Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/031c007c-8407-3667-a058-6d30b552d721.roa
File:                     031c007c-8407-3667-a058-6d30b552d721.roa (raw, json)
Hash identifier:          G80V7voC7bwLomJmlfWBkL+QGtiY895ao4pXWVB3pdM=
Subject key identifier:   12:3D:81:45:27:B1:D6:71:A6:AE:E4:B5:3D:1C:F7:01:62:32:5E:B0
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F4328584CA061BD46E2BD732945FB5BA0
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/031c007c-8407-3667-a058-6d30b552d721.roa
Signing time:             Sat 24 Jan 2026 02:00:31 +0000
ROA not before:           Sat 24 Jan 2026 02:00:31 +0000
ROA not after:            Fri 24 Apr 2026 01:00:31 +0000
asID:                     6363
IP address blocks:        2606:9fc0:e00e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a0:61:bd:46:e2:bd:73:29:45:fb:5b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: Jan 24 02:00:31 2026 GMT
            Not After : Apr 24 01:00:31 2026 GMT
        Subject: CN=8e303996-c685-45e7-a494-f5fec4f311e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6e:a7:4b:49:9d:5a:80:20:c6:14:58:72:a8:
                    8d:e9:d4:8e:e9:4c:32:f5:52:f8:b5:54:78:b7:dc:
                    0c:5a:e4:a8:74:85:55:e3:80:22:9b:b3:50:4a:96:
                    43:99:7a:dc:09:7c:71:58:65:7a:c0:f8:2a:5a:de:
                    df:d0:2d:a4:b8:04:08:8d:91:10:54:fa:8c:bb:69:
                    c0:3e:46:eb:bd:2d:ac:ec:f8:f9:de:ae:2d:76:cf:
                    02:bf:fb:94:31:13:d4:5b:bd:90:66:7a:28:a6:fd:
                    9c:cb:24:ac:69:0d:d6:ce:db:81:9c:e3:e3:6f:66:
                    99:ef:16:0d:ac:ea:f7:56:fa:a5:1d:ff:3d:7d:32:
                    6e:58:69:c3:8e:63:de:3a:64:05:b1:2a:26:92:6a:
                    4c:bf:7d:9a:c6:d4:10:fd:21:f3:1c:81:00:06:f5:
                    c9:a6:69:e7:2e:e1:11:99:55:c8:0a:20:03:c6:c4:
                    8d:40:ae:2c:5c:38:2f:6b:6e:eb:c7:f5:2a:03:23:
                    e3:59:bd:82:1c:ec:68:2d:44:3f:46:00:91:fb:13:
                    45:4b:f6:9c:0e:42:f6:fa:ea:9d:1f:23:a4:5f:5b:
                    2d:d1:23:f5:64:75:1a:8b:52:ab:17:e7:25:38:e1:
                    e8:6f:4b:04:53:8f:51:85:5f:14:28:ea:be:d9:0d:
                    1d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3D:81:45:27:B1:D6:71:A6:AE:E4:B5:3D:1C:F7:01:62:32:5E:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/031c007c-8407-3667-a058-6d30b552d721.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:e00e::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:59:cd:de:8a:5c:cc:b6:5d:91:a0:12:2c:23:cc:7b:4d:80:
         66:ea:56:7f:cc:43:ab:96:58:64:2a:32:3b:5e:27:6d:e1:77:
         30:c7:4d:7d:88:34:e6:9e:23:b5:a0:81:8e:50:78:df:45:dc:
         00:ea:06:76:8d:ed:48:40:43:8c:60:f7:d3:7d:02:56:0d:08:
         47:3b:70:3a:a9:63:97:3f:cf:44:ea:cd:fc:ff:66:eb:7e:13:
         39:be:4f:62:71:68:c7:1f:9a:f5:71:50:a1:10:96:f8:9a:31:
         44:7c:2b:8c:b7:fd:d6:6f:ef:ce:50:c4:4d:95:4c:da:dc:b2:
         2d:b7:f7:10:e7:c7:06:20:6f:41:62:88:17:a6:d5:02:19:30:
         44:57:7d:f3:4a:f6:e5:81:d5:9f:98:c1:66:ae:b1:6e:d1:66:
         56:dd:7e:17:49:7f:7c:b4:6a:95:e8:9d:45:16:a8:93:8c:c3:
         d2:90:08:83:1d:87:82:8a:f5:49:68:ea:29:1f:53:4f:46:a1:
         64:8c:37:be:d6:00:b3:4d:1a:56:8c:d6:fc:99:dc:ce:c4:19:
         7f:6a:4a:d0:73:76:13:1f:a4:19:5a:a9:8f:1b:f3:1b:9a:32:
         cc:5e:e9:88:d6:f1:6e:12:80:ee:bd:4c:71:2b:1c:73:0a:90:
         52:11:63:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:55 2026 by rpki-client