Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/f26c76f1-a2d5-3328-ace9-4227c51b97bb.roa
File:                     f26c76f1-a2d5-3328-ace9-4227c51b97bb.roa (raw, json)
Hash identifier:          iV6HWTjMh3Y2rrDle84ysitRtzR78OZbLnl9H3r/JM0=
Subject key identifier:   96:16:09:63:02:3C:61:82:F1:2C:57:9B:35:24:2D:01:F7:AC:8B:57
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F4328584CA061BF8EC2EA653F9247A900
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/f26c76f1-a2d5-3328-ace9-4227c51b97bb.roa
Signing time:             Sat 24 Jan 2026 02:00:31 +0000
ROA not before:           Sat 24 Jan 2026 02:00:31 +0000
ROA not after:            Fri 24 Apr 2026 01:00:31 +0000
asID:                     6363
IP address blocks:        2606:9fc0:e014::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a0:61:bf:8e:c2:ea:65:3f:92:47:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: Jan 24 02:00:31 2026 GMT
            Not After : Apr 24 01:00:31 2026 GMT
        Subject: CN=ba00f023-0593-4746-a293-84c2c9c05fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f5:13:80:6a:5b:a6:e3:81:5d:04:eb:b2:71:
                    69:08:06:61:15:ed:18:c0:55:f8:83:df:cd:e3:48:
                    c6:fc:d1:16:2c:97:12:ae:eb:c7:18:90:7e:72:ad:
                    e1:c8:a1:d0:22:0d:54:93:5b:d6:7e:e5:89:75:dc:
                    cc:45:ea:f9:4a:60:cd:66:9f:2c:c1:b4:c5:9e:3d:
                    bf:fc:84:2b:fa:38:0c:c4:b9:4b:33:a8:8b:90:fa:
                    54:91:c5:de:b3:70:5d:34:12:7a:f0:a3:b3:1b:89:
                    3a:1b:c4:f3:b2:fe:0b:a5:6c:2e:93:c3:ac:ae:a4:
                    f5:98:04:6f:06:ba:a5:76:b4:8f:84:20:56:12:ea:
                    68:03:e9:19:12:21:f8:64:c4:85:c3:79:c6:77:e1:
                    9d:ab:a8:ee:9a:b9:60:5c:d4:9e:83:61:44:e3:d3:
                    a9:5c:38:be:ce:df:f7:17:e7:db:2a:6a:f6:46:31:
                    16:5d:b1:d1:7d:80:e6:ce:dc:2b:fd:51:0a:84:24:
                    1c:4e:5b:bb:c3:da:06:d5:f1:63:3c:7d:7f:78:ce:
                    43:07:55:6b:7b:cc:cb:75:df:06:e8:82:30:0e:3e:
                    da:a5:b6:0c:65:76:d0:c5:7a:ca:18:8a:72:7a:7c:
                    65:2a:e8:78:b9:ac:97:a0:f3:23:f7:b1:30:3f:dd:
                    5b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:16:09:63:02:3C:61:82:F1:2C:57:9B:35:24:2D:01:F7:AC:8B:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/f26c76f1-a2d5-3328-ace9-4227c51b97bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:e014::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:8a:c1:7a:df:f6:28:c7:36:26:18:ca:50:37:ca:a3:b8:77:
         bf:12:67:64:3e:a9:02:8d:9c:ac:48:91:d6:c2:7e:b8:5c:64:
         16:e8:db:be:e5:57:94:0c:59:d5:a8:ad:11:98:d2:d3:bf:19:
         5b:07:a0:b8:73:b6:64:96:73:4a:68:7b:2a:a7:f6:92:fc:4b:
         bc:78:6e:cd:08:9d:0c:5e:08:37:12:29:67:ad:7f:b0:d3:a2:
         38:69:96:0a:d7:c4:a9:7f:02:93:3e:6e:03:fe:67:14:c1:65:
         de:cd:cb:c4:0d:bd:62:94:eb:57:37:1f:61:05:5e:08:fd:80:
         0d:cf:5e:de:4b:e5:51:8f:7e:cb:bd:bd:4f:1d:1a:16:ac:59:
         96:d3:f8:5f:0d:7b:38:9a:44:6e:33:d0:98:7e:eb:90:67:18:
         7f:b1:1c:53:47:9f:53:90:ee:70:b1:b3:b7:18:b6:a9:a7:f7:
         4a:5a:e4:a7:50:de:e4:cb:d0:b2:41:b8:82:a6:46:0f:1a:29:
         1d:6e:0a:29:b5:01:0c:06:74:c4:85:5c:f4:0c:6b:eb:46:78:
         a2:51:b3:29:db:8b:b5:0e:2d:c1:01:91:fe:8c:30:b7:93:26:
         99:de:12:a4:ce:d6:ad:7a:c7:1f:e3:f0:44:3c:06:10:63:5e:
         8f:0c:0c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:54 2026 by rpki-client