Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/51dfc34e-ad51-3e0f-9910-aab95c7c4f1c.roa
File:                     51dfc34e-ad51-3e0f-9910-aab95c7c4f1c.roa (raw, json)
Hash identifier:          56vhmCrvGcXW+p0PVy0+1XgUHwP052A/G98gG8JBXvw=
Subject key identifier:   0B:A4:74:CF:34:E0:EC:B1:1E:91:26:DA:27:75:BB:57:DE:D1:FC:8B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC2031AE4795D85E2057400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/51dfc34e-ad51-3e0f-9910-aab95c7c4f1c.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33287
IP address blocks:        2601:45:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:03:1a:e4:79:5d:85:e2:05:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=b2d890b5-4204-495f-bded-07f2e2e1c969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ac:ae:96:0c:42:23:8f:3b:cd:61:a3:fc:5f:
                    1b:dc:ad:8b:cd:d3:f2:26:dc:1d:49:88:c0:ed:ce:
                    4d:d7:8d:90:d3:ee:5a:06:1c:19:60:e9:43:4f:c2:
                    43:f6:2a:8d:ee:19:f2:75:39:70:c6:16:c3:10:b3:
                    65:a9:0f:80:66:f9:1f:0f:49:13:a2:a5:71:60:50:
                    df:1f:93:51:05:7e:15:c7:b3:7d:e0:2b:95:00:63:
                    da:51:1d:cb:21:c4:c7:df:58:e7:9d:58:30:0a:76:
                    1d:eb:09:ca:9a:5d:35:f0:0a:bb:7b:e1:73:b5:e4:
                    67:3d:b8:1c:76:44:44:41:2a:27:d1:6b:ec:3d:25:
                    fa:07:a1:a6:5b:ec:d1:fb:cb:20:e9:ee:86:3d:24:
                    ae:db:9b:f1:60:f5:82:f4:30:8f:84:39:e7:a0:23:
                    0a:ad:88:f1:95:a3:4d:7a:dc:dd:93:b5:d5:cf:1d:
                    56:56:e0:3c:47:88:ce:a5:b0:35:b2:6b:6c:ee:4e:
                    82:53:ac:dc:89:10:7b:e0:f8:93:b4:6e:92:0e:05:
                    ac:dc:19:6e:6a:65:ae:45:51:71:c4:2b:3e:d0:74:
                    7f:11:89:11:97:6d:f3:26:b6:6d:b3:17:15:1f:de:
                    ea:4f:af:cb:80:9f:2d:58:78:1e:f7:4a:c2:e5:8b:
                    b1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A4:74:CF:34:E0:EC:B1:1E:91:26:DA:27:75:BB:57:DE:D1:FC:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/51dfc34e-ad51-3e0f-9910-aab95c7c4f1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:45:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:9d:ed:30:5f:82:60:c4:d6:34:36:a2:66:b9:bb:f2:54:18:
         8f:b6:44:1e:89:51:d6:f2:b5:9a:4c:c8:a8:b7:6a:64:88:41:
         a4:4a:fa:ca:c9:fb:69:c4:c8:dc:98:d8:da:1b:7f:8b:61:42:
         7a:0b:1e:f6:92:ec:e1:69:a2:5a:8a:4a:a8:11:8d:93:4e:9f:
         6e:80:a4:01:e4:79:70:96:21:fb:c2:2d:5f:77:47:18:a3:3f:
         a3:10:3a:79:0b:24:53:11:ca:74:55:46:8f:e2:a0:c0:69:bb:
         39:b5:66:d1:1f:f3:38:cc:a7:a3:51:44:98:c0:24:cd:40:97:
         a1:a0:3f:c1:ab:d8:db:f2:9d:e4:74:61:ef:3b:30:ea:bc:e7:
         88:13:44:b3:8a:52:87:5f:88:c4:00:84:2a:79:99:49:78:6d:
         10:05:1d:cb:f1:fd:cd:64:48:c8:d5:47:00:cd:bf:29:f8:09:
         24:1e:98:31:15:66:67:6a:e0:12:7e:e7:96:b4:f1:5f:7f:ad:
         85:5a:c3:bf:3b:94:e1:ca:7e:42:9b:0b:30:c3:7f:d9:ed:5c:
         95:44:28:c7:30:98:31:35:92:56:70:86:83:53:ba:75:7f:b1:
         3f:3b:ff:ed:3f:4f:82:04:82:d4:c8:3d:bb:b0:12:f2:dd:4c:
         16:b5:d0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:01:32 2025 by rpki-client