Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/bd1b42d6-9b72-363a-9aca-e04dc04c904a.roa
File:                     bd1b42d6-9b72-363a-9aca-e04dc04c904a.roa (raw, json)
Hash identifier:          NvpfqxUxbBpYxmH2FFLekUah2t0thhLcEI2vHDoVcrQ=
Subject key identifier:   E7:26:F7:69:DB:11:4C:3F:6E:48:8E:59:AB:BD:00:CD:F2:C3:2D:88
Certificate issuer:       /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial:       010D0C9F4328584D8100A6F933B63C49987716C0
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/bd1b42d6-9b72-363a-9aca-e04dc04c904a.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     62787
IP address blocks:        2602:f6d0:e5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:a6:f9:33:b6:3c:49:98:77:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=b669a0a5-04ba-47cd-9818-c4878a548f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:80:00:0d:4a:df:e5:6e:a4:b6:69:e5:e3:88:
                    84:38:2f:32:43:80:ea:85:5e:d7:86:6d:b8:06:2e:
                    f4:df:20:13:39:7e:9d:24:54:05:44:87:6f:19:cf:
                    3e:01:9e:75:6e:45:61:8a:3c:eb:c8:f5:0d:6c:59:
                    8d:0c:e8:64:b8:47:cc:47:69:30:41:75:8d:c1:87:
                    64:c5:cc:ed:c4:36:2f:9e:a7:94:0c:22:50:9d:77:
                    fd:ae:d0:e3:50:0f:bb:21:9a:e8:64:2b:60:d7:e4:
                    42:9e:8f:06:fb:99:a8:22:2e:5a:13:a2:f8:05:05:
                    d8:4c:9d:6b:02:21:1e:2c:72:73:93:97:2c:c5:9c:
                    a0:16:ba:a0:66:e2:bd:f1:14:58:13:32:a3:f1:f8:
                    3f:10:4c:93:ce:59:d9:ab:51:e1:94:9b:92:c7:da:
                    85:8a:53:f5:16:6b:10:9f:d9:74:a1:94:a6:bd:b7:
                    7e:18:0f:94:b1:61:45:f3:61:d3:c2:8f:fb:51:53:
                    c2:ff:67:b7:66:0f:06:d9:d6:bf:6e:35:3a:4d:94:
                    41:52:d4:c6:49:44:b5:4b:a3:43:0f:ea:87:b9:50:
                    07:38:23:f0:e7:cd:91:48:5f:ed:9c:b0:eb:db:52:
                    6d:9b:b8:66:08:fc:26:57:aa:ff:07:e7:81:cb:29:
                    8d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:26:F7:69:DB:11:4C:3F:6E:48:8E:59:AB:BD:00:CD:F2:C3:2D:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/bd1b42d6-9b72-363a-9aca-e04dc04c904a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl

            X509v3 Authority Key Identifier:
                keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6d0:e5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:58:b6:df:25:70:55:8e:81:5d:0b:9c:c5:c0:ab:d0:cb:0d:
         27:6a:9e:ec:d0:cd:2c:a0:90:72:d1:cb:e1:bd:2c:6c:09:74:
         96:28:99:d3:b2:b7:08:3b:57:0e:5b:65:39:f7:eb:47:73:f7:
         6b:cf:4c:19:dc:60:3c:1d:71:dc:6c:b0:ac:22:5e:7a:55:9e:
         c2:fa:1c:ee:61:bd:d9:a1:40:3b:98:3a:50:38:9f:bc:88:bb:
         76:5e:bd:cc:30:b3:fb:06:bf:38:c0:39:39:5d:e7:6b:0d:af:
         5c:3c:cb:23:69:2c:17:f3:ee:bf:90:2f:bc:55:96:a2:5a:1f:
         41:cc:15:37:32:26:de:9f:8e:22:84:d4:48:1b:ff:ea:3c:93:
         ce:b0:12:f1:43:74:a2:b8:78:2f:44:6a:0e:c1:c1:a4:79:09:
         54:85:0b:a6:6a:6b:13:4d:24:8a:14:17:5d:50:6c:35:21:6f:
         95:b1:36:bc:18:0b:73:93:0f:d5:19:52:94:e8:78:fa:93:b1:
         29:fa:fa:c2:07:51:87:f5:08:b6:d2:91:6c:f3:c6:a7:00:52:
         98:d2:79:15:a8:90:1b:5c:d4:9d:12:82:5f:66:83:42:94:da:
         09:a1:7f:b1:98:e4:38:6b:91:07:5a:81:a2:07:7e:2f:65:cb:
         84:ff:b7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:05:25 2026 by rpki-client