Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/e920f8dd-1234-3dfa-bbf3-27dc5dc3b9b3.roa
File:                     e920f8dd-1234-3dfa-bbf3-27dc5dc3b9b3.roa (raw, json)
Hash identifier:          UhxQ8Ej6r1fEJZ77C10YqBmXFjZrz+XPGTQBAy8NfbY=
Subject key identifier:   E9:54:0D:B8:EC:BC:44:29:53:10:8B:56:62:DA:A8:9F:68:65:B4:02
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F43285849FE24069B508DCBD7F4C55D10
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/e920f8dd-1234-3dfa-bbf3-27dc5dc3b9b3.roa
Signing time:             Tue 27 May 2025 13:41:44 +0000
ROA not before:           Tue 27 May 2025 13:41:44 +0000
ROA not after:            Mon 25 Aug 2025 13:41:44 +0000
asID:                     6363
IP address blocks:        2606:9fc0:e006::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:24:06:9b:50:8d:cb:d7:f4:c5:5d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: May 27 13:41:44 2025 GMT
            Not After : Aug 25 13:41:44 2025 GMT
        Subject: CN=4905292d-e3a3-47d4-b98e-5ade2062f37c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:00:04:81:dc:15:b4:6b:64:ff:81:3a:59:ab:
                    a2:2b:52:c7:e4:f1:aa:6d:53:af:54:8c:d5:d2:c4:
                    14:33:69:02:2b:dc:3d:89:5a:3b:2c:a8:19:a3:05:
                    55:f3:35:28:06:ad:47:97:e7:15:2e:80:b3:a5:7f:
                    23:66:24:f8:8b:dd:2a:39:dc:0a:b1:31:0e:9d:8c:
                    e3:2f:f0:b8:26:74:a4:f3:a1:18:8f:b1:dc:99:66:
                    48:92:66:b3:ac:60:23:1a:55:8c:4d:48:9c:fe:50:
                    f6:4c:78:01:a5:d8:21:d8:06:e2:7c:f9:b6:0b:ae:
                    d3:96:cf:72:08:9c:4e:09:d0:89:b4:cf:ea:97:df:
                    0a:8c:9f:2d:d3:69:12:e2:42:5f:89:49:a3:e7:05:
                    3f:2f:9b:55:e7:25:dc:6d:ab:81:05:3e:61:ec:32:
                    22:0b:cc:e2:3b:bc:70:6c:e2:25:89:91:70:12:3c:
                    4b:92:ef:89:46:6f:f7:91:76:39:dd:bd:16:cb:a3:
                    b6:c5:88:c2:a3:f4:88:0e:63:9c:04:7f:29:89:4f:
                    2e:d3:a1:38:32:93:21:72:69:a1:f1:7c:85:4b:6d:
                    13:fb:da:4d:d8:5c:9b:f8:7e:40:05:fa:5e:db:5c:
                    8f:21:70:19:1b:05:6c:81:07:04:44:b3:90:7e:c8:
                    f9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:54:0D:B8:EC:BC:44:29:53:10:8B:56:62:DA:A8:9F:68:65:B4:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/e920f8dd-1234-3dfa-bbf3-27dc5dc3b9b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:e006::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:b6:10:4c:03:28:fa:e3:79:d4:92:d3:f5:58:d2:1b:a5:93:
         e1:ed:fe:ee:d2:57:8d:7e:7b:a5:a8:94:1f:53:4a:bc:4d:b4:
         10:e4:df:21:3d:e2:a6:33:9d:6c:17:66:fc:ed:e2:b9:92:bc:
         5d:8d:ee:2e:34:34:a9:33:83:59:1d:c9:bc:16:c0:2a:bd:3e:
         ff:4b:14:ed:ba:4e:96:a9:92:ae:af:d9:e1:0b:a0:59:5a:0c:
         65:3e:fb:01:70:55:14:c0:9f:87:ec:8e:90:65:b9:da:52:c6:
         ea:3d:bc:3a:3a:a9:e8:78:c1:86:56:15:74:6a:fb:09:65:08:
         84:c7:bc:33:c8:68:c0:77:12:40:7a:23:71:c6:6b:e8:0e:61:
         05:04:92:85:f3:48:52:fe:1c:4b:fe:8c:88:ea:4e:bd:71:62:
         8f:b4:cf:ed:f6:b6:5e:86:34:60:8b:a6:73:3d:56:da:d2:d0:
         c8:25:2d:a4:17:47:01:be:12:d1:e1:d8:cb:c4:47:04:ee:71:
         3a:e0:e5:dd:2e:51:aa:a2:64:93:51:63:32:f9:d7:f9:a8:f0:
         ae:8f:8a:fc:7c:21:f0:28:f7:53:e4:de:7f:f8:a9:63:83:b2:
         69:cb:d4:c0:bc:90:35:38:a4:12:d4:a3:38:a5:61:da:7c:fa:
         4e:cd:6e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:22:20 2025 by rpki-client