Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/87e97ddf-ffdd-3d10-9643-152fd441a2a0.roa
File:                     87e97ddf-ffdd-3d10-9643-152fd441a2a0.roa (raw, json)
Hash identifier:          SRCUqy921B+UTk3DKkH3jG/PWElgiA2C3us37p3E9I4=
Subject key identifier:   BB:AF:BA:F2:14:1E:9F:B7:16:18:EF:AA:97:BF:0D:78:C9:E0:09:F0
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F4328584CA061BF3F960EBDB185680FC0
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/87e97ddf-ffdd-3d10-9643-152fd441a2a0.roa
Signing time:             Sat 24 Jan 2026 02:00:31 +0000
ROA not before:           Sat 24 Jan 2026 02:00:31 +0000
ROA not after:            Fri 24 Apr 2026 01:00:31 +0000
asID:                     6363
IP address blocks:        2606:9fc0:f20a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a0:61:bf:3f:96:0e:bd:b1:85:68:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: Jan 24 02:00:31 2026 GMT
            Not After : Apr 24 01:00:31 2026 GMT
        Subject: CN=5fc24609-0864-4936-8887-6fd71f6007ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:84:f7:88:6f:a2:26:64:66:4d:1e:d2:17:3a:
                    6b:0b:ae:ee:26:d0:05:8c:55:11:66:18:37:62:d5:
                    2f:7e:70:89:2c:8b:6d:72:fd:12:32:cc:ca:4d:3f:
                    a2:d7:83:6b:f6:dd:6e:a6:c4:22:a2:21:6c:11:d4:
                    91:b1:c1:4d:b5:f2:6c:9e:2a:00:88:2b:0e:a5:69:
                    39:65:cb:bf:54:85:60:8d:4b:dc:53:d8:dc:0b:fe:
                    5e:de:1d:99:d5:9a:d5:d1:86:2a:cb:ea:dd:14:f6:
                    be:d7:df:eb:08:7f:58:1a:36:9d:d6:39:c5:f2:ba:
                    fe:99:02:d9:85:b5:aa:05:8b:bb:b9:12:06:c8:88:
                    f1:d4:cf:5c:78:d9:03:d7:a2:99:65:e9:f2:ca:79:
                    70:b8:1a:bc:0b:bf:7d:fc:03:d2:d8:08:16:23:b3:
                    a6:fa:70:f5:1c:96:09:d4:44:c8:62:ed:6c:e6:da:
                    9a:d0:97:a1:8d:d7:ce:f4:ed:ac:b9:a2:67:c9:d3:
                    fe:d3:83:94:3a:f5:b4:16:8f:ed:73:a4:f2:93:4d:
                    30:80:d3:8d:a8:e3:ef:98:2a:ac:22:95:75:2c:cb:
                    af:36:c5:13:a9:ab:a0:d1:af:3a:2d:07:4b:a5:5a:
                    14:53:3e:b1:8b:ba:11:0a:17:d9:92:d9:9f:69:41:
                    ce:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:AF:BA:F2:14:1E:9F:B7:16:18:EF:AA:97:BF:0D:78:C9:E0:09:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/87e97ddf-ffdd-3d10-9643-152fd441a2a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:f20a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:79:93:07:23:4d:4b:49:f7:09:f0:00:83:ff:21:e4:0c:1a:
         3d:fe:ca:57:8e:eb:0a:46:9b:7c:0a:80:92:bf:42:1c:f6:79:
         5a:c1:9a:ce:40:65:53:b3:4d:d2:dc:88:e6:53:c7:0e:ba:94:
         82:30:11:45:b8:38:fa:aa:ea:f6:c4:62:ad:b0:81:cb:c5:32:
         b5:49:b0:18:dd:3a:4f:21:5a:ce:4e:25:77:b5:0c:7a:2a:aa:
         26:42:96:03:c0:39:36:34:c9:f6:53:ef:f5:9d:78:35:e8:7f:
         ed:75:04:7c:dd:0a:65:97:ec:3c:67:72:2f:a8:d6:3c:27:bd:
         9e:1e:19:a8:12:ed:a4:fc:6f:bf:7d:5a:77:57:5f:80:a5:fd:
         fd:ef:de:2b:0d:21:4c:98:76:72:6d:b3:c3:e2:53:a9:56:48:
         31:b0:8d:2d:8c:66:84:71:ee:bc:11:c0:36:56:60:8a:fb:96:
         f0:30:b4:df:1d:a3:84:22:92:7b:01:1a:6b:1f:89:2c:b9:87:
         65:a6:a0:74:90:d4:50:8c:f1:53:df:35:b5:88:40:19:e4:8f:
         76:13:d4:36:61:a9:9d:ce:22:33:b7:6d:6a:b8:f2:b4:ac:62:
         f0:83:60:9d:8e:18:2a:0f:e1:4f:0a:f2:ae:70:d0:18:e4:30:
         57:df:10:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:22 2026 by rpki-client