Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/d6c4cd15-e985-307e-bba3-fa5cc6049862.roa
File:                     d6c4cd15-e985-307e-bba3-fa5cc6049862.roa (raw, json)
Hash identifier:          W6kyGX8xlBh0A6hNk1dzKIxo2oruMz5Kx7bsea3xi+s=
Subject key identifier:   EA:76:C9:7A:75:9C:BC:E5:3A:8A:7B:D8:31:40:6B:48:2F:D7:E7:A9
Certificate issuer:       /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial:       010D0C9F4328584F024216AD9EB79F71A74F3200
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/d6c4cd15-e985-307e-bba3-fa5cc6049862.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     62787
IP address blocks:        2602:f6d0:f2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:16:ad:9e:b7:9f:71:a7:4f:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=5dbae6f6-9449-44e3-83ce-fd1110961b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:17:8c:74:6a:94:86:6e:3e:98:a0:11:4b:ae:
                    1f:2f:90:c5:e9:cf:04:ee:4b:f8:5e:21:ac:04:38:
                    df:39:a8:90:8a:d4:bc:5c:c8:a3:bd:73:f6:ba:ec:
                    99:ba:ea:b4:7b:15:d2:fb:b2:fb:da:10:69:34:03:
                    bf:e2:96:4b:4b:e6:a0:e5:5d:4c:b6:fd:41:14:27:
                    26:71:fd:ba:d5:34:45:fc:8a:e4:b6:0d:02:3a:39:
                    38:df:f5:b5:e9:ed:7f:b2:cb:c5:81:f0:ae:7f:84:
                    a0:43:25:57:bd:77:42:13:d1:37:ac:26:59:0c:17:
                    c0:2f:99:d7:e6:f8:a8:ba:20:07:e2:26:3f:c7:c9:
                    eb:7d:46:05:aa:f3:d6:0c:5c:6b:69:e5:f8:15:ff:
                    0a:68:3c:4e:d8:ae:1b:f3:bf:7e:46:5b:81:47:94:
                    d2:45:ec:9f:92:16:7d:84:e1:24:86:26:43:db:f7:
                    00:e2:6c:a6:d1:93:7b:cf:9e:09:80:f1:c4:fc:43:
                    46:a7:6f:6a:fa:29:e7:48:26:fe:7a:28:00:7b:a7:
                    1d:1c:84:fd:98:d0:d4:d8:28:24:34:34:27:10:86:
                    a2:22:8e:9d:80:f3:dd:26:95:6f:7f:0e:8a:74:61:
                    00:1d:4f:59:0b:7c:da:67:c1:27:04:32:31:4f:34:
                    36:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:76:C9:7A:75:9C:BC:E5:3A:8A:7B:D8:31:40:6B:48:2F:D7:E7:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/d6c4cd15-e985-307e-bba3-fa5cc6049862.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl

            X509v3 Authority Key Identifier:
                keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6d0:f2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:7d:55:ef:14:50:9a:19:7a:7e:a1:90:74:04:1c:5e:36:ae:
         8a:9e:68:7b:cd:24:cb:ce:30:a0:db:d8:9b:e2:d9:ac:b6:27:
         fd:2c:db:56:a0:ff:f7:7a:39:35:59:d9:53:07:6f:77:13:f8:
         8f:ce:6c:f5:2c:2e:9f:7b:50:9b:3a:85:50:1f:02:73:3e:a6:
         d7:fc:3f:87:df:78:36:fa:3f:07:ba:09:d3:0e:53:bc:32:86:
         04:8f:47:b0:44:d6:f1:9b:8a:a3:60:67:4c:c2:c0:d7:e2:c1:
         44:47:29:11:ed:39:92:cd:b7:db:b0:cf:19:4f:15:e5:ec:86:
         a1:b9:cf:89:f6:f6:4d:f2:ab:b0:cb:26:df:74:47:2c:ec:e1:
         37:d1:c4:32:e0:bb:cc:88:28:d0:df:4f:59:94:47:b5:eb:e8:
         05:00:42:f9:f9:a7:3b:4e:2b:c7:91:40:00:24:03:31:fc:41:
         58:88:55:83:e5:32:15:16:3f:ac:dc:19:07:76:23:7d:3b:fc:
         a3:ff:c4:ab:4f:ac:41:4e:ad:57:13:95:7b:a1:c0:ff:4d:7a:
         c8:b4:d5:98:99:a8:0a:0b:31:b3:db:06:00:bd:a8:cc:bf:c1:
         11:f7:22:58:d5:c1:5b:ea:aa:da:21:b1:72:06:eb:29:52:71:
         04:75:4b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:25:06 2026 by rpki-client