Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/4813d4fd-742a-3a0f-9f80-f8118a524a05.roa
File:                     4813d4fd-742a-3a0f-9f80-f8118a524a05.roa (raw, json)
Hash identifier:          C9QDEqHVLws0zMYwOB6KAyqdOIgdLW28y+NjbpfsWoE=
Subject key identifier:   41:3E:06:AE:95:DF:D0:8C:FB:AC:A1:01:0A:BD:3E:B5:B5:65:A5:4E
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F4328584BBFA5BBADD704CED92B007F00
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/4813d4fd-742a-3a0f-9f80-f8118a524a05.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     6363
IP address blocks:        2606:9fc0:f20c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:bb:ad:d7:04:ce:d9:2b:00:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=a8becee6-4a25-4a36-a245-840ba2fcbb44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:15:38:18:43:b3:60:ca:10:4a:82:b9:dc:2a:
                    96:ac:7c:de:ff:83:9e:54:dc:35:e8:58:ff:c7:97:
                    2a:f5:a2:9d:e9:2a:84:9a:20:b4:6a:cc:d6:46:8c:
                    ca:7b:29:74:d5:14:80:e9:ab:18:26:72:82:67:91:
                    46:e8:31:3e:93:48:8b:8c:4a:5d:22:32:59:77:9d:
                    6a:34:39:63:57:ad:f7:27:9c:e7:d7:1b:bf:55:fd:
                    81:6a:7b:4d:b3:be:bd:28:50:5e:68:34:91:86:e6:
                    a8:13:18:e8:71:28:88:c0:6f:b7:13:8b:74:3a:25:
                    b3:17:5d:3d:89:00:35:b9:da:e4:22:10:c5:39:d2:
                    89:44:a7:b4:7f:ad:62:a8:06:82:ad:52:6c:79:e9:
                    59:8d:f4:53:d3:c3:90:64:4d:54:51:47:63:d4:9c:
                    81:a8:e8:37:3c:4c:b4:40:d7:ed:1a:93:e9:3d:b0:
                    4f:31:ee:12:df:d1:95:f1:d7:70:fa:34:bc:ef:dd:
                    1b:40:f0:7a:8a:dc:7c:9a:fe:b4:e2:3e:08:e7:e3:
                    22:c4:bb:be:8c:5c:4d:10:e2:8f:3f:a6:74:8e:42:
                    3d:df:eb:a0:a0:64:3f:c1:23:6e:dd:09:e6:05:47:
                    0b:bd:af:61:a0:0d:b4:cb:e9:b2:72:96:e5:05:fe:
                    de:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3E:06:AE:95:DF:D0:8C:FB:AC:A1:01:0A:BD:3E:B5:B5:65:A5:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/4813d4fd-742a-3a0f-9f80-f8118a524a05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:f20c::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:6c:cd:7b:69:c1:03:02:cb:ec:64:31:79:00:af:4a:88:1a:
         8b:a0:9f:dd:23:11:8a:2b:10:de:a2:03:eb:e0:5f:b0:8a:cc:
         f3:44:cb:dd:fc:69:cf:4e:0b:73:19:2e:48:21:01:71:a2:b9:
         92:81:c9:5b:c7:54:a3:bf:b0:2f:a5:b7:b9:17:81:ad:14:09:
         ba:c8:a9:8f:6b:ce:1d:8d:b3:ac:f7:8a:fb:ae:01:07:8a:09:
         ff:23:33:f5:5c:1d:13:44:31:45:d8:a6:60:70:c2:b7:ab:d4:
         a7:a7:0f:93:63:6f:60:3c:8b:8b:da:c3:5c:a6:7b:19:b7:10:
         5a:19:2e:80:43:d5:bb:be:db:9d:99:b3:3c:1f:7e:0b:f2:53:
         e9:54:9d:15:12:c0:d8:21:e5:2e:75:d3:03:4e:8b:01:3f:43:
         5d:1c:34:13:11:17:a5:57:d1:81:1b:8b:93:20:37:ac:ab:33:
         67:da:2f:6f:4d:6d:f1:40:f0:1e:b9:ea:eb:17:fc:1d:f4:41:
         ad:83:bb:fc:78:a7:23:c0:6b:e8:e5:ca:f2:7b:0e:7d:b5:14:
         1b:89:34:7b:ca:8b:e7:e2:30:37:dd:cd:43:bc:1c:97:6e:6f:
         53:af:82:11:63:6a:8c:69:f5:df:47:1b:78:7a:ab:35:90:6e:
         ee:0c:65:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:30:27 2025 by rpki-client