Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/51530f76-e41f-3179-9cf3-61474c9b5e33.roa
File:                     51530f76-e41f-3179-9cf3-61474c9b5e33.roa (raw, json)
Hash identifier:          Yh0r+2Eb8XIQhq8dU3AVN0XvFPRE5Ux/8lNxel8wbj4=
Subject key identifier:   F2:30:BA:AB:47:F8:20:7C:E1:91:9F:6E:42:CC:52:6D:24:6B:C4:2C
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584D117295B7F959C70A453DAEC0
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/51530f76-e41f-3179-9cf3-61474c9b5e33.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     215224
IP address blocks:        2606:f180:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:95:b7:f9:59:c7:0a:45:3d:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=bf4c6715-6c3d-41e5-9278-8c5b1b6b4d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:74:ef:72:6d:01:60:44:94:ae:c6:88:4f:7f:
                    56:8f:fd:f6:a1:ba:d0:ee:98:1f:3b:81:06:13:67:
                    d1:0b:08:77:a7:eb:66:af:69:d5:50:25:1f:39:ac:
                    99:30:2b:9a:2e:2f:d8:f3:d6:bc:9a:be:58:14:f4:
                    0c:ce:11:78:e7:2d:b6:50:2c:a3:7a:55:dd:b9:cd:
                    c8:6e:10:45:26:fb:05:95:e9:11:74:84:76:ce:53:
                    69:d7:b4:68:11:8f:2d:5b:a7:4e:1a:3d:cd:30:bc:
                    c2:f5:aa:06:c7:c3:8a:58:bb:9d:f4:70:62:3c:0a:
                    1b:f7:27:d5:f0:02:dc:15:b5:9f:92:b4:3e:05:73:
                    58:80:e9:d5:69:96:49:9e:b0:46:91:1f:8b:a4:6e:
                    fe:9b:2f:bc:23:f9:d0:8e:28:da:c3:b4:7f:e5:aa:
                    17:e9:6c:89:3e:bb:38:58:0b:65:7d:c5:58:8c:8c:
                    47:21:63:b5:e6:f6:55:15:9a:67:78:3b:a4:48:0c:
                    34:a0:6f:4d:0a:fe:95:5c:ca:6b:b9:53:63:7a:fa:
                    9d:45:88:74:1f:be:fa:42:ff:7e:8e:32:86:cb:c0:
                    ac:6a:5c:74:a9:52:2e:73:d7:51:e2:fe:82:16:d2:
                    09:64:11:9b:04:02:61:98:7d:e7:93:33:cc:5d:6a:
                    a4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:30:BA:AB:47:F8:20:7C:E1:91:9F:6E:42:CC:52:6D:24:6B:C4:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/51530f76-e41f-3179-9cf3-61474c9b5e33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f180:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:30:1f:4b:7b:d5:ed:e6:f4:22:44:cf:ce:b1:e9:0d:13:8a:
         74:25:69:1c:39:9a:76:4f:d8:1b:37:66:63:ed:03:ad:a6:61:
         c9:c6:a5:cb:2a:e0:52:16:1f:d5:af:49:09:80:88:33:23:21:
         d3:18:87:ec:a2:98:85:35:e1:ae:43:56:84:d4:7d:80:29:e7:
         e0:86:1c:15:c3:a3:f6:5e:3f:55:a8:45:b2:7b:98:77:79:75:
         3a:9d:a1:f7:4e:90:7e:90:65:bc:0d:5f:b2:8f:53:6f:a4:9b:
         9d:28:dc:62:39:96:ad:e0:07:7d:fa:b1:26:27:96:a7:5d:19:
         b2:fa:dc:4a:41:c3:ae:e3:bf:63:f4:d3:db:2a:e8:b1:8f:4e:
         f7:4a:1a:e7:99:1b:30:b5:60:90:af:d2:05:f7:4a:ee:5c:37:
         12:34:3d:62:96:4f:98:3d:59:71:84:ed:f9:47:af:ff:27:37:
         36:97:25:9d:46:de:c7:54:90:5c:c0:c2:f2:0f:16:1b:43:c1:
         35:64:4f:56:75:9a:d0:d3:5b:4b:27:1e:ef:d9:14:a0:d2:7b:
         34:d3:7f:17:db:c9:36:69:7e:e5:01:d6:a6:f7:ed:4a:83:72:
         54:77:66:69:3e:14:5f:fa:77:54:1c:9e:6e:15:ed:2c:1e:85:
         1a:a3:16:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:46:04 2026 by rpki-client