Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/708953cb-d215-3fd6-93e9-296bb798a89d.roa
File:                     708953cb-d215-3fd6-93e9-296bb798a89d.roa (raw, json)
Hash identifier:          8p1QnVnVbPcX27mnt47ejsLEg0UJhDYR8G+zRj2h1nc=
Subject key identifier:   51:21:0D:A4:40:10:2A:F7:44:15:72:C2:94:B8:30:5A:D0:40:E0:5F
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F4328584D86953EA5B782B5E782BC7700
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/708953cb-d215-3fd6-93e9-296bb798a89d.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     6363
IP address blocks:        2606:9fc0:e004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:3e:a5:b7:82:b5:e7:82:bc:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=12e53def-2ec4-4696-b3cb-bf2219786ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:03:31:b0:ed:c6:f9:de:3a:c2:4d:28:10:44:
                    b6:25:d8:73:3f:24:f8:dc:77:59:2b:ee:73:8f:07:
                    9e:b4:3c:96:13:0e:03:6a:7c:31:91:d9:40:8d:cd:
                    c1:d5:96:e4:0c:22:eb:af:92:34:bc:94:e7:3e:fe:
                    c8:6c:46:5a:cc:fd:28:7c:51:5b:e6:09:b2:be:ae:
                    55:14:82:fb:5f:57:f8:ee:f5:a6:20:45:e6:48:23:
                    73:53:a4:eb:dd:f1:80:16:4b:6e:0d:8e:79:36:e9:
                    49:86:19:af:01:ad:54:10:c3:67:78:bd:58:c9:cf:
                    77:8e:6a:fc:88:f9:62:69:71:b1:64:8a:1c:21:72:
                    20:6a:5b:41:9b:69:2c:0c:56:84:03:4d:64:f0:8b:
                    9c:83:68:c8:1a:03:36:e3:bd:d9:2d:c5:bf:d3:ef:
                    4d:ab:43:b7:89:52:ac:ab:fc:fc:50:0e:2f:6c:9c:
                    9c:5c:01:93:62:6c:84:7e:6a:19:d7:2f:54:07:85:
                    8e:e8:f9:68:b5:08:a1:96:cb:c6:1a:41:14:ba:2c:
                    84:8e:57:fa:ce:c3:0a:4a:8b:48:7c:54:09:bd:24:
                    43:e1:c2:4c:f5:de:41:0f:22:20:8d:38:e7:0f:b9:
                    bc:94:a8:99:c7:15:72:ac:0d:4a:0a:24:8d:8f:23:
                    10:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:21:0D:A4:40:10:2A:F7:44:15:72:C2:94:B8:30:5A:D0:40:E0:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/708953cb-d215-3fd6-93e9-296bb798a89d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:e004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ce:08:7d:0d:ea:6b:f9:a4:f9:fb:84:97:e5:77:7d:34:6a:
         b6:95:3c:03:11:c6:de:51:19:01:70:fb:81:88:80:d5:78:a1:
         59:e3:05:e3:7b:7f:02:47:4a:99:64:6a:1d:a6:93:4d:cd:ea:
         79:00:1e:1c:c8:3a:44:3f:a4:93:77:b9:88:03:2f:9a:b3:5e:
         b6:3b:d8:b4:eb:c7:cc:3f:d4:e1:e6:55:a8:95:23:f4:58:2d:
         00:59:0a:dd:70:1a:5f:0f:8b:2a:c7:1b:ca:a1:d9:94:55:96:
         96:ba:68:04:63:77:32:28:b0:f0:50:b2:aa:00:89:e4:65:ae:
         69:7f:8c:40:b1:ff:ba:9d:0d:95:16:e9:2c:aa:98:0b:51:09:
         76:a8:07:de:b3:53:d9:1f:da:a5:2a:fc:aa:0c:bb:59:7a:13:
         88:94:80:56:45:40:8d:bd:3f:78:f8:01:7f:44:33:39:a2:60:
         a5:76:46:a3:02:fe:b8:e5:c8:77:fe:59:45:05:5e:1f:32:52:
         ee:ed:25:44:5b:c2:7d:55:cb:e8:93:78:88:22:9f:80:97:b0:
         29:7a:fc:37:39:e5:23:68:08:c2:78:18:f3:cf:5d:70:55:71:
         cb:99:7e:41:8f:48:ed:85:bb:6b:9b:43:d4:2f:0e:a3:5a:8f:
         ec:dd:cb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:43:59 2026 by rpki-client