Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/8cf20e1d-1e93-3fbd-909b-734f61934be6.roa
File:                     8cf20e1d-1e93-3fbd-909b-734f61934be6.roa (raw, json)
Hash identifier:          9ebGVCanSC5EgZHDQWZiP1sUTVVn3lxYkqO52TvVsYI=
Subject key identifier:   C0:82:9C:AE:15:82:4F:FF:6C:78:D9:97:D3:A1:DA:0A:DC:0B:E3:4B
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F4328584CEBC230CCF3163380D05A9180
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/8cf20e1d-1e93-3fbd-909b-734f61934be6.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     16509
IP address blocks:        2606:9fc0::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:30:cc:f3:16:33:80:d0:5a:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=277dc633-1ce7-4f68-99be-87211026c0ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2a:79:73:c4:6a:45:a6:68:fe:8f:84:ee:1c:
                    22:87:37:cb:72:ac:b8:90:66:75:ff:fc:f8:63:ad:
                    ed:94:96:fa:1c:1e:1e:61:77:22:f1:51:70:67:54:
                    14:25:9f:bd:61:47:cc:2d:05:16:49:6c:fa:31:68:
                    7f:cb:65:cd:3f:17:0a:45:1d:9c:ea:bc:74:d5:e2:
                    16:46:98:22:7c:ff:93:eb:8b:dc:3d:a8:e4:da:17:
                    24:df:e0:8e:9a:82:d1:9b:04:30:e9:04:6e:5f:94:
                    aa:28:7d:f2:67:9f:d7:57:01:cd:0d:28:9b:04:78:
                    4e:62:e1:b2:59:4b:ea:d1:c0:49:3f:d9:55:c4:93:
                    3e:e6:11:7e:68:84:2a:06:43:43:48:8f:6a:57:e1:
                    44:19:9a:87:ad:8c:89:01:54:54:62:7e:38:df:be:
                    74:85:d3:69:cf:49:8a:59:5f:34:5c:16:04:85:05:
                    88:78:07:01:46:57:c0:4e:03:17:09:36:b8:ad:6e:
                    84:08:4b:42:b2:15:45:5d:62:b1:aa:3f:8e:7e:67:
                    25:9c:ab:fb:55:fa:b8:c1:f4:a1:60:b4:c5:a9:c2:
                    12:c2:b9:27:62:4e:59:08:9f:2c:98:2a:49:2e:dd:
                    1a:48:e1:75:e8:4d:78:21:10:15:75:ef:d5:de:46:
                    0c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:82:9C:AE:15:82:4F:FF:6C:78:D9:97:D3:A1:DA:0A:DC:0B:E3:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/8cf20e1d-1e93-3fbd-909b-734f61934be6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:62:c4:ba:c1:16:59:82:9f:ea:a8:90:fe:38:4f:e9:8c:60:
         e6:76:8d:d5:4c:98:0a:96:fb:c5:c5:3d:22:2f:81:54:de:68:
         dd:68:ee:fc:34:6d:05:02:32:54:90:11:77:02:72:8d:82:79:
         ad:81:d3:57:c8:04:6a:05:70:0a:74:e8:8c:f7:54:94:c1:d7:
         01:51:a3:d3:18:8e:4f:af:e0:34:f3:51:c3:0c:6f:77:75:ea:
         9d:b4:97:a0:b0:00:70:f8:16:15:bf:f1:60:53:46:9a:9c:14:
         6a:93:37:dc:82:72:c4:1b:9b:e7:2b:5b:cd:98:2f:a1:b3:63:
         80:66:1a:f7:f8:9d:2a:ee:cb:70:e0:8b:d6:f5:b7:6c:bd:de:
         b9:f5:a2:dc:fb:32:e3:f6:a5:50:f3:4f:af:e5:80:b9:0c:82:
         fc:74:44:9f:ad:ec:45:e5:50:b4:15:48:82:1c:a2:41:00:c3:
         cd:45:27:4a:4c:9b:2e:d3:33:b7:8c:81:f1:3c:63:49:90:7c:
         0c:7f:86:82:74:57:b6:da:a1:8b:a0:10:fc:17:e9:e5:74:07:
         cf:6f:87:99:b1:aa:b2:5d:d0:da:a5:ae:a1:e7:c9:26:b9:07:
         c3:55:4f:46:25:16:e0:5a:23:3b:ec:41:70:a5:1e:35:73:18:
         67:33:40:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:38:09 2026 by rpki-client