Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/ec2706c0-1f00-3331-815d-41d0befdeb7d.roa
File:                     ec2706c0-1f00-3331-815d-41d0befdeb7d.roa (raw, json)
Hash identifier:          MI48q0HYiXbsJrzffJ6Xce3kURBGq24TSRRuEOSyBGg=
Subject key identifier:   F9:13:49:92:8E:A6:03:9C:DC:30:A9:8B:EB:0D:34:C9:4C:AB:38:24
Certificate issuer:       /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial:       010D0C9F4328584ADECBB971D4ACEA313159D600
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/ec2706c0-1f00-3331-815d-41d0befdeb7d.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     62787
IP address blocks:        2602:f6d0:e1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:b9:71:d4:ac:ea:31:31:59:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=e814e43b-0971-49df-ac50-d5852d2687a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5a:d4:16:92:42:18:f3:a7:2f:e9:1a:e9:d4:
                    7a:43:f2:1b:b4:00:41:7b:40:72:57:04:78:32:7f:
                    69:41:bf:39:aa:6c:78:89:d5:04:24:4c:81:81:d9:
                    95:d5:90:68:b8:13:ac:41:91:16:25:ab:b4:0f:e4:
                    15:5c:56:c0:8f:b6:0c:b3:8b:45:a3:8c:a8:c2:aa:
                    f3:68:ec:c2:88:5b:16:6a:11:02:d2:ef:3b:df:c8:
                    77:33:86:1e:a8:b1:02:b9:28:ab:f8:32:df:8b:38:
                    91:c4:f8:66:93:c1:8c:60:6e:bf:4d:88:90:8d:99:
                    b5:39:85:11:fd:d2:e7:21:5f:8a:46:13:9d:e6:70:
                    96:0c:f3:e4:72:3a:9b:5a:8b:dc:43:f0:64:4e:e8:
                    43:53:ea:08:2c:f6:67:d0:7e:31:bb:69:a3:64:46:
                    b8:3e:8a:6a:e8:b4:8a:85:13:64:43:21:22:11:95:
                    9c:bc:cf:c6:f1:10:59:df:62:42:ec:73:24:ae:b2:
                    08:ca:0f:0c:ae:22:52:41:1e:d8:e4:8e:5c:00:95:
                    16:10:78:e1:41:93:2c:2c:0b:95:70:d7:dc:08:c9:
                    9a:0c:56:ea:62:50:24:3a:54:a7:0f:4a:71:49:b9:
                    58:3b:a2:5d:57:62:cb:df:d6:46:5e:a1:b8:2f:3f:
                    dc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:13:49:92:8E:A6:03:9C:DC:30:A9:8B:EB:0D:34:C9:4C:AB:38:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/ec2706c0-1f00-3331-815d-41d0befdeb7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl

            X509v3 Authority Key Identifier:
                keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6d0:e1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:cc:0a:3d:9a:0f:cc:a6:c2:0a:7f:78:e2:98:9e:4c:e5:98:
         74:f8:c2:62:38:d7:19:4c:b9:61:d1:bb:a9:e8:de:14:56:1c:
         d7:a6:3e:4f:56:5b:25:7b:a8:40:12:3e:74:2d:93:a3:7c:9b:
         c8:6c:f7:ff:be:dc:c5:72:fb:b3:17:c0:0a:26:09:b9:32:f6:
         25:41:06:24:ac:59:a7:63:d1:b3:7a:28:5c:c1:9e:b3:67:dd:
         5a:57:0d:a0:59:8d:c6:ae:e5:47:a8:9c:b7:9b:a9:22:56:9b:
         70:49:36:be:ff:f5:ed:38:aa:95:4f:49:3e:61:6a:68:11:99:
         66:66:76:71:28:b2:22:cf:79:1d:08:f4:f2:c9:7f:19:08:f8:
         e7:93:52:24:8a:79:35:f0:fd:0f:f4:94:80:dd:a3:f4:39:09:
         1a:43:e4:85:f8:cc:47:88:45:47:ee:77:cd:c9:90:e1:89:26:
         7a:f5:a5:e3:0d:4d:5a:1d:76:2c:75:32:e9:01:6a:35:4a:6b:
         a8:27:fa:b0:11:e1:a0:44:5a:9f:e0:6f:7d:61:23:a5:6f:f0:
         1b:87:ea:01:cd:89:04:62:bb:1a:9c:89:a9:cd:8d:0a:2e:e8:
         7a:69:83:c4:63:6f:02:d2:93:a1:bc:0d:de:4d:01:9d:c6:13:
         fd:33:af:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:57:40 2025 by rpki-client