Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/0209441e-008d-360c-afc6-196ed1a0298a.roa
File:                     0209441e-008d-360c-afc6-196ed1a0298a.roa (raw, json)
Hash identifier:          unn5BU0PqOeMVCIP4+ajuOky5Yf20aeqN3v8ApvnKmE=
Subject key identifier:   5C:B9:3B:A3:F7:BC:DB:56:E5:BF:4C:DE:81:FE:85:6B:DF:50:0B:3B
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F43285849FE29C6116E21CB29D34523D8
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/0209441e-008d-360c-afc6-196ed1a0298a.roa
Signing time:             Tue 27 May 2025 13:53:19 +0000
ROA not before:           Tue 27 May 2025 13:53:19 +0000
ROA not after:            Mon 25 Aug 2025 13:53:19 +0000
asID:                     6363
IP address blocks:        2606:9fc0:f208::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:29:c6:11:6e:21:cb:29:d3:45:23:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: May 27 13:53:19 2025 GMT
            Not After : Aug 25 13:53:19 2025 GMT
        Subject: CN=66562b39-d5cd-4100-a615-2f1257b0b2d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:19:34:a5:d6:bf:87:e2:59:00:90:c1:2c:00:
                    4b:37:32:f7:32:99:37:76:4d:af:b1:51:d7:5e:2b:
                    cf:e8:44:4e:2c:a6:82:39:9d:88:38:cf:21:2a:73:
                    21:a6:5b:dd:53:cf:d4:39:d6:0f:1d:5e:d9:4f:35:
                    d5:ec:1a:da:53:3a:f6:d7:b2:55:69:7b:b8:c4:11:
                    b1:0c:c7:88:3c:ae:74:20:e8:fe:fd:58:3f:88:11:
                    9c:89:51:e6:a9:6a:60:f3:0e:4f:30:d5:72:51:ee:
                    e4:6f:cc:fa:ef:bc:77:19:75:48:b5:7d:6a:82:9b:
                    48:77:7a:dc:b5:0e:43:b5:3e:1e:b4:9d:07:db:d3:
                    7a:d8:1e:ad:21:f9:ad:d3:1f:55:f8:ea:ca:b0:fd:
                    00:1a:e0:d2:75:3c:b9:5e:a7:50:b3:a9:52:80:72:
                    35:53:8d:3b:ae:e9:0d:b1:48:ca:b3:2e:ca:d2:ac:
                    b7:b7:37:03:03:0c:17:e6:9c:bd:dc:78:0f:2a:86:
                    2f:30:ff:56:1f:71:b2:1b:b8:be:85:0d:c6:31:39:
                    b1:59:9c:10:48:44:34:cb:f7:93:6b:53:a8:11:16:
                    47:d8:a2:85:ec:f3:36:b7:3d:ce:20:09:e5:65:22:
                    32:c6:c8:50:7e:ac:25:27:84:24:c5:14:68:c9:9c:
                    32:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B9:3B:A3:F7:BC:DB:56:E5:BF:4C:DE:81:FE:85:6B:DF:50:0B:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/0209441e-008d-360c-afc6-196ed1a0298a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:f208::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:d5:e0:03:6c:00:6c:5b:31:6e:0b:c4:bf:71:5b:ec:61:13:
         3c:28:71:32:3e:a2:2e:cf:22:ff:26:93:35:d4:0a:2e:7b:fd:
         91:9a:98:ca:96:77:e9:59:7b:10:d1:c0:64:28:dc:04:50:f1:
         40:f5:19:ac:c7:80:56:3c:01:b7:cb:f7:9a:12:88:c2:a6:c1:
         0f:83:1a:1e:ce:b0:ed:43:59:df:3d:58:6a:b4:9b:c8:6a:09:
         bb:f5:97:18:31:e0:ac:0e:96:e0:6c:88:24:30:a4:b6:bb:71:
         e3:70:1c:09:80:b5:a3:65:33:6e:9e:ff:cf:27:5e:ae:f7:3b:
         8a:89:a3:7c:37:b9:b0:1d:2a:0e:e7:7f:bf:0e:31:0d:54:44:
         0c:10:49:74:14:27:4c:fc:8d:e6:e1:4d:81:dd:49:9d:f6:f6:
         50:a0:3b:d0:60:24:c4:9b:e7:56:b9:9d:60:71:b5:1a:8f:08:
         ad:72:99:73:c2:18:60:b4:3d:ff:3b:09:52:a2:03:21:f6:2b:
         87:d8:97:6e:80:1e:1d:56:41:a2:fd:8d:74:71:67:5e:c6:a4:
         30:44:1b:80:8b:59:66:c2:5c:4f:eb:39:75:68:bd:c1:4b:7a:
         e6:6e:2b:ae:0e:88:c4:8e:77:2a:72:8f:08:a4:57:7e:63:c7:
         72:50:74:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:27:27 2025 by rpki-client