Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/639ee213-04f0-349f-ac9e-d0d75ebc7bc7.roa
File:                     639ee213-04f0-349f-ac9e-d0d75ebc7bc7.roa (raw, json)
Hash identifier:          AJ088pQdfIBXsjTi3VkjjjrXD9erOIcvASQB+P6GsSA=
Subject key identifier:   0B:D3:96:8A:55:31:6A:4E:87:6A:F6:B6:DF:EA:E7:5A:1F:20:C5:12
Certificate issuer:       /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial:       010D0C9F4328584ADD669B629411AED844DB8140
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/639ee213-04f0-349f-ac9e-d0d75ebc7bc7.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     62787
IP address blocks:        2602:f6d0:f5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:9b:62:94:11:ae:d8:44:db:81:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=59546870-a397-4b5e-bab9-9563f32b3799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:70:52:0a:8e:44:43:4c:f7:be:d5:a5:e5:bb:
                    de:4f:92:7a:70:75:74:c0:49:10:3d:98:8b:18:17:
                    64:de:a1:7f:1b:8a:ee:7a:0d:ed:14:e8:04:b9:0c:
                    65:6c:26:b8:42:f2:15:07:47:cb:7c:a5:7f:b3:56:
                    c0:59:f7:9b:ea:1f:6c:95:fc:52:fb:27:58:f6:96:
                    f2:aa:25:1a:05:23:13:b6:9f:1f:06:6d:aa:bf:94:
                    49:5e:fd:9d:ff:98:3a:ee:ad:3b:69:5c:ad:82:98:
                    59:2f:f5:1a:36:2c:58:0b:54:02:be:ac:44:d7:05:
                    e1:51:f7:96:0f:2a:cf:af:f0:5c:11:6e:ae:aa:45:
                    42:94:0e:ea:4a:5b:82:7f:3d:51:a7:3d:6d:e0:29:
                    be:c6:06:b6:fc:22:bf:d9:fb:51:67:2f:9b:6a:80:
                    aa:88:a3:1c:36:ff:3c:13:77:5f:87:ca:42:a5:33:
                    14:4a:9e:ae:ae:a4:52:b6:08:fa:2e:5d:3c:d0:96:
                    c8:10:3e:9e:93:a8:fa:dd:9b:62:be:20:47:b8:39:
                    9e:da:40:52:97:26:08:4b:1f:01:34:29:da:28:14:
                    06:b3:e4:aa:5c:20:13:ac:3f:44:37:01:f3:dd:60:
                    81:c1:cf:23:36:ea:93:86:36:cc:52:de:4f:38:1e:
                    d4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D3:96:8A:55:31:6A:4E:87:6A:F6:B6:DF:EA:E7:5A:1F:20:C5:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/639ee213-04f0-349f-ac9e-d0d75ebc7bc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl

            X509v3 Authority Key Identifier:
                keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6d0:f5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:04:c0:16:e5:ce:7c:58:ae:af:80:ac:6c:da:65:c0:e7:21:
         cc:25:6e:1f:7a:ba:97:e4:87:a7:6f:bc:0e:78:5c:0f:ab:d3:
         1b:1d:7d:9a:b5:ae:df:a7:1c:0d:4c:eb:7e:14:d9:63:e9:ed:
         c0:2c:10:6f:9e:28:10:98:73:30:17:8a:6c:dc:bd:e9:56:3b:
         fd:e1:8c:8b:da:9c:1b:08:a2:e5:bb:a4:7b:61:78:07:f6:1a:
         8e:2c:49:70:88:60:52:77:74:aa:8a:1d:10:cb:d0:43:35:24:
         f1:7e:ef:17:37:46:a6:04:8d:fd:3c:d6:af:ff:98:73:76:20:
         18:f1:1b:85:32:7d:68:37:42:06:ed:a7:c7:20:5f:03:ff:94:
         52:d4:e5:18:a4:bc:46:5b:88:2f:1e:f6:a5:0f:a2:ab:98:eb:
         e1:de:af:c3:3c:2c:f6:33:4e:a7:8e:74:fc:ad:a5:77:df:35:
         fb:ae:d7:9b:d4:16:29:77:92:b4:90:ff:01:3a:ac:42:d8:83:
         87:34:2a:e3:0f:30:f5:87:83:20:bf:c0:3c:a9:4c:bd:6a:6b:
         1f:22:f5:ce:4d:e3:88:84:44:43:9a:94:60:a9:2b:a1:1c:b8:
         f0:0a:92:6d:19:28:71:6d:7f:90:8d:50:4e:da:e1:a2:b6:09:
         01:5c:c3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:53:24 2025 by rpki-client