Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/2ba24ee2-2c27-3427-9c64-dc1f79dd0f14.roa
File:                     2ba24ee2-2c27-3427-9c64-dc1f79dd0f14.roa (raw, json)
Hash identifier:          YOFkP280R3KoCVDdUsSUNY0W+sWguaALTMymppCkUUY=
Subject key identifier:   B9:BC:9F:FD:24:57:D1:4C:2C:B9:19:0A:EE:A8:FF:49:A8:A1:E3:63
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F4328584D8100AA8AA29393292C431180
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/2ba24ee2-2c27-3427-9c64-dc1f79dd0f14.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     6363
IP address blocks:        2606:9fc0:e004::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:aa:8a:a2:93:93:29:2c:43:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=5caa851e-df6b-46c3-b339-b46187e3f9da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:89:9d:9d:32:af:5c:d3:0c:7f:db:0b:1e:c0:
                    77:02:95:d6:a0:65:6a:bc:80:ce:77:48:d3:43:0a:
                    0a:e7:ab:88:81:08:b5:3b:0c:e8:36:84:98:e2:4e:
                    97:2b:fa:c2:50:b7:fb:72:27:c0:83:63:4c:71:62:
                    6d:95:f1:33:e4:c1:27:e8:40:c6:d6:9a:88:84:4b:
                    2b:d0:70:bc:ac:7a:b3:7a:e3:cc:64:e0:b9:2f:bb:
                    58:46:0c:27:2b:d7:3b:1b:88:50:06:d4:cd:aa:74:
                    c7:da:0c:67:2c:e8:40:09:76:88:76:e1:8c:48:e6:
                    b6:70:6b:45:74:ec:fb:39:a5:43:34:74:91:10:6b:
                    55:02:44:61:23:32:d9:e2:84:cb:02:cd:6d:e8:26:
                    0a:74:a8:dd:1c:29:2d:1c:5f:09:0b:43:cf:10:23:
                    21:bc:cd:53:ba:f3:71:54:e4:9c:5f:2d:fd:25:c9:
                    bc:4f:b2:79:c7:a5:bc:c5:33:fc:ea:5a:12:15:53:
                    f2:00:21:a2:3f:03:cf:21:f3:83:b4:b9:16:42:44:
                    6a:b8:43:6e:9a:86:94:34:21:f1:4e:de:c0:1a:d0:
                    4d:2b:63:86:56:6f:46:44:be:66:5d:3d:4b:6b:b6:
                    b9:4f:98:35:8f:e8:04:df:a8:53:21:f3:6d:62:8e:
                    fb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BC:9F:FD:24:57:D1:4C:2C:B9:19:0A:EE:A8:FF:49:A8:A1:E3:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/2ba24ee2-2c27-3427-9c64-dc1f79dd0f14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:e004::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:a4:b8:a0:93:da:3f:33:3b:64:3e:0f:e0:90:49:ff:8a:ae:
         c9:43:94:63:48:6d:b1:22:eb:cf:b8:f2:b0:3f:ec:d4:a0:da:
         eb:75:bf:3b:13:e4:b7:9f:8a:f1:40:f0:b6:44:38:ae:11:be:
         61:72:66:fe:d4:85:08:41:3f:2e:65:35:38:fd:fe:e4:16:26:
         83:4b:4f:2e:d4:74:7a:d9:3c:82:9e:fc:e6:c9:de:64:c5:f2:
         c4:fc:65:d3:8b:2c:ef:77:a9:7e:fa:ef:1c:75:1d:63:a6:11:
         52:3f:48:da:bd:4d:54:ee:fb:27:b9:29:3e:dc:90:9d:95:cf:
         df:05:7d:c2:00:ed:43:9a:a0:f8:44:95:ec:49:d6:c8:1c:e7:
         f6:58:ba:d1:53:65:85:19:e1:0f:65:ef:c6:07:47:21:17:b2:
         34:a1:5a:37:b1:ff:ec:ed:1c:43:85:1e:1e:16:0b:cd:6b:98:
         6e:67:d7:fa:7c:25:30:52:4d:f8:75:bb:92:15:54:84:00:76:
         16:53:4e:69:f8:d4:28:83:9d:4a:59:5e:fd:0f:2c:b7:44:ac:
         64:f3:28:30:67:ef:2d:1e:f9:19:16:f8:e6:9d:5d:7b:28:6d:
         f4:46:37:c3:cb:74:65:9f:57:ff:d4:5b:4a:df:c8:cc:3c:7a:
         0d:49:46:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:56:20 2026 by rpki-client