Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/d810fadd-0483-39b8-8308-73fd56529d91.roa
File:                     d810fadd-0483-39b8-8308-73fd56529d91.roa (raw, json)
Hash identifier:          K659htIX2ju0CRGZ8h/N6i6WEy/JzhKSsCzA1cWbmOs=
Subject key identifier:   D1:5B:70:23:6D:63:84:6F:07:FF:4D:1C:1B:C6:67:20:B8:E3:36:39
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F4328584CA061A487E93D77F8EBF7DA80
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/d810fadd-0483-39b8-8308-73fd56529d91.roa
Signing time:             Sat 24 Jan 2026 02:00:31 +0000
ROA not before:           Sat 24 Jan 2026 02:00:31 +0000
ROA not after:            Fri 24 Apr 2026 01:00:31 +0000
asID:                     6363
IP address blocks:        2606:9fc0:f202::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a0:61:a4:87:e9:3d:77:f8:eb:f7:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: Jan 24 02:00:31 2026 GMT
            Not After : Apr 24 01:00:31 2026 GMT
        Subject: CN=914423f6-3274-4ede-b761-075a62ff100a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:16:ef:61:0c:26:c5:aa:a6:17:9a:e5:c4:e1:
                    ed:49:02:3d:be:8e:9a:e1:de:5b:f2:da:ef:f3:e4:
                    fe:3a:e9:31:d8:fa:86:aa:27:ef:6e:18:5a:2a:ac:
                    f7:0b:96:0a:17:56:b0:1d:20:e0:e7:d7:0d:3c:4d:
                    66:4c:e7:68:a9:d4:cf:b9:37:e9:ed:3a:a9:b9:fd:
                    a6:aa:da:20:14:cd:22:27:d6:f5:d1:0b:f3:e1:ff:
                    c2:d7:1d:15:97:6f:a5:a8:5d:66:12:09:98:3c:98:
                    89:5b:60:4f:cb:5f:ef:d7:9d:6a:99:38:55:38:c0:
                    19:2e:44:a8:39:d0:8a:66:94:22:1b:23:e4:3f:5b:
                    08:b4:9f:8d:44:6d:a0:a7:52:58:62:67:08:0f:ff:
                    17:69:c7:82:2d:c8:bb:4c:5c:cd:76:6a:2a:6f:01:
                    70:c1:f6:66:ee:07:07:4e:c7:6b:a2:05:ef:80:ed:
                    9d:7e:57:b2:9a:c4:25:2f:71:1b:be:4d:1e:e9:3f:
                    4d:f9:7d:52:b1:0a:7b:79:89:91:63:78:81:4d:6b:
                    4d:d2:78:0b:12:99:ce:66:40:d7:ce:76:80:55:ca:
                    9c:a6:2e:db:1d:47:57:d6:12:53:e4:2e:35:14:69:
                    68:65:4a:48:09:04:a9:af:81:ae:2e:cb:c9:23:64:
                    37:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5B:70:23:6D:63:84:6F:07:FF:4D:1C:1B:C6:67:20:B8:E3:36:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/d810fadd-0483-39b8-8308-73fd56529d91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:f202::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:8d:2d:f7:70:38:27:6a:66:f9:51:b5:98:27:75:39:6c:b3:
         99:ee:ac:da:36:80:36:37:49:62:8b:48:c5:a2:07:50:60:14:
         7d:30:89:b4:a3:e7:05:d1:b6:58:e3:81:3a:06:80:19:d1:c8:
         66:74:bb:b5:99:dc:83:86:57:2f:25:12:04:7e:a6:ab:f2:2e:
         02:74:17:ec:19:62:6c:af:b5:c2:a3:a4:d1:3b:bc:1e:49:9c:
         f7:d7:41:39:f0:f3:c6:aa:d1:05:dd:01:f4:5e:c7:3d:2e:ed:
         43:cb:c3:6d:af:74:a9:37:63:87:eb:51:3d:c4:95:b0:fe:56:
         39:02:d0:2d:d0:d5:86:ce:2b:75:b3:d9:03:70:99:8c:46:2d:
         7e:d0:f4:81:db:75:88:73:b1:4d:18:93:53:62:b8:8b:0e:43:
         7f:56:cd:bc:a4:f7:4c:d8:3a:5d:92:75:ea:e9:b0:4d:27:54:
         b7:77:ff:e0:c1:21:5e:38:9b:b0:fd:38:ef:22:a2:4d:1c:97:
         24:f5:64:ac:af:ea:7b:cf:07:77:d3:7e:83:be:0b:66:14:de:
         38:5e:a1:7f:4e:c1:5f:61:51:e6:2c:70:c8:a8:78:2f:55:da:
         a0:ce:46:c9:57:11:2a:28:e4:c5:c3:0f:b0:f9:b6:b9:de:3d:
         18:43:c3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:01:53 2026 by rpki-client