Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/e51facbc-698c-30be-9922-15165071f0ef.roa
File:                     e51facbc-698c-30be-9922-15165071f0ef.roa (raw, json)
Hash identifier:          xmzfv6NyjyBZTHwIs8uWuF9FJmoP5XU2EHTmQSEXHX8=
Subject key identifier:   08:11:BC:A0:A6:76:BE:5F:A6:5C:87:F4:F6:8C:0D:B1:9A:55:94:55
Certificate issuer:       /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial:       010D0C9F4328584F03A78738C9128E4F774ECF00
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/e51facbc-698c-30be-9922-15165071f0ef.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     62787
IP address blocks:        2602:f6d0:e7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:87:38:c9:12:8e:4f:77:4e:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=8c64a295-c916-4733-a18c-0629cf4af76b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8d:bb:f5:de:62:95:d3:2a:85:d0:a9:7a:d1:
                    44:ca:a2:26:ce:2f:cc:52:7b:ca:9a:3e:70:c1:dd:
                    d0:be:52:d9:ff:cd:1c:21:d9:af:d2:39:ea:ef:70:
                    22:fd:cf:da:10:9b:0f:b9:8c:6d:5c:ee:56:b1:7f:
                    70:be:21:4e:9e:7b:fd:31:f4:09:1d:a4:32:6b:5b:
                    25:08:65:c8:f8:e9:36:24:dd:c3:bb:7f:da:28:f0:
                    15:2d:47:ad:f9:95:58:18:50:7d:21:d2:fa:cc:a9:
                    c5:55:39:b3:d3:4c:d9:d5:1c:e9:7f:9d:eb:99:08:
                    32:d1:7d:b8:50:30:8d:26:9e:ba:a3:18:c6:c4:a6:
                    f7:95:80:d0:24:92:95:f9:8a:35:94:cc:6b:85:da:
                    87:4f:6e:49:f1:27:cc:35:55:b5:52:57:a0:95:87:
                    ef:aa:91:4a:4c:e3:5b:8a:c7:36:9e:f2:22:2a:d1:
                    4b:1c:a2:32:76:1b:c9:c3:3e:fd:6f:84:02:70:e8:
                    64:45:84:59:20:89:93:86:77:bb:14:94:ae:be:e8:
                    c0:4f:0c:58:7d:33:fb:35:a3:a1:14:c3:e7:ee:f6:
                    36:70:4a:8e:23:65:e0:fd:7c:43:4d:4e:86:27:18:
                    0c:e2:3d:78:25:57:02:26:42:11:cd:fe:8e:7c:16:
                    5f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:11:BC:A0:A6:76:BE:5F:A6:5C:87:F4:F6:8C:0D:B1:9A:55:94:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/e51facbc-698c-30be-9922-15165071f0ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl

            X509v3 Authority Key Identifier:
                keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6d0:e7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:05:24:13:db:65:eb:a0:39:d8:c7:a1:3d:2e:ba:0d:48:cc:
         d1:59:f5:0d:b4:a7:46:b0:18:35:56:1f:13:2f:51:83:1b:09:
         9d:31:b0:40:01:49:54:22:08:01:8e:f3:29:ee:df:76:4e:29:
         ea:3b:19:ae:0a:15:ef:31:2a:b4:e7:04:62:12:7e:bd:c3:52:
         61:9a:2e:55:b9:df:f7:17:31:be:2c:3b:57:d5:0c:0f:e7:00:
         8b:2a:f5:dd:13:9b:c0:44:19:61:e8:ae:bd:9c:c7:56:cd:4b:
         8d:b8:c9:eb:f9:4f:4e:f6:d9:0f:41:25:2f:90:c0:a4:f1:75:
         cd:88:a4:e0:bb:ea:3b:b4:12:28:f1:29:37:b6:59:8f:5e:f4:
         5c:a6:e9:c4:79:5c:13:f3:79:1e:ec:71:64:ac:9e:2b:d8:a5:
         2e:13:0b:e1:4e:34:31:9d:a2:74:c9:23:bb:32:d3:88:3d:af:
         41:6e:f5:77:ee:7d:78:f3:47:66:a7:24:55:d5:14:16:92:fb:
         90:87:01:d7:0e:56:af:af:6d:0b:b4:6b:45:31:f3:f3:d7:9b:
         d1:d5:d4:f2:74:64:9b:bc:0e:a4:76:e4:0d:14:f9:5a:c1:b2:
         44:bc:36:86:40:d0:74:dd:be:de:dd:ac:40:05:ce:34:2c:24:
         37:33:f1:4b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8Dp4c4yRKOT3dOzwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTNkOTcxNWEtNWVkYy00ZDlmLWE5YTItODMwYTE2ODI2
MTMxMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
OGM2NGEyOTUtYzkxNi00NzMzLWExOGMtMDYyOWNmNGFmNzZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo279d5ildMqhdCpetFEyqImzi/MUnvKmj5w
wd3QvlLZ/80cIdmv0jnq73Ai/c/aEJsPuYxtXO5WsX9wviFOnnv9MfQJHaQya1sl
CGXI+Ok2JN3Du3/aKPAVLUet+ZVYGFB9IdL6zKnFVTmz00zZ1Rzpf53rmQgy0X24
UDCNJp66oxjGxKb3lYDQJJKV+Yo1lMxrhdqHT25J8SfMNVW1UleglYfvqpFKTONb
isc2nvIiKtFLHKIydhvJwz79b4QCcOhkRYRZIImThne7FJSuvujATwxYfTP7NaOh
FMPn7vY2cEqOI2Xg/XxDTU6GJxgM4j14JVcCJkIRzf6OfBZfSQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAgRvKCmdr5fplyH9PaMDbGaVZRVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81M2Q5
NzE1YS01ZWRjLTRkOWYtYTlhMi04MzBhMTY4MjYxMzEvZTUxZmFjYmMtNjk4Yy0z
MGJlLTk5MjItMTUxNjUwNzFmMGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTNkOTcxNWEtNWVkYy00ZDlmLWE5
YTItODMwYTE2ODI2MTMxLzUzZDk3MTVhLTVlZGMtNGQ5Zi1hOWEyLTgzMGExNjgy
NjEzMS5jcmwwHwYDVR0jBBgwFoAUZwucipDtk9MgM+wjN5eQ+ihFt5EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi81M2Q5NzE1YS01ZWRjLTRkOWYtYTlhMi04MzBh
MTY4MjYxMzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL20ADn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKYFJBPbZeugOdjHoT0uug1IzNFZ9Q20p0awGDVWHxMvUYMbCZ0x
sEABSVQiCAGO8ynu33ZOKeo7Ga4KFe8xKrTnBGISfr3DUmGaLlW53/cXMb4sO1fV
DA/nAIsq9d0Tm8BEGWHorr2cx1bNS424yev5T0722Q9BJS+QwKTxdc2IpOC76ju0
EijxKTe2WY9e9Fym6cR5XBPzeR7scWSsnivYpS4TC+FONDGdonTJI7sy04g9r0Fu
9XfufXjzR2anJFXVFBaS+5CHAdcOVq+vbQu0a0Ux8/PXm9HV1PJ0ZJu8DqR25A0U
+VrBskS8NoZA0HTdvt7drEAFzjQsJDcz8Us=
-----END CERTIFICATE-----
Generated at Sun Sep 20 15:56:35 2026 by rpki-client