Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/b77f4f0b-e95a-38b6-ad14-6ed509ea6b97.roa
File:                     b77f4f0b-e95a-38b6-ad14-6ed509ea6b97.roa (raw, json)
Hash identifier:          PaNtG7nS77PAY4tr6qSb3cmahQ3nPMqzkl1NgyO54iM=
Subject key identifier:   8B:59:75:C9:57:6A:E7:CD:CE:4D:16:18:09:7F:27:B9:7B:37:EA:FE
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F43285849FE202FD9780AF084601938C0
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/b77f4f0b-e95a-38b6-ad14-6ed509ea6b97.roa
Signing time:             Tue 27 May 2025 13:34:00 +0000
ROA not before:           Tue 27 May 2025 13:34:00 +0000
ROA not after:            Mon 25 Aug 2025 13:34:00 +0000
asID:                     6363
IP address blocks:        2606:9fc0:d002::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:20:2f:d9:78:0a:f0:84:60:19:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: May 27 13:34:00 2025 GMT
            Not After : Aug 25 13:34:00 2025 GMT
        Subject: CN=2f3f7760-be25-4e4f-8a8a-2eab44544dca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c5:ac:b9:3e:6a:97:35:6e:7b:91:6b:84:f5:
                    cf:4f:41:74:44:b3:2d:82:8b:a0:19:1f:d6:2b:35:
                    2c:12:be:5b:f2:f0:db:ef:c0:b7:a0:c6:1e:42:52:
                    e6:88:74:39:db:a3:87:85:34:ed:65:c3:3e:89:04:
                    d4:c6:05:79:3e:ac:9c:73:b0:18:a2:37:21:89:34:
                    bd:d6:5a:56:7f:82:4f:29:ad:94:9c:3a:65:c6:d3:
                    c2:7e:5d:d7:9f:74:71:e2:7d:06:98:12:9e:ea:2f:
                    e8:ae:e8:7e:29:95:f5:93:d9:b9:e2:38:54:9e:c9:
                    e3:a6:95:34:12:b0:6e:32:f3:17:58:3c:da:20:f0:
                    64:98:a1:02:a8:9a:6f:5f:b5:20:ef:1e:a9:fc:b7:
                    d5:80:78:c0:19:e1:5e:f7:ff:ab:d9:e5:75:f1:72:
                    67:ba:7e:cc:51:51:3c:56:f9:48:f6:17:75:df:4a:
                    23:1e:9f:42:c1:48:98:33:aa:b4:9b:c5:6c:d4:ac:
                    9f:ff:08:dc:65:60:e0:4f:b3:98:5f:8e:a2:a3:24:
                    e9:38:ac:81:b4:78:0c:88:c8:3a:60:25:69:8e:5f:
                    78:29:cf:e3:7b:e6:86:b1:fe:15:4f:22:24:c8:3d:
                    97:ce:fc:a0:92:ca:d8:b5:d4:a1:7c:cf:cc:2f:29:
                    f2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:59:75:C9:57:6A:E7:CD:CE:4D:16:18:09:7F:27:B9:7B:37:EA:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/b77f4f0b-e95a-38b6-ad14-6ed509ea6b97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:d002::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:f3:94:03:66:5c:a3:29:ae:cd:11:13:cf:a6:9e:3c:5e:e7:
         49:4c:c2:e2:b7:26:45:82:65:20:3a:46:b0:7d:8e:52:eb:12:
         19:14:3c:dd:a0:66:61:d0:37:ea:a4:f0:34:b6:55:9a:ee:b5:
         04:08:80:82:44:07:4c:db:91:3f:7e:ec:78:61:af:95:e8:7b:
         01:97:6a:32:f8:3c:21:8d:95:c7:af:7a:55:17:3c:1f:2a:41:
         15:4a:ff:3e:e0:e7:86:c7:ba:8b:18:02:94:20:bd:d3:28:12:
         1a:0c:3d:27:12:7c:9f:a4:86:62:35:c6:a1:26:f0:8a:74:35:
         28:0b:b5:7f:0a:64:36:dd:e7:fb:f8:41:f7:6d:f0:9d:af:0c:
         96:53:f8:8f:bb:da:4d:94:d5:cf:9a:a9:25:0d:7a:ed:ab:03:
         4f:1b:1b:6f:b6:c1:19:41:96:fd:6f:10:64:16:b5:28:8e:c6:
         83:9e:92:24:dc:03:ec:6a:47:97:41:9f:e0:eb:e5:35:37:c5:
         54:04:bd:b8:d4:93:4b:58:28:76:4e:29:a0:b6:62:e8:fc:bc:
         fd:b3:b7:2b:58:37:44:9c:34:ba:d1:7d:0a:38:6d:24:7a:c1:
         d9:24:99:26:b1:1b:88:c9:e0:30:e3:46:a3:4a:48:79:a5:ac:
         7c:f5:e5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:58:43 2025 by rpki-client