Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/cf28d96d-39da-39e5-aade-7826c420cf3f.roa
File:                     cf28d96d-39da-39e5-aade-7826c420cf3f.roa (raw, json)
Hash identifier:          ykFPxZ0XofMqXZAhBn+Cwzf/nHRfVUttGeudiUFi1Gg=
Subject key identifier:   24:FA:AF:A7:E8:37:28:6A:BD:35:B0:BA:06:4D:DE:28:3D:FE:E5:5C
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F4328584BBFA5B9622FD534CCA4216600
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/cf28d96d-39da-39e5-aade-7826c420cf3f.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     6363
IP address blocks:        2606:9fc0:d000::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:b9:62:2f:d5:34:cc:a4:21:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=1857943a-231a-42e7-b04d-c9968662290d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:16:f6:88:63:5d:03:85:40:3d:ff:25:e3:e5:
                    1f:a4:b9:b9:a5:54:9d:c6:ed:b6:e7:f6:7b:07:fd:
                    dd:0c:e6:4d:78:55:36:5b:32:69:01:d1:53:ce:85:
                    8e:fa:82:00:a8:36:fb:35:d2:04:43:18:41:b6:a4:
                    c7:c1:2f:87:6d:5e:40:f0:a8:5d:ad:45:5c:cb:ef:
                    47:cd:b7:73:04:37:63:f9:7c:0e:aa:a8:df:e1:f0:
                    e5:98:00:cb:a9:09:93:4f:79:42:45:c7:b2:2b:a2:
                    5c:ec:6d:ef:51:44:e4:d9:46:9c:7d:ed:75:fe:30:
                    f0:03:fb:8b:85:a5:b0:e4:be:ec:88:9f:53:cb:b6:
                    35:50:a3:b1:be:51:9f:a1:fb:7a:89:f5:35:4e:dc:
                    39:c6:c0:d0:e4:e3:ea:94:09:46:97:d9:c9:71:6f:
                    ff:ba:98:f7:93:77:d8:09:8e:25:d7:a6:1e:bb:ca:
                    5f:ae:a3:04:ae:4a:4d:84:9c:cf:21:ab:8e:9f:55:
                    9d:2b:f0:f6:a6:d8:5c:8c:5b:34:d3:47:79:2a:91:
                    aa:36:c6:e7:86:6c:62:8b:0a:3f:d2:3f:d3:ee:59:
                    26:c7:62:80:a1:b9:75:9c:04:9d:52:ab:f4:05:57:
                    56:f3:9f:4b:eb:60:c3:01:ce:71:98:2b:dc:2f:af:
                    dc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:FA:AF:A7:E8:37:28:6A:BD:35:B0:BA:06:4D:DE:28:3D:FE:E5:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/cf28d96d-39da-39e5-aade-7826c420cf3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:d000::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:85:88:53:9a:f9:f9:61:20:7a:fb:a1:9e:2b:fa:8e:fd:1d:
         29:ac:5a:78:19:cc:70:f5:b0:61:a9:b7:ca:b1:cf:81:7e:9e:
         b4:e0:29:e3:eb:58:e6:45:44:78:1d:76:2b:d1:8c:7f:a7:74:
         af:19:12:ea:75:1b:a4:8b:f8:0c:e8:79:96:ed:d2:f3:db:63:
         a7:d6:e8:46:37:f7:3f:19:08:9b:80:6d:ee:7a:74:ab:64:d7:
         ca:34:2a:53:48:af:c4:d5:ed:44:14:d7:1f:3b:5a:a5:82:12:
         75:64:c5:3e:bf:02:13:fa:25:c4:dd:20:59:7c:ac:4d:a8:2e:
         89:c4:c1:54:d7:db:e4:07:8a:08:a4:1d:40:10:16:c0:07:63:
         3b:9d:21:84:18:da:2d:9e:d8:51:9a:27:3c:20:44:d2:cf:79:
         e8:3f:36:3a:42:9a:90:28:4b:bf:fd:83:e1:ab:01:5c:d5:6f:
         32:c8:e5:ad:1d:dd:d9:a2:37:81:5e:cd:a8:ae:ac:57:71:c9:
         99:10:ac:ab:1a:ea:20:45:5c:ef:ed:56:4b:0f:4e:54:65:e3:
         fc:c5:24:2e:2c:b0:79:a8:0f:d1:a1:a7:65:90:dd:fa:26:32:
         d5:04:55:2b:43:75:28:d7:e0:ca:c8:f0:2f:71:3c:1d:b6:f1:
         53:2d:7f:e0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu/pbliL9U0zKQhZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx
YmUwMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk
MTg1Nzk0M2EtMjMxYS00MmU3LWIwNGQtYzk5Njg2NjIyOTBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBb2iGNdA4VAPf8l4+UfpLm5pVSdxu225/Z7
B/3dDOZNeFU2WzJpAdFTzoWO+oIAqDb7NdIEQxhBtqTHwS+HbV5A8KhdrUVcy+9H
zbdzBDdj+XwOqqjf4fDlmADLqQmTT3lCRceyK6Jc7G3vUUTk2Uacfe11/jDwA/uL
haWw5L7siJ9Ty7Y1UKOxvlGfoft6ifU1Ttw5xsDQ5OPqlAlGl9nJcW//upj3k3fY
CY4l16Yeu8pfrqMErkpNhJzPIauOn1WdK/D2pthcjFs000d5KpGqNsbnhmxiiwo/
0j/T7lkmx2KAobl1nASdUqv0BVdW859L62DDAc5xmCvcL6/cUQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCT6r6foNyhqvTWwugZN3ig9/uVcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4
NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvY2YyOGQ5NmQtMzlkYS0z
OWU1LWFhZGUtNzgyNmM0MjBjZjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz
ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx
MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1
OTI1MTFiZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgafwNAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIyFiFOa+flhIHr7oZ4r+o79HSmsWngZzHD1sGGpt8qxz4F+nrTg
KePrWOZFRHgddivRjH+ndK8ZEup1G6SL+AzoeZbt0vPbY6fW6EY39z8ZCJuAbe56
dKtk18o0KlNIr8TV7UQU1x87WqWCEnVkxT6/AhP6JcTdIFl8rE2oLonEwVTX2+QH
igikHUAQFsAHYzudIYQY2i2e2FGaJzwgRNLPeeg/NjpCmpAoS7/9g+GrAVzVbzLI
5a0d3dmiN4FezaiurFdxyZkQrKsa6iBFXO/tVksPTlRl4/zFJC4ssHmoD9Ghp2WQ
3fomMtUEVStDdSjX4MrI8C9xPB228VMtf+A=
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:31:48 2025 by rpki-client