Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/51ce0173-4a36-359f-b3af-21efe7090623.roa
File:                     51ce0173-4a36-359f-b3af-21efe7090623.roa (raw, json)
Hash identifier:          GoA76jOUZ37BAj+ckb5J+PtRrSlEPeSTimvCeFBurjQ=
Subject key identifier:   F7:EF:8F:5B:08:D3:84:D4:80:F0:28:E7:A3:4E:58:CD:FB:D6:BE:FD
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F4328584E1A143AA8C209F926B4CA4210
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/51ce0173-4a36-359f-b3af-21efe7090623.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     7862
IP address blocks:        2620:16d:1000::/38 maxlen: 38
                          2620:16d:1000::/40 maxlen: 40
                          2620:16d:1200::/40 maxlen: 40
                          2620:16d:1400::/40 maxlen: 40
                          2620:16d:1800::/38 maxlen: 38
                          2620:16d:1800::/40 maxlen: 40
                          2620:16d:1a00::/40 maxlen: 40
                          2620:16d:1c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:3a:a8:c2:09:f9:26:b4:ca:42:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=6bce30c9-da5e-4942-bef6-6a5a1ef643ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ce:7a:85:8e:06:99:b3:92:cb:cb:12:ca:47:
                    f9:d1:c7:80:72:e4:42:23:13:c6:b5:1b:4f:a0:44:
                    9c:52:32:86:0a:a0:da:80:7b:c9:18:f2:ba:8d:1c:
                    2e:1b:a4:c4:4b:47:45:f5:76:b4:9f:0a:d4:f1:e8:
                    ba:33:bf:ca:8a:4f:52:ed:f6:f2:ba:89:48:8e:b2:
                    ed:a1:30:e6:ee:0e:5e:04:b6:d4:11:7e:a3:14:00:
                    56:4e:ff:00:78:db:1c:66:f5:27:8c:d9:ff:18:0a:
                    23:b4:12:5c:b0:66:1c:d5:a4:82:c2:bc:c7:5c:6e:
                    26:bc:57:e0:bf:6d:b1:14:2b:3e:55:53:eb:fe:71:
                    94:60:3f:0a:6a:39:e6:6d:ff:20:4f:50:b6:f7:a2:
                    df:37:c2:19:4d:b7:b3:0d:70:3f:52:c5:2f:ed:a9:
                    3b:2c:61:43:e7:c5:69:8d:fb:44:11:12:1b:81:93:
                    19:92:99:15:e6:c1:47:cc:47:0b:d6:f0:54:69:eb:
                    4e:e5:c9:f2:42:38:cc:1e:b1:76:0f:0f:55:f7:7f:
                    84:65:43:9a:d2:31:b4:ac:bc:9e:f6:ef:2c:c4:dd:
                    bb:a9:78:40:fb:4f:d8:ac:15:e6:7e:49:80:76:70:
                    1f:bd:4f:91:b5:7f:31:f6:37:24:c5:00:0f:d5:89:
                    70:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EF:8F:5B:08:D3:84:D4:80:F0:28:E7:A3:4E:58:CD:FB:D6:BE:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/51ce0173-4a36-359f-b3af-21efe7090623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:16d:1000::-2620:16d:14ff:ffff:ffff:ffff:ffff:ffff
                  2620:16d:1800::-2620:16d:1cff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:03:9a:64:d9:0f:98:ee:2a:08:0e:e1:b5:9f:bd:8d:d9:46:
         1f:c4:1f:de:e9:12:91:f7:b4:e6:14:9d:04:d2:4b:eb:02:ae:
         3d:ad:3d:0f:be:17:81:70:ec:29:f8:47:3c:a4:50:80:cd:24:
         8b:83:d7:5a:8b:fa:49:57:4c:da:c3:0e:36:d6:2f:61:c8:79:
         e5:51:43:ca:b0:78:82:8d:04:bc:d5:61:53:64:1e:41:62:47:
         1b:09:48:7c:48:0e:09:6a:a0:a2:ca:7e:01:8f:6f:46:97:90:
         34:a2:a8:e6:38:68:53:94:50:79:1c:11:43:e4:eb:02:0c:61:
         50:51:52:e0:59:7e:59:30:f5:3a:89:3a:14:17:10:5c:55:89:
         ec:81:a5:1a:28:b3:e0:f1:e4:fc:c3:6d:c4:45:18:6f:e8:91:
         99:dc:9e:c1:8c:f9:ac:c9:6c:06:d0:03:c0:48:4b:1f:42:30:
         08:2a:48:36:a5:29:1a:3a:99:ee:65:c5:e4:a5:05:b2:47:a7:
         10:b1:f1:e8:e5:71:a3:c8:52:aa:14:58:e4:5f:a7:1f:dd:cd:
         7d:8f:ae:3c:d3:db:01:10:03:6b:0a:e1:fb:8d:78:1a:f4:96:
         77:bb:c7:09:bc:0a:41:2c:20:d9:d4:32:7c:2d:38:0f:fa:bf:
         36:df:cb:81
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWE4aFDqowgn5JrTKQhAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzFlYTg5YjQtZWQ4NS00NjNmLTgzZDktODQ1MzMwMGJm
MmJkMB4XDTI2MDYwODA5MDAxMloXDTI2MDkwNjA5MDAxMlowLzEtMCsGA1UEAxMk
NmJjZTMwYzktZGE1ZS00OTQyLWJlZjYtNmE1YTFlZjY0M2VhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM56hY4GmbOSy8sSykf50ceAcuRCIxPGtRtP
oEScUjKGCqDagHvJGPK6jRwuG6TES0dF9Xa0nwrU8ei6M7/Kik9S7fbyuolIjrLt
oTDm7g5eBLbUEX6jFABWTv8AeNscZvUnjNn/GAojtBJcsGYc1aSCwrzHXG4mvFfg
v22xFCs+VVPr/nGUYD8Kajnmbf8gT1C296LfN8IZTbezDXA/UsUv7ak7LGFD58Vp
jftEERIbgZMZkpkV5sFHzEcL1vBUaetO5cnyQjjMHrF2Dw9V93+EZUOa0jG0rLye
9u8sxN27qXhA+0/YrBXmfkmAdnAfvU+RtX8x9jckxQAP1YlwgQIDAQABo4IDczCC
A28wHQYDVR0OBBYEFPfvj1sI04TUgPAo56NOWM371r79MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MWVh
ODliNC1lZDg1LTQ2M2YtODNkOS04NDUzMzAwYmYyYmQvNTFjZTAxNzMtNGEzNi0z
NTlmLWIzYWYtMjFlZmU3MDkwNjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzFlYTg5YjQtZWQ4NS00NjNmLTgz
ZDktODQ1MzMwMGJmMmJkLzcxZWE4OWI0LWVkODUtNDYzZi04M2Q5LTg0NTMzMDBi
ZjJiZC5jcmwwHwYDVR0jBBgwFoAUAPoosGNeNAxamY5KWp40aTpaVmIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83MWVhODliNC1lZDg1LTQ2M2YtODNkOS04NDUz
MzAwYmYyYmQuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkMBADBgQmIAFt
EAMGACYgAW0UMBADBgMmIAFtGAMGACYgAW0cMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIADmmTZD5juKggO
4bWfvY3ZRh/EH97pEpH3tOYUnQTSS+sCrj2tPQ++F4Fw7Cn4RzykUIDNJIuD11qL
+klXTNrDDjbWL2HIeeVRQ8qweIKNBLzVYVNkHkFiRxsJSHxIDglqoKLKfgGPb0aX
kDSiqOY4aFOUUHkcEUPk6wIMYVBRUuBZflkw9TqJOhQXEFxVieyBpRoos+Dx5PzD
bcRFGG/okZncnsGM+azJbAbQA8BISx9CMAgqSDalKRo6me5lxeSlBbJHpxCx8ejl
caPIUqoUWORfpx/dzX2PrjzT2wEQA2sK4fuNeBr0lne7xwm8CkEsINnUMnwtOA/6
vzbfy4E=
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:38:00 2026 by rpki-client