Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/d874ca63-4897-3805-abe8-c26742646e9a.roa
File:                     d874ca63-4897-3805-abe8-c26742646e9a.roa (raw, json)
Hash identifier:          BqYRaEKAm8Q/eOfy4tfZctApseMD0+MHoamGow4ziEc=
Subject key identifier:   E5:A4:F3:B2:7B:E0:45:BB:B2:8B:AF:B2:D2:E3:99:D1:D2:98:11:75
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F4328584D80FFDB46D97068C050A62810
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/d874ca63-4897-3805-abe8-c26742646e9a.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     6363
IP address blocks:        2606:9fc0:e00a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:db:46:d9:70:68:c0:50:a6:28:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=89e26b70-ef3f-4c72-b0d1-97d9cbce1cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:00:f1:fc:fa:67:f9:09:8b:39:f0:ec:7b:4f:
                    4a:f8:bc:35:e9:b9:44:dd:8f:65:14:8f:b2:86:e0:
                    51:92:6c:97:45:bf:7e:1a:d4:3d:3d:e7:f6:17:34:
                    90:c4:3c:47:04:00:59:85:cf:02:5a:fa:f1:4f:5a:
                    e7:59:7e:e9:b2:28:40:a7:58:20:03:12:b4:dc:4a:
                    da:09:1d:f5:e9:35:c6:2d:70:dc:2a:66:5c:fb:0a:
                    8f:8b:d4:98:65:16:31:78:53:ac:08:22:d5:10:00:
                    c0:3e:44:8f:05:25:bc:3b:6c:21:f8:a4:00:b5:b9:
                    b8:8b:a4:d6:f6:e3:fc:2a:63:f1:13:81:f8:7b:1a:
                    5a:40:7a:ee:70:e8:37:5e:3c:5d:d3:c3:0e:a1:21:
                    09:c7:47:7d:29:ff:8f:00:06:c1:31:4d:d2:b3:b8:
                    01:68:d3:27:14:3e:11:60:d9:d7:ef:64:44:74:99:
                    a5:4d:b6:72:5e:de:17:50:a7:30:17:b9:f3:36:5f:
                    0c:a5:d8:ae:b6:eb:82:83:44:e9:a6:90:96:a0:20:
                    aa:52:39:e7:5d:25:f1:5c:56:91:95:ac:40:e5:89:
                    54:37:91:6a:35:1b:d0:62:37:e7:91:1e:68:19:eb:
                    1c:50:00:44:b1:d9:6b:e3:c2:21:ad:54:a2:e8:6d:
                    5e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A4:F3:B2:7B:E0:45:BB:B2:8B:AF:B2:D2:E3:99:D1:D2:98:11:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/d874ca63-4897-3805-abe8-c26742646e9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:e00a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:9c:2a:fc:6b:25:3d:90:4c:f9:1c:86:25:77:1c:ea:cd:03:
         e4:51:1d:fe:4e:b7:0f:c9:36:77:5f:4b:7d:a8:7b:d3:c9:bd:
         18:11:21:ba:e9:a6:07:89:ec:54:40:24:89:40:14:ea:c8:69:
         a0:fd:89:c6:b2:cb:5d:20:f4:a1:28:84:70:ac:a6:c3:1f:3a:
         1f:04:24:46:53:25:8c:59:e7:17:db:64:50:20:5a:49:9a:d1:
         54:5b:ab:19:78:b7:b7:bd:96:04:b2:52:10:13:9d:58:a9:49:
         43:5d:86:0b:9b:4a:ad:5b:b9:21:71:03:f1:5c:cf:4d:c3:c6:
         c6:b2:98:bf:36:77:77:ff:97:9c:8e:c7:52:16:83:0d:39:48:
         27:60:65:8a:d8:df:55:e2:3c:de:a0:82:a4:2f:32:3a:dd:3c:
         d1:a1:9e:67:a2:36:a3:2a:3f:b6:c7:ef:e5:dd:e5:86:f6:d4:
         52:f6:15:09:9b:6c:d0:b4:34:88:a1:ea:47:d5:0f:5a:db:ae:
         90:63:de:03:2c:ee:7b:83:65:8b:66:14:f2:fe:44:6b:74:b0:
         59:c3:93:8a:76:88:52:e4:f2:ef:a9:f6:d7:4f:0f:e2:fe:30:
         72:33:d4:9c:d7:8c:f3:55:a3:fa:df:b4:a3:dd:24:36:79:fa:
         3e:20:97:20
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2A/9tG2XBowFCmKBAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx
YmUwMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk
ODllMjZiNzAtZWYzZi00YzcyLWIwZDEtOTdkOWNiY2UxY2Q0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugDx/Ppn+QmLOfDse09K+Lw16blE3Y9lFI+y
huBRkmyXRb9+GtQ9Pef2FzSQxDxHBABZhc8CWvrxT1rnWX7psihAp1ggAxK03Era
CR316TXGLXDcKmZc+wqPi9SYZRYxeFOsCCLVEADAPkSPBSW8O2wh+KQAtbm4i6TW
9uP8KmPxE4H4expaQHrucOg3Xjxd08MOoSEJx0d9Kf+PAAbBMU3Ss7gBaNMnFD4R
YNnX72REdJmlTbZyXt4XUKcwF7nzNl8MpdiutuuCg0TpppCWoCCqUjnnXSXxXFaR
laxA5YlUN5FqNRvQYjfnkR5oGescUABEsdlr48IhrVSi6G1eAQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOWk87J74EW7souvstLjmdHSmBF1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4
NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvZDg3NGNhNjMtNDg5Ny0z
ODA1LWFiZTgtYzI2NzQyNjQ2ZTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz
ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx
MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1
OTI1MTFiZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgafwOAK
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACmcKvxrJT2QTPkchiV3HOrNA+RRHf5Otw/JNndfS32oe9PJvRgR
IbrppgeJ7FRAJIlAFOrIaaD9icayy10g9KEohHCspsMfOh8EJEZTJYxZ5xfbZFAg
Wkma0VRbqxl4t7e9lgSyUhATnVipSUNdhgubSq1buSFxA/Fcz03DxsaymL82d3f/
l5yOx1IWgw05SCdgZYrY31XiPN6ggqQvMjrdPNGhnmeiNqMqP7bH7+Xd5Yb21FL2
FQmbbNC0NIih6kfVD1rbrpBj3gMs7nuDZYtmFPL+RGt0sFnDk4p2iFLk8u+p9tdP
D+L+MHIz1JzXjPNVo/rftKPdJDZ5+j4glyA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:49:56 2026 by rpki-client