Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/af19c424-35e2-3f85-9270-2ee316929f19.roa
File:                     af19c424-35e2-3f85-9270-2ee316929f19.roa (raw, json)
Hash identifier:          JyNG5cx77Tg+OO/eeMsowL023zUwd6rvE3j3Fw91hsg=
Subject key identifier:   BA:F7:28:5D:4C:29:68:85:95:82:F3:4A:AC:68:CE:38:E0:40:A1:15
Certificate issuer:       /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial:       010D0C9F4328584BBFA59FF5B870A5A22236F640
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/af19c424-35e2-3f85-9270-2ee316929f19.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     62787
IP address blocks:        2602:f6d0:a0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:9f:f5:b8:70:a5:a2:22:36:f6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=53405806-6d88-4dba-85c5-0382c67304f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e4:ff:22:f2:7d:f8:8a:4b:45:ad:d9:71:c5:
                    96:28:ce:91:5f:98:2d:e8:ca:f1:14:d2:83:dd:68:
                    e5:7a:f7:37:04:36:46:7b:1c:1f:06:9a:7d:88:2f:
                    96:0b:6e:32:ed:e2:4f:14:4f:ba:26:78:db:0a:60:
                    37:d4:c6:bb:fb:c3:71:a2:06:cb:4f:b1:d8:b0:30:
                    07:8c:88:44:86:2c:4d:fd:d0:00:a5:f1:38:0d:87:
                    ee:7d:2d:4b:2b:5e:46:3d:58:b8:a1:46:f4:e1:1c:
                    89:da:78:1e:59:6b:b8:ae:b6:4d:08:0b:55:34:07:
                    96:d2:01:ac:b5:fb:97:bd:3c:5a:19:d9:88:01:1e:
                    0c:59:ed:43:35:6f:84:b9:ec:9b:21:93:bb:fb:c4:
                    5a:d5:de:a5:d2:66:fc:33:2f:4a:ac:14:45:4e:61:
                    ae:ac:89:1c:02:5c:2e:b4:98:27:ae:52:b3:de:e2:
                    08:77:6d:89:ab:d8:a7:8a:7c:b5:ee:9f:a0:18:ce:
                    58:92:86:b3:34:00:ac:af:b0:0d:b6:6b:b7:80:4a:
                    6f:66:fb:0e:2b:af:7f:6b:6c:71:b7:e7:03:d8:91:
                    f6:b8:6a:ab:c6:8b:36:36:db:22:2c:f8:d9:eb:70:
                    8d:de:6a:7e:e7:ef:75:06:89:c9:a5:60:46:02:91:
                    0a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F7:28:5D:4C:29:68:85:95:82:F3:4A:AC:68:CE:38:E0:40:A1:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/af19c424-35e2-3f85-9270-2ee316929f19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl

            X509v3 Authority Key Identifier:
                keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6d0:a0::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:26:78:6b:dc:aa:c1:f6:3d:0e:72:f2:77:fb:92:72:6c:fe:
         89:5f:63:23:a7:2f:2a:ac:d1:4f:05:31:1f:e3:54:47:13:73:
         d8:56:7b:49:d7:86:c1:7f:cc:83:0f:4c:de:3c:ea:ea:94:ff:
         16:bb:0d:14:53:76:8f:c5:38:b0:91:e4:01:04:19:d1:52:4d:
         a5:9d:ae:3d:6f:57:31:b0:e1:af:b9:53:42:55:24:a2:77:c9:
         f2:ea:e6:52:d8:80:00:03:bb:2a:29:3d:dc:a2:9c:11:34:24:
         b8:ee:1d:71:c4:cd:e4:a4:79:30:c0:6e:15:72:c2:1f:b6:84:
         c2:c3:f6:59:38:08:00:e8:c0:09:d4:92:5c:4f:06:c5:1b:32:
         0a:01:33:cf:9e:e2:86:07:08:78:2c:37:07:e4:ff:dd:cf:7c:
         ac:13:e0:76:e8:86:ff:e6:89:30:ed:0b:77:1a:6e:d5:e9:5e:
         a2:bb:e2:67:2e:d9:b4:5c:11:6f:a3:51:94:aa:20:fa:79:24:
         75:63:1a:61:e6:f9:9d:c6:12:81:9c:b6:21:54:ed:80:a2:c2:
         97:f2:e1:4c:7b:46:bd:91:39:4f:4f:7f:62:70:72:19:d0:7a:
         98:f7:b7:97:ed:a9:35:2e:0d:c1:15:59:1e:24:37:48:57:1c:
         78:1f:d4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:04:56 2025 by rpki-client