Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/6c6daa32-713a-39d2-bb42-1e052b1d6b16.roa
File:                     6c6daa32-713a-39d2-bb42-1e052b1d6b16.roa (raw, json)
Hash identifier:          k7TA9rp/7PTvAtDAHN8avsGy+k4XlT8iXcLrPELjsoM=
Subject key identifier:   9D:95:2A:84:A3:5B:6D:35:2A:68:01:10:7F:3F:4C:94:3C:E6:BC:E2
Certificate issuer:       /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial:       010D0C9F4328584F02424047B86A31A56575FD40
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/6c6daa32-713a-39d2-bb42-1e052b1d6b16.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     62787
IP address blocks:        2602:f6d0:f3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:40:47:b8:6a:31:a5:65:75:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=148960da-7094-4e46-bad5-36fcf6fc2dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1b:63:a7:44:ac:a9:9f:f7:e6:57:87:54:52:
                    9b:11:59:6e:d1:58:56:7e:a8:9f:00:f6:de:f8:10:
                    eb:64:9f:b1:da:89:75:37:6e:6e:59:f8:eb:2f:1a:
                    d8:e0:28:93:0f:7d:f1:c1:72:34:b4:98:3a:ce:ed:
                    31:22:f1:20:bc:57:27:79:98:6a:df:ce:32:3a:33:
                    af:b5:c5:53:1b:ca:2f:db:d7:5b:9c:09:77:23:2d:
                    50:74:c9:8a:af:bd:f6:46:01:5f:2e:cd:81:cf:92:
                    64:82:72:ec:7c:74:07:71:e2:b6:d0:e1:28:3e:f3:
                    07:96:82:01:18:79:fc:a1:04:0e:c5:5b:67:44:03:
                    99:c6:7a:29:89:39:0e:d8:99:29:15:b9:dd:c6:09:
                    1c:4f:1f:4c:15:f0:c0:e2:65:57:61:6e:89:fc:39:
                    c6:8a:17:f7:46:0f:63:90:80:52:9f:0c:57:cc:a8:
                    fd:23:4f:de:3a:c6:e0:be:16:19:12:94:c9:9b:d2:
                    81:7e:24:8d:00:15:57:c3:9d:23:3a:08:7e:3e:f7:
                    3b:2b:cf:e6:d5:8b:bd:82:d7:e9:99:ed:65:0e:b3:
                    cb:24:fe:29:25:de:73:de:ef:b8:32:3a:1a:c2:63:
                    78:61:5c:c3:7c:27:92:46:60:ad:8d:15:df:8b:38:
                    87:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:95:2A:84:A3:5B:6D:35:2A:68:01:10:7F:3F:4C:94:3C:E6:BC:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/6c6daa32-713a-39d2-bb42-1e052b1d6b16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl

            X509v3 Authority Key Identifier:
                keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6d0:f3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:33:00:39:8c:cd:a3:a9:af:90:7a:3c:7c:9a:d5:c0:fb:69:
         d6:c0:21:21:0a:ad:7c:40:43:13:78:90:89:e9:8f:0f:1c:83:
         22:3a:de:f1:bf:a9:02:9b:8c:b4:fa:50:f6:d3:92:ef:7d:4f:
         51:57:77:26:e0:f0:8b:4c:a8:ab:a9:0f:93:c2:9a:54:32:c5:
         da:3b:64:53:70:e0:a3:af:21:a9:7b:58:06:e8:45:97:86:aa:
         ff:72:87:98:fb:bc:14:1c:2d:e6:eb:d0:15:ef:dd:87:63:71:
         0b:ca:b5:40:5e:f9:b1:f9:b4:e6:e4:b9:8a:03:3b:cf:61:10:
         2b:c4:1c:44:42:2c:77:0f:0d:d8:83:ba:e8:c5:ec:f0:fc:e3:
         dc:88:7a:b5:f8:27:8e:8d:2e:b1:cc:65:4b:fa:e9:bf:b6:d5:
         5c:e1:93:79:2b:ea:e6:4e:ac:01:58:e5:05:4a:d9:23:48:af:
         37:7f:27:21:76:04:68:80:ca:ae:8a:12:77:09:be:d0:f0:58:
         e0:d1:6c:8d:aa:d3:6e:27:84:7a:f6:8f:22:6a:5d:d0:1d:ac:
         cc:be:2d:f6:53:e4:77:f9:1e:21:19:e3:0f:04:fc:45:1c:f4:
         69:0c:7b:98:40:b2:71:a7:98:a2:93:de:b6:c6:26:b1:53:7c:
         79:51:e3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:51:27 2026 by rpki-client