Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/984ac2e0-a501-3b80-8555-7852a5741bce.roa
File:                     984ac2e0-a501-3b80-8555-7852a5741bce.roa (raw, json)
Hash identifier:          yUI3NXzdZFMS03IDvTcPKdiUXUXUqqc435666KpRjGA=
Subject key identifier:   DE:5C:44:1A:5A:6B:56:97:B4:41:B6:77:06:EA:9C:F9:26:90:3F:11
Certificate issuer:       /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial:       010D0C9F4328584BBFA59F49DC22F267D11AC7B0
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/984ac2e0-a501-3b80-8555-7852a5741bce.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     62787
IP address blocks:        2602:f6d0:20::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:9f:49:dc:22:f2:67:d1:1a:c7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=b06da5b3-420b-41e7-9953-751e223c6970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:db:a7:1e:31:07:0b:5f:4b:63:94:e8:36:ab:
                    a3:8a:bb:73:ee:31:b0:31:fa:98:db:a3:a1:ac:52:
                    28:8c:1f:fb:6d:3b:f8:01:73:81:fd:ce:be:c1:6b:
                    96:0c:16:d1:c6:45:1c:24:bd:0e:d7:02:80:0b:e9:
                    cf:ae:d5:e1:65:49:20:c9:58:3e:be:3d:e6:26:3d:
                    d1:9c:1e:e2:1b:f0:1b:f8:3a:ab:23:6f:16:d0:4a:
                    09:6b:b7:e9:7b:29:d9:0d:d5:7c:73:2f:92:e7:11:
                    35:f3:24:ee:d2:ed:ba:82:7f:ee:2d:39:bd:b2:65:
                    bd:3a:8a:3b:88:91:c9:ac:59:ae:98:4c:60:a9:33:
                    1e:ae:b8:f7:3c:44:86:b1:af:54:85:36:00:a8:b7:
                    35:d2:11:1b:6b:5e:56:3d:ad:33:85:b1:e3:d4:85:
                    0e:18:ba:ee:e8:a2:95:5e:12:b6:8b:47:76:b3:43:
                    48:5f:13:0c:18:55:d1:8b:b9:6d:eb:5e:df:33:82:
                    f0:7e:cc:04:19:53:84:95:51:a4:d9:ac:91:a1:4e:
                    de:16:64:67:74:09:59:ce:0c:fa:e0:c8:c0:23:d0:
                    7b:ca:77:35:71:e0:b3:5b:52:8a:5a:3a:36:9f:1d:
                    1c:54:27:c5:62:97:34:5a:b6:bf:f9:12:7e:58:a4:
                    b4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5C:44:1A:5A:6B:56:97:B4:41:B6:77:06:EA:9C:F9:26:90:3F:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/984ac2e0-a501-3b80-8555-7852a5741bce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl

            X509v3 Authority Key Identifier:
                keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6d0:20::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:3d:3c:94:55:f2:8c:c3:05:cc:08:84:aa:38:58:d7:5b:c2:
         7b:ef:10:49:7f:00:63:15:c3:17:4b:93:97:68:d6:70:52:56:
         1d:5c:8c:d5:82:30:59:10:5f:b0:98:c6:af:df:d0:a0:c9:55:
         39:81:14:0f:b4:91:d8:bb:a7:f7:0d:83:a6:0c:e7:79:7a:60:
         6a:87:f8:a7:a9:3d:8c:8d:74:63:b4:cc:ba:8e:b6:68:b2:b7:
         91:a0:61:79:35:aa:f2:5b:38:c8:7c:9c:85:5d:8f:6f:7f:d5:
         ba:38:05:53:c5:fa:52:04:48:e4:2d:5c:99:50:f9:a9:54:e1:
         cc:cd:5c:77:b2:9f:cc:90:51:1d:64:86:06:b7:52:39:7e:ba:
         88:76:e8:60:f6:15:3e:74:49:58:58:2e:dd:68:d1:f9:1a:b3:
         8a:20:8f:20:63:9f:6e:24:ed:fd:38:c4:c7:a8:14:ac:43:48:
         5e:26:9c:7d:6b:5d:9e:17:90:50:65:2f:10:46:33:b3:d2:e6:
         75:ed:d1:45:3b:0c:b3:42:b1:68:99:60:49:d3:71:ad:e4:ea:
         b7:bb:b7:1d:00:7b:9a:99:41:ec:ab:9d:44:80:8c:13:42:cc:
         6a:63:f2:39:93:25:de:9a:76:2e:45:58:96:62:f8:3e:f1:a3:
         19:03:b1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:19:40 2025 by rpki-client