Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/58e1aea4-eb07-3194-aa8a-9fee3a562fda.roa
File:                     58e1aea4-eb07-3194-aa8a-9fee3a562fda.roa (raw, json)
Hash identifier:          dwcbtbiSWh1CEcTkc4z4b1KQ9r6ARwFxMk689VT5RYc=
Subject key identifier:   4F:F6:6D:AA:3C:AA:4D:99:B6:F6:FA:27:D1:E1:2B:72:B9:6B:FF:45
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F4328584CA061BC87854E3838F4DD3940
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/58e1aea4-eb07-3194-aa8a-9fee3a562fda.roa
Signing time:             Sat 24 Jan 2026 02:00:31 +0000
ROA not before:           Sat 24 Jan 2026 02:00:31 +0000
ROA not after:            Fri 24 Apr 2026 01:00:31 +0000
asID:                     6363
IP address blocks:        2606:9fc0:e00c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a0:61:bc:87:85:4e:38:38:f4:dd:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: Jan 24 02:00:31 2026 GMT
            Not After : Apr 24 01:00:31 2026 GMT
        Subject: CN=c3043c12-9b03-4b25-8f97-c3936ba6c69d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:df:72:01:8d:a1:be:7e:b0:f1:a7:60:c5:1b:
                    2c:83:9d:16:b1:7a:1c:77:7b:93:3a:66:9b:fc:fc:
                    75:3c:48:8b:c3:6a:c3:3d:1e:f3:6d:4a:db:01:e0:
                    59:4e:e6:bb:a4:84:a6:9d:7d:0d:66:10:25:f1:08:
                    11:e7:84:5d:6b:1d:b6:21:2f:b7:63:c9:d7:24:4c:
                    88:ba:e6:1b:cb:12:17:1f:f1:b0:17:00:17:0c:bb:
                    21:b1:46:53:bd:0c:f1:66:59:0e:43:bd:d5:fa:72:
                    3f:ac:9d:26:22:8a:b9:ee:ad:81:18:6f:1e:04:08:
                    93:cb:1e:9e:ae:60:c8:f5:44:da:6e:c3:32:fa:27:
                    69:73:00:2d:5a:2e:96:96:40:cc:d8:4a:aa:ec:39:
                    6f:e9:fc:c3:4b:73:c6:c1:88:6d:32:3c:ad:ba:9b:
                    4a:84:da:fd:b9:9b:bf:be:4c:2f:e4:bb:2a:d3:2e:
                    69:45:1d:dc:98:db:a2:08:47:7d:ee:6e:fc:49:53:
                    6b:48:d9:ae:12:a4:a9:0c:3a:95:9b:64:84:57:0f:
                    65:ef:b5:c4:3c:71:f8:17:68:b7:2e:23:be:69:e8:
                    3e:d5:f9:77:ec:15:d6:fc:09:d0:86:2e:a9:a1:1b:
                    2c:b5:4a:38:39:1e:dd:a6:c0:b6:8c:0c:d2:e6:2b:
                    5c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F6:6D:AA:3C:AA:4D:99:B6:F6:FA:27:D1:E1:2B:72:B9:6B:FF:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/58e1aea4-eb07-3194-aa8a-9fee3a562fda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:e00c::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:e7:9a:6d:08:45:1a:a1:e0:fa:6c:fc:a0:65:39:83:1c:49:
         f2:b2:17:b3:a0:0c:7b:67:8d:5d:b4:ea:87:42:03:dd:c5:1a:
         37:d8:e6:b6:14:5e:52:c7:c9:a0:32:d8:49:7b:82:bb:09:92:
         6a:60:84:0f:d9:17:c3:d3:c6:2a:93:70:ce:ce:2b:4b:23:53:
         ed:01:ca:d3:2a:2b:cc:07:b8:f2:c4:d9:86:0c:60:02:ea:19:
         74:0a:5d:97:f2:94:35:8b:31:e7:66:7b:de:be:58:78:f5:04:
         06:3a:20:cf:8b:82:0e:f5:06:9b:6f:af:a2:44:8a:62:cf:72:
         4c:51:ca:b3:cb:2b:2d:1e:d7:4c:4f:d1:ea:8a:e6:e5:61:85:
         52:7d:4c:9e:87:df:cf:22:d9:dc:6b:7d:8c:0b:d5:2b:be:7a:
         d4:d9:99:e2:ae:1f:b5:a7:5d:8e:1c:17:ca:e1:33:9b:37:d5:
         fe:4b:c2:26:22:b5:6b:98:08:5b:e6:49:90:9a:f3:39:27:82:
         f6:e9:b8:6f:ec:d8:42:42:bc:2c:8c:81:47:b5:0a:85:06:68:
         0d:1f:24:8e:fa:bb:d9:81:9a:b3:c9:ea:6e:af:00:b6:8c:a2:
         a5:d5:62:21:71:80:9e:7d:72:68:0b:46:32:35:5b:eb:f8:be:
         2b:9a:d8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:47 2026 by rpki-client