Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/9acbba52-5f09-3096-a902-9c18c8490a70.roa
File:                     9acbba52-5f09-3096-a902-9c18c8490a70.roa (raw, json)
Hash identifier:          69oFVrPBsha3ynmmGmIcppLcfj+9zO8xSOIIBgkfsOI=
Subject key identifier:   27:8A:3B:A5:1D:A2:5C:04:A2:5B:02:21:79:CA:0B:A9:DD:B3:68:45
Certificate issuer:       /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial:       010D0C9F4328584D80FFD78F7BECAF960C849C40
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/9acbba52-5f09-3096-a902-9c18c8490a70.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     62787
IP address blocks:        2602:f6d0:e2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:d7:8f:7b:ec:af:96:0c:84:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=2545c115-049f-4b3d-ba5d-bdb736a0df68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:fd:cc:b1:cd:f9:68:71:8d:b3:80:ad:bc:3e:
                    7b:3d:29:3d:d6:42:36:34:97:05:20:33:f6:db:c4:
                    e7:92:60:e5:f4:9f:67:c2:3b:28:c2:a3:4c:70:72:
                    58:6d:f6:f7:5f:96:e1:5f:ba:f3:b9:e1:ce:ba:5a:
                    5e:02:2b:41:77:10:74:36:71:8f:73:4c:a5:6b:93:
                    4f:67:13:ac:7a:be:14:97:e3:9f:0c:8b:3a:11:47:
                    de:b6:34:ce:58:80:34:01:b0:e3:b1:25:d5:d2:8b:
                    d8:49:08:a7:5e:f3:38:cf:69:0f:62:87:31:85:99:
                    ca:7c:5a:92:70:61:51:e3:d1:c8:22:c4:c9:7e:2b:
                    d5:f8:53:19:50:f0:07:f7:cc:bf:b8:11:31:75:79:
                    59:5c:b6:54:43:27:c3:63:e3:3b:b8:ab:c6:46:95:
                    18:3e:fe:a9:98:94:98:d5:e5:92:ad:6a:f9:fd:39:
                    32:61:af:0f:3b:36:d5:0f:72:1c:2a:1f:f2:75:84:
                    5f:99:58:d3:ef:c8:ef:a9:e1:95:36:a9:40:a5:07:
                    40:dd:70:e8:55:8d:0c:e3:5d:9d:85:47:00:91:0c:
                    30:4f:dc:67:71:26:3c:27:f9:22:11:f6:08:69:73:
                    27:10:40:8e:44:dc:97:3c:26:c2:dd:d4:dd:a0:93:
                    7c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8A:3B:A5:1D:A2:5C:04:A2:5B:02:21:79:CA:0B:A9:DD:B3:68:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/9acbba52-5f09-3096-a902-9c18c8490a70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl

            X509v3 Authority Key Identifier:
                keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6d0:e2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:4b:d3:53:d7:24:0f:d7:43:f4:17:53:6c:ba:ef:c8:c2:8c:
         30:ce:db:09:b1:76:68:ce:0d:a6:52:2c:b8:08:8a:33:70:da:
         29:a1:56:f7:1f:44:1e:c7:0f:8b:b7:fa:07:32:f6:23:d5:e0:
         97:9b:58:ea:96:38:48:9f:86:df:f0:b9:c2:fa:a7:dd:b3:70:
         e2:10:f1:64:26:44:3c:28:2e:b9:7b:94:49:2f:a6:24:b1:7c:
         8a:a9:03:d2:80:76:5e:e6:f0:22:69:67:6b:b8:38:51:d3:1f:
         a7:27:69:a1:29:01:49:52:42:bc:b5:32:92:dc:b4:f2:63:71:
         52:8b:a2:03:eb:53:23:5a:bc:3e:16:8c:0e:05:84:57:0e:79:
         10:76:9a:ad:c6:0d:cc:02:9c:61:3e:b9:e0:89:c8:af:6c:3f:
         46:99:b7:08:bd:24:1c:bd:63:59:01:69:f7:9c:1e:da:92:14:
         b6:b2:2e:59:61:d7:4d:aa:02:be:8b:c3:08:6e:fd:4c:83:52:
         f4:35:be:0d:22:6e:2b:70:06:3b:b3:e2:1f:c2:95:1e:0d:70:
         d1:5c:2e:e7:fb:9c:3e:22:6d:95:50:40:f6:97:fb:9f:5a:41:
         ae:6b:e2:ba:d4:13:54:d8:7e:c4:83:95:87:d7:9c:a0:02:ad:
         9f:c8:96:dc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2A/9ePe+yvlgyEnEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTNkOTcxNWEtNWVkYy00ZDlmLWE5YTItODMwYTE2ODI2
MTMxMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk
MjU0NWMxMTUtMDQ5Zi00YjNkLWJhNWQtYmRiNzM2YTBkZjY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9v3Msc35aHGNs4CtvD57PSk91kI2NJcFIDP2
28TnkmDl9J9nwjsowqNMcHJYbfb3X5bhX7rzueHOulpeAitBdxB0NnGPc0yla5NP
ZxOser4Ul+OfDIs6EUfetjTOWIA0AbDjsSXV0ovYSQinXvM4z2kPYocxhZnKfFqS
cGFR49HIIsTJfivV+FMZUPAH98y/uBExdXlZXLZUQyfDY+M7uKvGRpUYPv6pmJSY
1eWSrWr5/TkyYa8POzbVD3IcKh/ydYRfmVjT78jvqeGVNqlApQdA3XDoVY0M412d
hUcAkQwwT9xncSY8J/kiEfYIaXMnEECORNyXPCbC3dTdoJN8NwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCeKO6UdolwEolsCIXnKC6nds2hFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81M2Q5
NzE1YS01ZWRjLTRkOWYtYTlhMi04MzBhMTY4MjYxMzEvOWFjYmJhNTItNWYwOS0z
MDk2LWE5MDItOWMxOGM4NDkwYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTNkOTcxNWEtNWVkYy00ZDlmLWE5
YTItODMwYTE2ODI2MTMxLzUzZDk3MTVhLTVlZGMtNGQ5Zi1hOWEyLTgzMGExNjgy
NjEzMS5jcmwwHwYDVR0jBBgwFoAUZwucipDtk9MgM+wjN5eQ+ihFt5EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi81M2Q5NzE1YS01ZWRjLTRkOWYtYTlhMi04MzBh
MTY4MjYxMzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL20ADi
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHxL01PXJA/XQ/QXU2y678jCjDDO2wmxdmjODaZSLLgIijNw2imh
VvcfRB7HD4u3+gcy9iPV4JebWOqWOEifht/wucL6p92zcOIQ8WQmRDwoLrl7lEkv
piSxfIqpA9KAdl7m8CJpZ2u4OFHTH6cnaaEpAUlSQry1MpLctPJjcVKLogPrUyNa
vD4WjA4FhFcOeRB2mq3GDcwCnGE+ueCJyK9sP0aZtwi9JBy9Y1kBafecHtqSFLay
Lllh102qAr6Lwwhu/UyDUvQ1vg0ibitwBjuz4h/ClR4NcNFcLuf7nD4ibZVQQPaX
+59aQa5r4rrUE1TYfsSDlYfXnKACrZ/Iltw=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:21:07 2026 by rpki-client