Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/584f1870-616f-39d0-b540-7b038721d9d1.roa
File:                     584f1870-616f-39d0-b540-7b038721d9d1.roa (raw, json)
Hash identifier:          OsvYP6ycEgcEf5ZTeXeW6/MnBs73h+199ZYfGkPIkiI=
Subject key identifier:   3D:AA:E1:A7:EB:16:10:98:3E:4C:35:06:71:2B:74:E0:52:61:74:92
Certificate issuer:       /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial:       010D0C9F4328584ADECBA9901036353CC4B44CA0
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/584f1870-616f-39d0-b540-7b038721d9d1.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     62787
IP address blocks:        2602:f6d0:40::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:a9:90:10:36:35:3c:c4:b4:4c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=1b628d35-2c64-4bc3-88b4-b8f31c648e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:65:56:67:dc:2c:bc:e1:5f:f6:bd:9a:94:b1:
                    bf:96:d8:80:5d:28:fa:46:fd:92:6a:c2:66:4f:df:
                    74:2a:84:ef:b9:c3:00:e3:a4:fb:67:ef:6f:ce:60:
                    1f:dc:39:b8:c8:95:23:46:00:c2:4c:fd:1f:76:66:
                    91:1c:5d:5b:13:5e:95:fa:58:3e:ef:22:be:b3:a3:
                    be:b4:58:f4:0e:83:13:57:98:38:1b:81:48:bb:65:
                    57:c6:d1:0c:e0:0d:aa:3b:ee:c4:cf:0c:af:a8:41:
                    2e:41:49:05:37:1e:5c:69:db:2d:e3:ce:41:4b:85:
                    21:f5:b3:45:54:2c:06:c9:64:f2:77:f3:a7:4c:b2:
                    fd:b8:00:ff:ec:d6:ee:e3:11:bc:e6:f6:38:00:c6:
                    85:74:99:e0:f3:bd:5f:30:b9:d7:b4:28:c1:47:05:
                    a9:0b:e8:0f:11:c3:8b:b3:56:ac:14:30:38:ef:e8:
                    21:d9:2d:2d:6d:e1:df:cf:4b:72:ed:7b:ba:e8:55:
                    c1:4f:96:f6:ef:b9:22:dd:b1:ea:16:f0:d4:71:4c:
                    f0:8b:04:4f:0b:bc:07:6d:3d:2f:96:8b:49:df:7d:
                    f1:8a:a4:5f:f2:f4:d4:49:f3:f7:fa:d7:9b:40:2c:
                    0c:2a:de:e6:cc:54:b4:a4:bc:13:dc:31:6c:74:e9:
                    2d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AA:E1:A7:EB:16:10:98:3E:4C:35:06:71:2B:74:E0:52:61:74:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/584f1870-616f-39d0-b540-7b038721d9d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl

            X509v3 Authority Key Identifier:
                keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6d0:40::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:7c:c8:c3:f6:68:99:9b:83:60:48:75:c4:24:ea:f8:21:91:
         30:21:60:eb:3e:12:ae:36:4e:fa:df:8c:e7:8e:39:4f:70:52:
         c0:bf:23:aa:46:6f:61:bc:06:4d:29:f8:5d:fe:ab:7c:4f:94:
         35:0a:28:e6:64:93:7c:74:b8:e0:24:1d:be:3b:30:b5:40:16:
         c3:99:f0:af:ad:3c:6a:d7:4f:07:44:f3:a5:cb:41:c0:d7:c0:
         87:43:56:25:e0:53:e1:95:d2:19:c2:43:35:92:b2:5a:74:14:
         53:db:36:08:cd:7d:c0:77:38:11:a1:79:be:85:c6:25:48:7a:
         82:e5:02:8b:90:87:d9:c5:29:5c:df:8b:a4:79:76:75:90:76:
         d5:1a:b6:fe:6f:d9:93:71:e8:d4:a3:1a:32:68:cc:cb:84:98:
         13:55:2d:fc:20:76:cf:9f:0f:29:21:46:bc:9a:f0:2e:5d:c1:
         eb:72:70:cd:52:6f:c9:8f:5d:0d:cd:18:76:89:47:38:ce:f1:
         51:fd:41:bb:d0:21:f3:28:9c:2b:57:30:3f:c2:e5:24:4f:b2:
         5b:3c:5f:63:03:19:37:77:bc:c5:ff:f0:04:12:ec:6b:9d:f5:
         cb:88:20:eb:63:c9:19:db:20:9b:3b:3c:5c:fc:f3:8f:da:26:
         e2:af:3a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:36:49 2025 by rpki-client