Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/ebacf8da-8713-3cba-a3e0-b197e2937ebc.roa
File:                     ebacf8da-8713-3cba-a3e0-b197e2937ebc.roa (raw, json)
Hash identifier:          QU//wY7Aj95qrauXit08O1lR1Ui2bJ1DE6yKkp/Xtqs=
Subject key identifier:   E9:A2:10:08:B7:64:23:BE:79:4E:E9:75:F4:78:72:24:57:9F:44:46
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F43285849FE207ACDABB9A28235FFB3A0
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/ebacf8da-8713-3cba-a3e0-b197e2937ebc.roa
Signing time:             Tue 27 May 2025 13:34:35 +0000
ROA not before:           Tue 27 May 2025 13:34:35 +0000
ROA not after:            Mon 25 Aug 2025 13:34:35 +0000
asID:                     6363
IP address blocks:        2606:9fc0:d006::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:20:7a:cd:ab:b9:a2:82:35:ff:b3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: May 27 13:34:35 2025 GMT
            Not After : Aug 25 13:34:35 2025 GMT
        Subject: CN=e0cef2e1-4ee5-455d-a136-26d23a85566c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ad:7b:37:65:59:15:8e:5a:b7:e9:10:c3:cf:
                    36:eb:6c:d4:4d:57:07:ff:48:ed:2a:96:b6:bb:02:
                    45:e5:fa:25:5a:dc:7a:fc:2e:3f:fe:d7:4f:b4:91:
                    af:85:d0:ee:97:4e:4a:ce:d1:dc:c0:87:b8:b8:3f:
                    fa:f3:3f:56:5d:53:96:e0:de:45:6c:aa:e8:32:1e:
                    7d:80:a0:f7:fe:de:e7:32:56:cb:93:28:5e:52:78:
                    81:58:67:a5:4c:46:a1:89:69:e3:88:55:f6:57:e5:
                    f2:38:e7:48:44:c6:43:fb:f8:48:c1:af:6e:37:93:
                    22:80:32:b7:4c:83:d3:8f:87:91:da:07:a7:f4:9a:
                    24:8c:7c:ed:4e:58:81:8c:9c:8b:33:1b:34:59:5e:
                    15:61:3c:c1:7f:bf:f0:63:fc:51:a4:4f:5e:90:22:
                    9f:e5:e3:63:9c:20:de:17:44:b2:f3:62:ad:e5:b9:
                    09:f8:09:4e:15:b8:3f:7f:0c:29:d6:93:2a:ce:a7:
                    a7:6b:45:2b:9e:f9:d7:2c:02:56:b5:70:52:95:15:
                    84:78:86:f4:7a:72:c1:61:f3:3e:9a:bb:37:9b:39:
                    65:89:e2:c0:ca:ea:4e:22:75:fa:9c:d0:79:d0:26:
                    79:ca:e1:63:dc:90:4b:34:a6:06:b9:9f:c7:fc:8d:
                    8f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A2:10:08:B7:64:23:BE:79:4E:E9:75:F4:78:72:24:57:9F:44:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/ebacf8da-8713-3cba-a3e0-b197e2937ebc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:d006::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:22:e3:18:c5:f2:43:59:23:6c:28:b7:03:54:11:1f:8c:a5:
         4a:a2:88:c6:1f:43:20:ef:c9:16:03:fa:cf:fd:8b:c2:29:e7:
         e6:eb:84:fe:df:e1:43:1f:c1:73:1c:e8:b3:7a:57:18:33:79:
         d5:c9:12:7c:6c:2e:35:ca:46:0f:1c:f5:de:e1:43:fb:ac:bb:
         ae:11:ee:fd:8c:b0:e3:da:63:56:dd:a1:aa:69:03:1b:44:12:
         ef:f1:33:5e:bb:48:56:d7:09:bd:d8:6a:d2:7d:4d:f6:fe:fc:
         e5:d9:12:15:3d:94:1e:52:e1:24:53:88:79:21:44:47:3e:cf:
         e6:6c:f2:7b:f9:77:6f:1a:2d:ee:53:57:94:35:50:5d:d5:86:
         88:dc:49:15:a2:88:8b:c8:05:3d:96:3c:73:85:7c:55:a2:73:
         1b:26:02:54:07:70:39:78:2c:52:f5:7d:50:fc:a1:6c:2c:b3:
         22:6a:2c:e5:b0:d3:b6:cf:42:5f:55:4e:95:3d:7e:5e:12:35:
         2b:8b:8b:6c:fb:b7:a7:78:61:76:d9:90:5d:be:5f:85:91:94:
         d3:3d:74:8e:ba:cb:03:4c:4a:f2:e3:7c:57:9a:d1:d0:8f:ac:
         8b:d8:73:a9:1c:4d:44:87:50:f2:94:e6:e0:8b:05:5a:00:be:
         27:28:5f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:18:13 2025 by rpki-client