Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/2ba24ee2-2c27-3427-9c64-dc1f79dd0f14.roa
File:                     2ba24ee2-2c27-3427-9c64-dc1f79dd0f14.roa (raw, json)
Hash identifier:          xvSezXHj8XT4KhOH9DUUsDcdBC/uH4AHj3gYGlYZi8w=
Subject key identifier:   78:8B:CE:D3:EE:1C:E5:86:21:4E:10:87:91:5B:5B:4C:89:80:4E:31
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F4328584F03A84D8F08AD343CFD2FF460
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/2ba24ee2-2c27-3427-9c64-dc1f79dd0f14.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     6363
IP address blocks:        2606:9fc0:e004::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a8:4d:8f:08:ad:34:3c:fd:2f:f4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=ab0a4fe8-2440-4a77-b3db-2b81192402be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:46:46:c5:ba:72:bf:0b:0a:ba:9e:c4:b4:fb:
                    a4:ca:ba:f0:b0:52:ac:e1:4d:88:f0:29:b7:76:9e:
                    5c:5e:b4:17:6e:b5:a1:96:81:7c:09:31:f3:1b:28:
                    e3:9d:92:62:82:e6:e5:ab:6b:cd:e5:2a:53:de:6d:
                    5c:4f:a8:30:76:c6:a3:e2:38:a4:e3:b5:88:7d:a2:
                    59:3e:c8:0b:8d:6a:1f:65:19:cd:0e:4c:29:d6:34:
                    23:e6:91:84:7d:a9:8b:3b:03:30:b5:a0:d1:ba:83:
                    72:ec:67:01:7b:c0:85:b4:e1:04:5b:70:5e:51:02:
                    ee:f1:b6:17:d0:09:d9:14:ec:03:e5:1a:91:84:76:
                    08:2f:77:b9:42:7f:a6:eb:ad:dc:b0:cb:0a:61:af:
                    2f:26:e7:ea:11:81:08:ea:9c:03:38:61:f1:d0:68:
                    06:ff:7b:d3:de:ab:05:b7:8c:cc:e5:d6:84:24:05:
                    7b:61:c1:26:45:e6:3d:a0:56:4b:2f:69:9b:9b:4b:
                    3e:9a:cf:d1:ed:77:71:b3:e6:6d:d0:78:43:d9:22:
                    9b:7d:96:5e:73:7b:e0:8e:2e:0e:ab:25:38:2d:c9:
                    9c:c7:50:0b:23:a3:a4:d8:8e:e3:18:41:4e:08:cd:
                    1d:ea:cf:00:8f:a8:5e:c9:27:37:bf:04:24:09:65:
                    41:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8B:CE:D3:EE:1C:E5:86:21:4E:10:87:91:5B:5B:4C:89:80:4E:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/2ba24ee2-2c27-3427-9c64-dc1f79dd0f14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:e004::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:df:4c:f4:76:e9:92:41:55:55:e9:3f:08:18:fd:7a:a0:be:
         d2:05:8c:38:3a:98:85:ab:80:2a:f6:55:ba:20:c9:f8:88:f1:
         d5:51:33:b9:b9:ca:bb:55:4a:19:38:eb:31:6a:15:33:80:13:
         d1:8a:1f:3b:11:b6:f7:60:8a:8b:6d:a7:b0:f6:52:e7:0e:f9:
         c5:ce:38:58:02:6d:0e:ee:ca:3b:15:91:db:df:80:90:7c:ed:
         fd:3b:6d:f6:05:3e:9a:3e:11:ed:1c:5b:a4:3b:bb:24:1c:47:
         91:b0:db:46:ce:9c:15:0c:35:73:2e:33:80:6b:c2:40:7f:26:
         38:6a:33:26:d7:9a:d1:ec:29:cc:23:fc:59:df:9a:7b:b4:ed:
         8c:03:66:6a:80:de:50:19:7a:0a:bd:9a:33:d6:ba:57:f4:76:
         18:9d:c5:5e:d1:cf:4b:c8:eb:0b:3b:a9:dd:04:c2:2b:68:77:
         e1:8e:f1:4f:c4:cd:1f:6d:b5:b4:fb:ea:2b:d0:de:2a:c2:b8:
         41:e0:13:4d:5e:2e:79:39:4f:95:30:7e:4c:01:73:bc:ae:32:
         a3:b2:6c:0d:dd:b2:9d:80:ab:71:25:66:29:77:48:39:4f:a8:
         fe:d3:c1:89:2f:73:ba:1e:b4:e0:01:51:b8:b2:c9:1f:ac:d1:
         31:f1:e7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:13:46 2026 by rpki-client