Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/5a682603-8fad-31da-b4c1-93b8fee5501b.roa
File:                     5a682603-8fad-31da-b4c1-93b8fee5501b.roa (raw, json)
Hash identifier:          OgWBeKrcM9undqX8AxNUEQGTJJB1PWrzsJNRlMUQ5E0=
Subject key identifier:   E9:3E:8A:D1:98:7B:42:03:92:36:81:9B:73:BB:E5:BC:DE:7D:9D:3A
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F4328584D80FFEC3245E555B20460EF80
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/5a682603-8fad-31da-b4c1-93b8fee5501b.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     6363
IP address blocks:        2606:9fc0:f204::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:ec:32:45:e5:55:b2:04:60:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=59f992dc-ff94-485d-aef8-2347b4b7ccca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a4:23:32:22:a1:bc:84:34:3b:36:ac:98:94:
                    80:aa:df:a3:45:03:6a:57:6d:37:f2:af:e4:2d:34:
                    66:13:22:ad:74:21:da:43:40:64:01:03:03:77:48:
                    f1:73:0f:3e:e3:36:05:86:f5:27:fe:ac:fc:ca:70:
                    11:af:3a:a5:1a:ff:4d:de:36:19:b0:9e:65:ac:72:
                    06:b6:d0:bc:a1:d7:ba:43:b4:3f:39:75:ae:09:89:
                    f5:3d:d3:ba:70:d8:13:c5:5b:7a:70:03:8c:d8:39:
                    38:e3:86:8d:30:dd:2e:d8:33:89:3b:72:00:1a:87:
                    18:48:04:7c:2c:02:35:cc:f2:16:26:d0:ce:27:65:
                    f3:d2:ef:4e:4a:38:04:ed:35:5f:d4:f0:c3:8a:7c:
                    2b:01:b6:99:3a:8c:53:9f:3b:26:7e:ce:fb:6f:14:
                    d1:ca:d5:31:55:ec:7d:21:c2:04:ce:64:a1:20:c8:
                    cd:69:8e:4a:a3:14:40:32:79:09:c3:b2:9d:98:33:
                    5b:b8:21:35:2c:e7:8a:7f:50:06:b8:ac:41:bb:fd:
                    c6:1c:fc:16:58:b3:53:eb:3c:23:be:ad:70:3d:3a:
                    8d:c5:57:e9:b8:c4:65:66:6e:b3:c9:eb:fc:03:36:
                    76:93:03:f8:f1:07:80:c4:b1:f3:17:13:4b:1a:4c:
                    6f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3E:8A:D1:98:7B:42:03:92:36:81:9B:73:BB:E5:BC:DE:7D:9D:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/5a682603-8fad-31da-b4c1-93b8fee5501b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:f204::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:9e:6b:69:a6:cb:2e:90:8a:ec:af:a0:cc:9b:b6:97:06:db:
         b8:75:96:7d:e7:34:db:88:f5:c6:b7:b1:8e:d2:de:83:89:87:
         8c:ed:d4:a4:62:fc:4c:a1:47:0e:6b:cf:08:62:15:a5:70:14:
         67:42:6d:89:e7:5b:a4:fc:5a:11:2e:52:5d:b2:ac:0b:f8:e7:
         a7:83:f3:73:e7:c0:57:51:74:98:ca:47:9b:13:0a:c5:ca:91:
         a9:a7:03:b4:cc:7d:8f:f3:72:f8:f5:5e:a9:83:c2:3f:a1:a4:
         41:7f:d0:53:17:75:1a:ac:a1:06:c1:68:b4:63:b9:46:10:6f:
         3d:f5:c0:89:dd:c5:21:2e:f8:80:cc:58:27:7e:ef:82:3d:09:
         ee:1c:1c:7f:e6:75:11:88:e4:95:e8:55:52:0d:6e:db:5a:3f:
         73:46:24:14:82:12:ec:c8:b8:72:d9:b8:44:e1:fb:8c:60:19:
         e5:d5:f4:b2:86:3f:b5:4d:4f:3f:1f:03:c9:67:bd:7e:02:33:
         6d:ea:9d:2a:2b:73:c4:96:32:f7:f7:99:33:43:35:4b:b1:96:
         df:c6:40:f0:e9:15:bb:65:30:6b:33:f9:d5:52:08:63:91:a6:
         2c:84:ac:7b:5d:cc:d0:a5:37:ef:ff:03:95:69:59:7e:47:72:
         12:06:ba:e1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2A/+wyReVVsgRg74AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx
YmUwMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk
NTlmOTkyZGMtZmY5NC00ODVkLWFlZjgtMjM0N2I0YjdjY2NhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaQjMiKhvIQ0OzasmJSAqt+jRQNqV2038q/k
LTRmEyKtdCHaQ0BkAQMDd0jxcw8+4zYFhvUn/qz8ynARrzqlGv9N3jYZsJ5lrHIG
ttC8ode6Q7Q/OXWuCYn1PdO6cNgTxVt6cAOM2Dk444aNMN0u2DOJO3IAGocYSAR8
LAI1zPIWJtDOJ2Xz0u9OSjgE7TVf1PDDinwrAbaZOoxTnzsmfs77bxTRytUxVex9
IcIEzmShIMjNaY5KoxRAMnkJw7KdmDNbuCE1LOeKf1AGuKxBu/3GHPwWWLNT6zwj
vq1wPTqNxVfpuMRlZm6zyev8AzZ2kwP48QeAxLHzFxNLGkxvFQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOk+itGYe0IDkjaBm3O75bzefZ06MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4
NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvNWE2ODI2MDMtOGZhZC0z
MWRhLWI0YzEtOTNiOGZlZTU1MDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz
ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx
MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1
OTI1MTFiZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgafwPIE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABqea2mmyy6QiuyvoMybtpcG27h1ln3nNNuI9ca3sY7S3oOJh4zt
1KRi/EyhRw5rzwhiFaVwFGdCbYnnW6T8WhEuUl2yrAv456eD83PnwFdRdJjKR5sT
CsXKkamnA7TMfY/zcvj1XqmDwj+hpEF/0FMXdRqsoQbBaLRjuUYQbz31wIndxSEu
+IDMWCd+74I9Ce4cHH/mdRGI5JXoVVINbttaP3NGJBSCEuzIuHLZuETh+4xgGeXV
9LKGP7VNTz8fA8lnvX4CM23qnSorc8SWMvf3mTNDNUuxlt/GQPDpFbtlMGsz+dVS
CGORpiyErHtdzNClN+//A5VpWX5HchIGuuE=
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:45:22 2026 by rpki-client