Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/c88ec73f-b520-30e3-a9c8-74c9874acf7d.roa
File:                     c88ec73f-b520-30e3-a9c8-74c9874acf7d.roa (raw, json)
Hash identifier:          2xkomIlqXhquXpw9M1Z5hcp9MNC2Z+0xfiOOeMqv0kE=
Subject key identifier:   95:B7:20:E2:74:25:99:93:DF:7E:E4:67:E8:14:C9:E3:07:A8:EF:08
Certificate issuer:       /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial:       010D0C9F43285849FE0FE179EDC1629E78D4DEC0
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/c88ec73f-b520-30e3-a9c8-74c9874acf7d.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     62787
IP address blocks:        2602:f6d0:e0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:e1:79:ed:c1:62:9e:78:d4:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=437d5a54-45e8-4106-a25f-0cd825d99c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0f:e7:31:90:97:68:46:e9:58:80:5d:38:80:
                    eb:d1:9a:17:b0:86:36:49:43:31:13:3b:5f:1d:34:
                    01:71:89:ea:59:19:c5:1d:45:48:e8:c7:ec:85:3a:
                    65:eb:60:35:20:f2:0f:9c:46:00:59:82:cb:c6:74:
                    a5:37:62:ee:f8:8e:83:a8:a8:73:17:2e:54:7b:00:
                    2e:4d:b1:71:f2:3a:34:19:7b:3c:a2:92:22:d0:ca:
                    61:3d:e8:bc:ca:7d:25:98:92:01:e6:c7:66:7d:41:
                    4a:ee:d8:dd:75:8e:1a:c7:aa:dd:05:97:06:cc:b7:
                    5f:ab:2c:f6:21:c7:3b:4f:2a:b3:f9:86:fd:38:1f:
                    6f:21:74:3c:75:06:1c:4b:15:21:57:71:7d:e1:aa:
                    c0:08:1f:a7:55:ac:0a:2e:a5:17:26:bf:90:b8:c5:
                    70:b4:b7:d6:ee:4d:53:90:5b:61:c0:11:2d:dc:c3:
                    37:b3:3a:db:42:c1:b1:38:ec:0a:e7:5f:96:f9:f2:
                    27:0e:ab:a2:ab:c4:88:8e:05:ac:0f:80:5a:89:3a:
                    12:08:d1:70:c4:a2:13:05:2b:94:ff:15:88:c8:d9:
                    d4:66:1e:6e:9d:1c:a3:81:a4:f0:a7:14:44:83:bb:
                    7e:38:bf:d3:d6:6c:5c:aa:d4:ba:b5:e7:3c:bd:0e:
                    47:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B7:20:E2:74:25:99:93:DF:7E:E4:67:E8:14:C9:E3:07:A8:EF:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/c88ec73f-b520-30e3-a9c8-74c9874acf7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl

            X509v3 Authority Key Identifier:
                keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6d0:e0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:58:3f:bc:10:e4:9e:4c:0a:36:e7:33:12:60:15:9e:56:cd:
         86:48:43:bd:5d:7c:82:88:47:52:7f:18:3f:b0:8a:24:e4:bb:
         9f:e9:21:08:8a:8b:d6:1c:aa:1a:c6:39:4b:e3:d6:42:eb:d2:
         8f:dc:f6:dd:2d:d2:12:d8:12:76:b0:62:64:9a:ba:ec:08:18:
         32:21:b0:86:d8:27:af:c6:46:01:a1:46:bb:67:f6:2b:28:15:
         cc:56:57:59:b4:3f:3a:23:a0:1f:48:4c:f1:68:51:80:68:3b:
         41:8f:e2:d2:0b:00:1d:d1:e2:d2:5a:f8:33:46:6c:70:84:c7:
         ea:44:55:6f:1e:3e:29:f8:f9:d1:c4:b0:b0:30:0a:e7:56:1d:
         7c:26:72:2a:d5:e3:4d:ce:e7:3c:20:0d:43:ba:90:b8:ed:09:
         dc:e8:8e:dc:c8:eb:02:ce:f0:21:ad:3c:2c:b1:2b:cc:4a:d6:
         52:28:cf:2d:e5:5f:65:f7:de:dc:85:ae:8b:5f:90:80:4b:12:
         d8:c1:f3:1c:96:94:9e:29:0d:c3:bf:76:7d:eb:54:67:c3:1f:
         ae:a7:90:d4:33:0d:5d:37:1f:bf:de:2a:4a:84:48:70:bd:47:
         a8:e3:0a:bd:56:da:4d:b7:52:54:7d:76:32:f7:3d:6b:95:95:
         26:ee:23:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:01:49 2025 by rpki-client