Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/71b5019b-87e0-36d2-97df-963a1e3fde91.roa
File:                     71b5019b-87e0-36d2-97df-963a1e3fde91.roa (raw, json)
Hash identifier:          SvvS+8j1wa++2vjM3gidBlLN69+mdi043jmzEb8V1qo=
Subject key identifier:   81:76:31:EC:1E:39:52:E5:21:1F:2A:01:D4:C5:AD:1B:F0:74:7E:B2
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F43285849ED1A3C3208DDE21E588C7680
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/71b5019b-87e0-36d2-97df-963a1e3fde91.roa
Signing time:             Wed 21 May 2025 11:13:16 +0000
ROA not before:           Wed 21 May 2025 11:13:16 +0000
ROA not after:            Tue 19 Aug 2025 11:13:16 +0000
asID:                     6363
IP address blocks:        2606:9fc0:f000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:1a:3c:32:08:dd:e2:1e:58:8c:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: May 21 11:13:16 2025 GMT
            Not After : Aug 19 11:13:16 2025 GMT
        Subject: CN=0589d8a8-ff75-43f6-8313-db8687f28763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fb:94:78:68:26:c0:38:69:09:01:e2:e2:83:
                    96:36:7c:76:d5:c6:7a:17:eb:7d:c5:e8:2e:06:23:
                    b4:10:7d:c6:71:5c:f9:ee:66:de:52:53:11:99:fe:
                    13:53:af:5c:40:53:15:5c:ef:bb:cc:4b:d0:8b:dd:
                    b7:fc:d6:e3:9b:6a:ed:17:ea:1c:74:76:cc:6b:80:
                    e6:21:ca:51:e6:03:f6:bf:c2:5c:56:50:f8:40:9a:
                    53:9f:b0:31:b6:bc:5f:3e:2b:03:47:78:8c:51:cb:
                    69:f2:16:f0:79:a1:35:94:56:2a:d9:7c:72:78:05:
                    e8:66:2d:28:46:b1:a8:d0:5f:53:20:1a:5c:b1:e5:
                    ca:0c:59:38:8b:80:4e:e5:d4:a7:c2:54:bc:79:63:
                    8e:00:38:00:83:2c:2c:10:8f:eb:e8:ba:49:07:d9:
                    98:1a:5f:b7:40:27:98:8b:57:f8:97:df:41:fa:d8:
                    4d:b9:86:41:43:1e:d5:e1:ac:67:ff:25:ee:9a:9d:
                    8d:81:7e:82:e8:f8:98:14:20:63:97:c2:b1:52:b2:
                    f2:f1:88:73:06:db:e5:46:1f:1b:7b:c0:80:39:22:
                    5b:92:a7:7b:01:44:30:7f:e8:29:20:5f:1f:26:03:
                    e5:5e:a8:65:66:ea:c5:60:96:c7:9a:0e:2d:a5:54:
                    56:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:76:31:EC:1E:39:52:E5:21:1F:2A:01:D4:C5:AD:1B:F0:74:7E:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/71b5019b-87e0-36d2-97df-963a1e3fde91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:f000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:4d:72:bd:0c:a5:1e:da:e3:f7:fa:4a:50:a8:ed:83:0d:e8:
         32:36:10:14:53:4d:9d:66:3c:16:b0:1c:ed:27:f9:86:5d:64:
         3e:bf:26:45:f4:21:a8:8f:8d:da:8b:dc:ad:de:e2:fe:4d:0b:
         53:78:7a:8f:00:98:91:90:fe:c7:32:2b:38:fb:93:a4:0c:81:
         91:24:65:89:29:04:b8:49:b3:82:60:a9:4c:1d:ef:dc:4f:95:
         64:9f:ea:03:ac:36:23:44:8e:45:ee:f0:2b:89:db:1a:c3:2d:
         19:63:87:ae:0f:ab:2b:e0:9d:9a:dc:fd:0d:c0:8b:f2:e7:ef:
         43:23:67:a4:4f:d9:8a:ab:2d:d0:03:45:c9:84:15:3f:f9:64:
         90:57:d9:d4:92:a9:47:2f:2d:85:13:bf:2d:6b:e4:12:92:2a:
         fc:6a:f6:50:38:cb:16:82:c1:d1:01:2c:ca:86:85:a6:90:09:
         b4:a7:7e:b7:01:32:7b:e2:e9:39:87:65:3d:1f:58:96:26:2e:
         2a:07:cd:36:29:ae:0e:2f:1e:40:c8:e0:d4:39:75:b8:27:6f:
         66:69:39:9c:63:eb:52:63:32:f3:4b:e6:a2:d1:78:18:eb:2e:
         fb:f2:6b:4c:02:b5:28:a6:88:74:48:cb:45:e5:71:43:a5:16:
         c3:ff:67:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:20:45 2025 by rpki-client