Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/2dd085c4-03a5-3666-84f5-3919e0e8eba4.roa
File:                     2dd085c4-03a5-3666-84f5-3919e0e8eba4.roa (raw, json)
Hash identifier:          LrOKi2+4uSb1ZU4JivVjlJEIJvcpZEJDg4gSFTKvbhs=
Subject key identifier:   FE:4A:94:88:18:5E:52:58:1E:A8:5C:24:07:B0:55:90:1A:B0:2A:31
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F4328584CA061939C87DCC73D0091A380
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/2dd085c4-03a5-3666-84f5-3919e0e8eba4.roa
Signing time:             Sat 24 Jan 2026 02:00:31 +0000
ROA not before:           Sat 24 Jan 2026 02:00:31 +0000
ROA not after:            Fri 24 Apr 2026 01:00:31 +0000
asID:                     6363
IP address blocks:        2606:9fc0:e01c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a0:61:93:9c:87:dc:c7:3d:00:91:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: Jan 24 02:00:31 2026 GMT
            Not After : Apr 24 01:00:31 2026 GMT
        Subject: CN=9770f436-0be6-4e2a-8b7f-2f05e0eb3a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:55:9e:36:0c:bf:0f:03:50:98:36:fc:ea:08:
                    2c:0c:7f:00:76:2c:14:79:d0:ce:e2:a7:74:ff:f8:
                    75:4d:71:6b:56:ac:12:fb:6f:47:00:b3:e6:e0:c8:
                    2e:95:11:6b:d9:ae:22:37:52:ad:76:a2:07:1c:41:
                    39:a7:27:b5:94:49:ac:d5:ce:5c:5a:12:0b:59:c5:
                    12:4f:4b:d1:f3:c8:68:ff:b7:25:3f:4e:57:17:00:
                    e4:aa:15:c4:8f:6f:db:5d:cf:40:8f:ed:5f:ba:86:
                    1f:96:6c:48:03:97:2f:77:2c:94:79:ff:8a:a7:fd:
                    95:4c:5f:9f:95:8b:b3:c2:b6:a9:3f:92:2b:a5:c7:
                    3f:23:c9:b7:c2:74:0c:1a:54:4c:00:86:6e:7a:d2:
                    ef:1b:5b:1a:69:53:28:ab:e6:70:f7:27:c2:7a:ee:
                    f8:c6:7f:c2:9f:5c:b9:65:08:81:56:c0:ae:b3:50:
                    fa:06:dd:d5:61:8f:ed:af:10:19:76:40:b9:be:0f:
                    fc:24:55:4c:22:ae:22:b6:42:63:88:6b:48:19:1f:
                    90:a3:f9:0b:c9:e1:ae:0e:88:23:46:89:25:11:f3:
                    fd:c5:91:df:e8:54:31:a5:da:22:eb:be:ae:60:c0:
                    09:26:d9:77:c7:6d:b1:4f:76:4e:0c:79:97:20:be:
                    dd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:4A:94:88:18:5E:52:58:1E:A8:5C:24:07:B0:55:90:1A:B0:2A:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/2dd085c4-03a5-3666-84f5-3919e0e8eba4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:e01c::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:e0:54:b3:34:90:28:a9:55:59:c9:08:b5:a7:12:aa:bf:e0:
         54:44:6e:b5:3e:05:71:e6:08:84:5f:6d:db:8f:42:5d:bf:a7:
         af:04:86:af:1a:71:57:8d:68:19:87:8c:90:02:7b:8f:45:be:
         4c:ed:32:dd:c2:57:29:56:48:46:84:25:34:ab:1c:c7:88:51:
         20:e0:b2:8f:13:c4:6d:0e:9c:82:51:13:75:a7:28:af:13:35:
         07:bd:5e:ce:05:fb:c9:9e:23:98:b4:63:72:a0:c0:ff:dc:a7:
         a8:02:bf:bc:1a:00:2e:3b:f9:27:cf:d0:c1:45:07:85:9b:6a:
         f4:af:1f:3a:b1:91:e5:12:b7:b9:b5:72:da:80:f2:01:e5:3e:
         db:a9:01:d8:28:ab:0b:0d:cb:e9:b0:aa:e2:50:5f:da:12:63:
         5a:3e:16:1c:fe:0e:e8:94:94:1e:4f:1a:a6:33:eb:33:6f:04:
         b4:44:ea:99:86:58:30:8f:59:a0:ec:c7:90:e2:2a:97:89:1b:
         65:76:41:48:df:28:cd:e6:a4:81:ec:8d:57:5f:ac:44:0b:4e:
         56:69:d9:9f:fc:95:1f:c7:fe:22:6e:c5:10:c7:36:f6:5c:cb:
         f5:c7:22:3e:60:b6:79:90:2b:83:bd:93:f0:38:0d:d7:33:84:
         a5:97:5e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:55:09 2026 by rpki-client