Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/c88ec73f-b520-30e3-a9c8-74c9874acf7d.roa
File:                     c88ec73f-b520-30e3-a9c8-74c9874acf7d.roa (raw, json)
Hash identifier:          1dTmIX/wvAAaWw5kfL/oc8HcGqcx9RNbhG+eDVP3cXU=
Subject key identifier:   2E:5A:0D:98:49:FD:DC:BB:E1:68:AB:75:4F:72:0F:C3:2F:CC:78:54
Certificate issuer:       /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial:       010D0C9F4328584BBFA5B82CA1D0A12675014E60
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/c88ec73f-b520-30e3-a9c8-74c9874acf7d.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     62787
IP address blocks:        2602:f6d0:e0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:b8:2c:a1:d0:a1:26:75:01:4e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=dee07a56-1b81-49b0-8e13-529d4b6f8546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cc:ed:e9:5c:56:fa:05:c4:96:11:d7:9d:74:
                    39:6a:58:73:fb:ce:fa:68:78:fb:39:c9:c6:18:1d:
                    6e:58:c3:62:75:fb:fe:61:f7:93:dc:fe:c3:68:26:
                    d5:b6:53:eb:76:1f:57:a5:6f:2e:c1:7e:32:ff:d5:
                    a1:6b:3b:aa:3e:5a:53:71:45:ce:af:61:b0:eb:07:
                    b0:2a:4f:32:d2:e0:52:08:c8:95:8d:e2:68:b3:48:
                    b9:c3:96:ad:4b:ff:7d:66:42:92:67:f0:a7:d5:ab:
                    0a:b1:b5:74:27:fa:6c:3d:a9:a4:0c:76:8e:90:ba:
                    44:fe:83:f7:b3:6b:0a:b5:cc:a2:e1:9c:41:61:43:
                    cc:c1:71:a6:fe:fc:09:79:21:79:33:d5:6e:02:7e:
                    59:c7:89:c3:6e:c9:d2:46:da:87:27:42:83:b8:7c:
                    5c:37:c0:75:55:2d:da:ac:b9:7f:50:4e:23:b6:51:
                    76:3c:06:3c:0c:f0:55:63:4d:17:36:91:59:1d:20:
                    25:f8:e2:53:62:0f:20:ed:53:2d:f8:87:4b:31:e3:
                    2a:64:c1:cf:48:55:ed:75:e8:94:b9:b5:ab:6b:53:
                    71:2b:98:c3:b5:3d:fe:11:69:71:29:9d:32:1d:15:
                    94:9c:2c:fe:fe:58:bf:28:d3:56:e0:b1:8e:79:3a:
                    e1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5A:0D:98:49:FD:DC:BB:E1:68:AB:75:4F:72:0F:C3:2F:CC:78:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/c88ec73f-b520-30e3-a9c8-74c9874acf7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl

            X509v3 Authority Key Identifier:
                keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6d0:e0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:5b:c0:02:20:7c:93:8d:2a:f0:69:03:2e:cd:f3:2e:04:92:
         fe:24:a3:f8:30:3a:6d:a6:7f:78:12:f5:6e:1e:3d:3d:02:be:
         58:10:c7:80:b5:9f:ca:d3:a7:2e:36:12:30:65:80:ff:92:14:
         9e:a9:3e:87:39:66:d1:a8:d1:a6:64:41:79:32:88:15:8b:a5:
         e6:19:a4:b3:87:91:16:dc:ba:0f:8a:28:0a:7d:ca:5f:6f:c2:
         06:2d:e9:2f:49:8d:07:c0:28:91:cb:ee:ce:96:ad:aa:78:eb:
         a8:b5:a6:af:da:36:bd:1b:34:47:78:86:3e:4d:58:25:12:21:
         d9:44:7c:78:4d:9f:0e:b5:c5:6f:70:e1:37:df:e3:8e:83:b0:
         a4:41:cb:12:85:8e:4c:e8:e7:3b:ff:43:46:af:cf:c2:96:b7:
         4d:88:ab:2e:13:6b:8a:99:de:53:eb:39:85:63:c3:27:1f:20:
         8f:2f:16:18:6d:77:85:39:09:37:28:cd:0f:3d:f4:94:23:be:
         cb:07:13:cf:77:61:ee:16:3a:09:38:e3:20:51:f6:0d:6f:14:
         38:62:76:e4:eb:9b:2f:43:91:18:78:7a:ba:25:78:7b:6e:c5:
         b9:df:2e:55:4d:77:f7:f2:47:f8:7e:09:90:1f:73:f8:bc:ef:
         4a:87:7e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:06:10 2025 by rpki-client