Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/5987ee65-bf63-3846-a21b-41263b681a6b.roa
File:                     5987ee65-bf63-3846-a21b-41263b681a6b.roa (raw, json)
Hash identifier:          nYB+bit5SNXX1xhXaebcuHfe3KPVUPEAHEWpku/IIW4=
Subject key identifier:   2A:6F:99:C7:50:02:13:CD:39:B1:9C:AB:83:F2:E7:DD:F3:8A:26:81
Certificate issuer:       /CN=54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb
Certificate serial:       010D0C9F4328584B715CBC7ACB26DFAB9F0DC3C0
Authority key identifier: 53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/5987ee65-bf63-3846-a21b-41263b681a6b.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     19518
IP address blocks:        2602:2e5:666::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:bc:7a:cb:26:df:ab:9f:0d:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=863e7998-1efc-4da7-b6d1-e3b701abb3c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c5:9a:83:d5:d8:61:98:45:2e:9b:81:c1:cc:
                    18:95:c3:e2:74:9b:5f:e2:64:f4:aa:57:0d:35:a8:
                    ee:91:d4:82:10:14:b7:b9:bc:81:89:5f:a6:85:c9:
                    15:d2:f0:b7:56:31:75:cd:53:a0:14:aa:30:54:be:
                    2c:13:1b:60:bd:fc:44:75:52:af:78:5c:f1:67:94:
                    ff:6a:69:ed:53:2a:ab:68:e5:f5:ba:9d:a7:df:05:
                    7a:27:50:c9:8c:5e:81:0f:ab:54:ac:45:6f:a8:1a:
                    e7:f0:d0:91:80:ed:c1:c5:9d:b7:62:4d:65:18:20:
                    2e:38:43:e0:10:c0:81:27:de:8b:4e:31:16:b9:f2:
                    1a:07:65:70:1e:a6:8b:d7:d9:7a:a7:fc:9c:95:bb:
                    a6:16:f9:7a:29:af:91:f6:26:45:11:b7:a1:6d:7f:
                    b1:c9:4c:91:4c:de:c5:e8:12:92:31:bb:ef:86:2e:
                    65:47:d8:12:25:1c:03:82:04:25:8d:f2:d3:19:01:
                    d5:ed:e2:ad:0e:93:21:55:a4:92:2b:09:7a:a3:28:
                    b1:a8:c3:f0:b2:ad:95:ed:2d:11:90:51:2e:b9:32:
                    ee:46:c4:8d:14:5f:ed:e3:12:a8:b9:7c:cc:de:13:
                    9a:25:cd:93:94:57:eb:3c:1d:fe:19:20:4f:0c:db:
                    c4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6F:99:C7:50:02:13:CD:39:B1:9C:AB:83:F2:E7:DD:F3:8A:26:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/5987ee65-bf63-3846-a21b-41263b681a6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.crl

            X509v3 Authority Key Identifier:
                keyid:53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2e5:666::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:13:22:19:35:2b:75:dc:47:7e:c0:ce:13:6c:e8:e1:ce:e7:
         91:25:3e:25:41:4a:f0:f9:d4:1a:51:bd:5b:f4:f2:1d:89:84:
         da:c7:04:43:2e:c0:14:a0:28:25:e0:67:66:d0:f5:f9:ac:a8:
         ce:bd:9d:e4:3a:a7:de:f8:b6:9e:b3:9d:aa:01:e7:c4:a2:52:
         a3:08:6b:a5:0c:af:7d:9f:8b:a8:a3:e8:8a:fe:4e:a5:1f:01:
         37:09:48:a9:d2:e4:d9:f9:71:29:e6:d5:43:22:cc:12:5e:40:
         9a:28:be:48:55:e7:76:f1:07:46:32:8e:2c:88:2a:82:38:eb:
         ff:8d:3d:d1:63:68:8f:6f:c9:c1:9f:0b:8a:d5:da:ed:63:d3:
         d0:5c:42:21:3b:8a:b1:c6:ca:10:e0:b0:9e:a2:d0:b7:a9:46:
         15:da:16:1b:59:25:02:09:03:72:3b:a0:da:25:2b:70:4e:46:
         a2:c5:50:fe:a5:16:34:85:14:6b:c7:76:15:bd:6c:4f:b7:4e:
         80:68:67:d0:b5:99:33:fc:ca:b7:a4:bd:47:dc:35:b2:30:84:
         3c:d9:86:bc:45:e9:c9:60:78:a0:67:9f:a7:df:ab:f6:fe:a4:
         80:79:37:2e:af:fb:e9:95:ed:df:bb:df:39:86:43:03:a3:5b:
         b5:86:ba:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:21:22 2025 by rpki-client