Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/6ceb9ce2-aabb-35fe-b840-165cfd8404df.roa
File:                     6ceb9ce2-aabb-35fe-b840-165cfd8404df.roa (raw, json)
Hash identifier:          coD8KWR7PtaHb9m3L+cKFJBkI7tpZkI+QroWYik6bsw=
Subject key identifier:   CE:A6:E0:9F:7C:E8:02:08:4F:22:A1:6B:C5:AE:8F:B6:3D:D9:32:88
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F4328584F03A84959E883E5CBAFE34F00
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/6ceb9ce2-aabb-35fe-b840-165cfd8404df.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     6363
IP address blocks:        2606:9fc0:e01a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a8:49:59:e8:83:e5:cb:af:e3:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=e661fdba-05e9-4067-ae9b-4a52e0fbde7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:48:07:c4:d2:cd:65:da:d3:f7:85:50:13:d4:
                    58:39:17:f2:43:dd:4d:67:fc:df:0f:95:96:a9:7b:
                    2c:92:12:b4:d2:8c:e7:6f:ef:b1:f3:63:68:84:7b:
                    7b:6e:63:9e:29:7a:cc:9a:3f:3e:48:d7:eb:f7:9d:
                    4e:db:82:c3:d6:ec:6f:90:69:fd:f5:24:a3:f9:1e:
                    34:52:f1:6f:0d:39:8e:da:6f:bb:b9:46:5f:be:a5:
                    36:e2:13:30:b5:dc:ef:56:a1:d2:34:2e:7e:58:b8:
                    91:65:53:84:8e:93:2b:09:34:d7:b5:07:48:d6:b4:
                    96:4b:98:c9:b9:6c:38:d3:14:62:d6:7b:fd:ad:b5:
                    5f:6c:fc:59:98:4c:54:b7:cf:41:9e:53:fd:e5:04:
                    4a:3b:52:11:fe:09:39:21:ad:4d:36:f9:30:c9:f1:
                    1b:36:57:44:41:1e:6d:89:8c:29:3f:f2:6d:4d:5f:
                    f2:1e:bd:a3:fb:bb:16:50:79:c9:c1:bc:05:9d:f4:
                    46:6a:eb:7c:e2:3f:31:3b:8b:d0:2d:78:e7:55:94:
                    e8:9f:93:cc:4a:fd:3b:8f:8e:e6:91:c0:8b:c4:01:
                    ec:8b:44:1d:54:2c:5d:3d:c0:dd:1c:b4:b7:09:13:
                    45:cb:ca:ee:45:58:d3:50:18:d5:ed:a2:19:f5:ea:
                    bb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A6:E0:9F:7C:E8:02:08:4F:22:A1:6B:C5:AE:8F:B6:3D:D9:32:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/6ceb9ce2-aabb-35fe-b840-165cfd8404df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:e01a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:a4:50:c9:73:0b:31:49:61:07:2a:4f:3a:9f:80:a7:f7:e6:
         fa:be:8d:4a:15:69:74:90:6a:c5:77:dc:0e:fd:e1:8e:53:ee:
         ea:77:33:e0:ea:57:90:bd:4d:15:9f:3f:ab:73:d2:eb:5b:45:
         ac:f8:bc:95:38:7e:7d:70:88:12:79:0e:5a:35:14:05:32:71:
         39:bd:3f:ed:ea:cb:25:ac:ae:2a:47:06:4d:ba:7e:80:e7:58:
         54:d1:d9:22:b5:c9:db:9b:e2:df:56:8b:f7:cf:91:a2:3d:07:
         5b:1a:2e:3a:53:6c:40:1f:d4:5e:2e:b3:85:d3:ed:3b:f7:d6:
         11:ea:75:ef:d8:d3:a9:fe:4c:b7:fe:ba:98:73:67:72:b6:65:
         e4:cd:d3:2d:36:a5:48:49:4f:bf:73:d9:c9:41:75:d7:71:16:
         71:a7:27:34:ce:69:31:5d:fd:2d:2c:36:a2:cd:c0:a6:08:b8:
         b7:b5:7e:ba:7a:75:02:d7:68:89:eb:57:74:b0:98:d7:f5:c3:
         70:1d:da:36:a1:55:75:a4:cc:f5:0c:14:a3:8c:ab:20:fc:bb:
         8f:4b:0e:64:5e:e0:46:c0:5a:40:c0:7d:7e:f7:61:46:b9:cc:
         99:76:8b:a4:5f:3b:e6:dc:19:d7:3a:de:80:e7:48:f4:a3:96:
         84:2b:df:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:48:46 2026 by rpki-client