57:b0:53:6c:3e:96:18:c8:49:36:
         d5:3b:3e:c9:b4:34:1b:4e:aa:f9:1e:62:e6:f8:41:57:0b:f2:
         21:3f:b7:0e:e5:0b:e1:fb:ad:34:76:6e:23:e3:c3:ff:dd:0f:
         70:09:1f:3d:a5:e2:14:86:ae:13:5d:35:db:b7:c2:96:1c:55:
         05:02:45:f2:d1:6a:d1:c0:74:36:23:cc:9b:d2:0a:0e:0a:9d:
         d9:b8:40:da:cb:ba:8f:a0:0b:e9:c7:11:fc:c5:f8:11:d5:5f:
         45:25:b3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:00:06 2025 by rpki-client