Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/9acbba52-5f09-3096-a902-9c18c8490a70.roa
File:                     9acbba52-5f09-3096-a902-9c18c8490a70.roa (raw, json)
Hash identifier:          zYD+4qXV24hsW1/ukaneXSsCtPqjDHk9PE7U8GpuBWI=
Subject key identifier:   02:E1:AC:0A:C6:EF:41:B7:C9:B1:E5:34:5A:AA:21:A0:E5:E4:30:CB
Certificate issuer:       /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial:       010D0C9F4328584ADECBA89B9A40378173B9FD80
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/9acbba52-5f09-3096-a902-9c18c8490a70.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     62787
IP address blocks:        2602:f6d0:e2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:a8:9b:9a:40:37:81:73:b9:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=3286e430-f494-41cc-8b99-ed07c55199f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1b:ae:59:ad:69:af:98:7f:bb:d7:80:9e:20:
                    82:45:e7:e2:ba:91:ae:d7:8f:36:a3:f2:25:9d:54:
                    28:87:a8:fd:49:f1:d8:55:b9:de:e0:f1:57:9b:da:
                    6d:48:3a:84:ff:78:34:ff:2c:79:72:7f:93:01:bd:
                    71:b9:4f:d9:e7:c5:bf:09:9a:af:45:04:f2:12:64:
                    39:4b:df:23:42:51:15:9c:45:42:1e:c9:1c:2d:b2:
                    d4:60:6b:44:4d:b4:b5:22:48:4e:de:05:49:0d:6d:
                    01:0e:9c:a7:2a:fc:3d:e7:bc:57:b1:1a:78:1c:70:
                    d1:46:e6:38:44:0f:6c:e3:04:96:e5:38:e6:b9:d9:
                    69:1d:d0:d2:01:1e:ad:59:37:c4:b7:54:91:4b:20:
                    11:00:2d:67:93:ad:d9:69:93:19:51:9a:d4:0b:95:
                    88:83:9d:b3:80:79:21:10:51:67:01:74:cc:e6:1d:
                    11:c7:ff:74:a8:c3:7f:ac:2b:64:35:bd:ba:65:d2:
                    41:e7:a2:2c:aa:0a:02:d8:7e:81:6e:36:e3:d1:d6:
                    dc:c8:65:af:98:61:30:ab:20:a1:65:fa:f4:2e:4d:
                    20:96:ed:38:0f:07:62:3b:34:fc:f3:40:0e:c7:4e:
                    a3:df:2b:a0:28:bd:44:2c:7d:71:a3:00:93:24:f8:
                    c7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E1:AC:0A:C6:EF:41:B7:C9:B1:E5:34:5A:AA:21:A0:E5:E4:30:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/9acbba52-5f09-3096-a902-9c18c8490a70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl

            X509v3 Authority Key Identifier:
                keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6d0:e2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:ec:d0:7e:fe:2e:30:d3:71:d8:a2:04:dd:d6:09:99:fe:23:
         22:4a:1b:8e:9e:5c:6c:32:65:d3:8a:f2:fc:17:e5:2b:5e:b6:
         df:68:86:08:ef:52:32:a2:ec:6c:f4:c6:8f:4b:68:67:e4:81:
         e2:41:ef:de:e5:99:92:6e:75:50:01:35:36:78:aa:f6:ab:21:
         a6:64:b8:b7:92:b5:19:01:12:b0:2a:0f:65:96:e9:40:ed:78:
         55:0a:94:2b:c0:66:a2:4c:2f:21:39:30:b6:8f:47:63:b9:0d:
         87:c3:43:2b:7a:72:3e:28:fb:44:42:15:a2:b7:c9:e2:67:51:
         f5:0e:2d:7a:24:7a:a1:94:ca:f7:07:d6:8e:31:27:52:fe:73:
         f6:6f:4b:89:6d:5a:a5:8f:92:1c:11:b8:55:02:75:3b:81:20:
         6e:52:13:44:6c:fb:1b:64:5d:77:69:6e:4c:68:f9:93:ac:5d:
         2d:40:77:4f:0b:b3:ae:19:b8:2b:d0:63:d8:a6:02:a7:4a:51:
         fe:46:35:68:4a:a0:a7:5a:f5:c9:3d:1f:53:8c:45:7c:87:38:
         b7:39:a2:c7:a4:b2:d3:9f:ad:59:b1:b1:02:82:46:4c:7d:55:
         19:08:77:df:02:22:a2:a5:12:da:43:e4:0d:5e:af:21:65:1f:
         b6:2a:c1:f9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErey6ibmkA3gXO5/YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTNkOTcxNWEtNWVkYy00ZDlmLWE5YTItODMwYTE2ODI2
MTMxMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk
MzI4NmU0MzAtZjQ5NC00MWNjLThiOTktZWQwN2M1NTE5OWY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBuuWa1pr5h/u9eAniCCRefiupGu1482o/Il
nVQoh6j9SfHYVbne4PFXm9ptSDqE/3g0/yx5cn+TAb1xuU/Z58W/CZqvRQTyEmQ5
S98jQlEVnEVCHskcLbLUYGtETbS1IkhO3gVJDW0BDpynKvw957xXsRp4HHDRRuY4
RA9s4wSW5TjmudlpHdDSAR6tWTfEt1SRSyARAC1nk63ZaZMZUZrUC5WIg52zgHkh
EFFnAXTM5h0Rx/90qMN/rCtkNb26ZdJB56IsqgoC2H6Bbjbj0dbcyGWvmGEwqyCh
Zfr0Lk0glu04DwdiOzT880AOx06j3yugKL1ELH1xowCTJPjHsQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFALhrArG70G3ybHlNFqqIaDl5DDLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81M2Q5
NzE1YS01ZWRjLTRkOWYtYTlhMi04MzBhMTY4MjYxMzEvOWFjYmJhNTItNWYwOS0z
MDk2LWE5MDItOWMxOGM4NDkwYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTNkOTcxNWEtNWVkYy00ZDlmLWE5
YTItODMwYTE2ODI2MTMxLzUzZDk3MTVhLTVlZGMtNGQ5Zi1hOWEyLTgzMGExNjgy
NjEzMS5jcmwwHwYDVR0jBBgwFoAUZwucipDtk9MgM+wjN5eQ+ihFt5EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi81M2Q5NzE1YS01ZWRjLTRkOWYtYTlhMi04MzBh
MTY4MjYxMzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL20ADi
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJns0H7+LjDTcdiiBN3WCZn+IyJKG46eXGwyZdOK8vwX5Stett9o
hgjvUjKi7Gz0xo9LaGfkgeJB797lmZJudVABNTZ4qvarIaZkuLeStRkBErAqD2WW
6UDteFUKlCvAZqJMLyE5MLaPR2O5DYfDQyt6cj4o+0RCFaK3yeJnUfUOLXokeqGU
yvcH1o4xJ1L+c/ZvS4ltWqWPkhwRuFUCdTuBIG5SE0Rs+xtkXXdpbkxo+ZOsXS1A
d08Ls64ZuCvQY9imAqdKUf5GNWhKoKda9ck9H1OMRXyHOLc5osekstOfrVmxsQKC
Rkx9VRkId98CIqKlEtpD5A1eryFlH7Yqwfk=
-----END CERTIFICATE-----
Generated at Sun Aug 24 07:35:41 2025 by rpki-client