Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/02ce0018-061f-30f5-b991-ff51b29a1946.roa
File:                     02ce0018-061f-30f5-b991-ff51b29a1946.roa (raw, json)
Hash identifier:          j1Yh5v0yJftJ0RtErEj8WTau8p2aj3Rzzf/WkplT0rQ=
Subject key identifier:   11:85:73:6E:1F:D7:7E:96:B3:81:13:B9:61:B8:3F:77:30:42:D1:2B
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F4328584E6144A5BBBDC4C3A072B47740
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/02ce0018-061f-30f5-b991-ff51b29a1946.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     6363
IP address blocks:        2606:9fc0:e012::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:a5:bb:bd:c4:c3:a0:72:b4:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=f1576a34-4a69-4fa0-9e9a-ad8439af6bae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:43:2d:de:c6:fb:03:34:b4:c3:d4:ad:3b:6b:
                    d5:52:98:7b:b8:a5:29:df:6e:bb:21:f5:36:77:c7:
                    a7:54:d8:ba:c5:58:6f:6a:6f:c8:6c:ea:42:81:0e:
                    fe:0c:1c:1c:6d:af:de:f5:48:e9:48:96:e5:66:92:
                    3d:e6:c3:ee:ed:5f:ec:f4:56:72:25:4b:49:00:19:
                    05:95:16:5f:19:59:84:c6:84:11:bd:87:08:c5:48:
                    2f:5d:cb:af:19:1e:2b:b1:7a:49:27:a1:54:54:f6:
                    20:18:e3:6d:4c:2f:b1:b5:1a:cc:b4:94:fd:7e:97:
                    5b:6a:68:26:36:47:ef:d6:50:76:9c:cb:4f:ec:86:
                    97:07:ca:96:37:7f:7f:a4:88:e9:28:cb:0f:65:0b:
                    33:04:e6:29:cb:8d:34:0c:eb:e8:6e:3c:c2:2f:d5:
                    0c:ec:68:c0:19:db:76:ba:19:69:f9:94:44:ea:74:
                    3e:05:df:18:9b:80:52:3f:29:53:31:c5:df:82:6d:
                    0c:e0:eb:a0:b7:c1:86:8c:fa:38:8a:2d:32:f9:a6:
                    bb:3f:9d:e2:09:e4:28:59:02:4d:7d:76:05:4a:dc:
                    93:7c:b4:5d:f0:2f:e3:6d:d6:b2:20:bd:7a:9a:5f:
                    d9:b5:fc:9d:95:74:70:a0:81:81:a2:a6:b5:37:22:
                    c4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:85:73:6E:1F:D7:7E:96:B3:81:13:B9:61:B8:3F:77:30:42:D1:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/02ce0018-061f-30f5-b991-ff51b29a1946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:e012::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:34:84:a8:5e:ad:d0:e5:fb:07:fa:90:1b:a7:9f:af:6e:4f:
         c7:6f:52:a0:6b:4f:9b:cd:66:d4:55:b5:53:31:f6:12:e0:3f:
         74:86:f0:9a:02:65:fa:e0:d6:76:ee:9e:a3:7c:a6:c4:c1:77:
         ed:65:e1:25:78:b0:61:c4:58:83:c0:a3:eb:92:77:81:a7:02:
         46:01:e5:28:2f:c2:ed:88:1b:bd:3a:05:38:44:1a:77:ab:93:
         84:39:18:a5:09:a0:f1:ec:6b:5c:ee:d0:9a:51:b7:3f:8d:07:
         05:e5:67:c4:77:1f:e1:99:1f:5a:c8:77:b4:d7:94:ca:89:a6:
         0e:38:a3:c5:00:7d:04:c8:9f:ee:d1:18:6b:43:e5:9a:ee:fb:
         c6:e4:c8:c7:61:8a:a6:ce:95:10:0b:a9:3b:98:a8:2b:72:ec:
         39:ad:c2:87:97:d4:d1:d6:3c:90:b7:92:68:f4:57:d5:c9:4b:
         d9:d3:bb:f0:e3:a4:ec:45:b4:67:f7:e1:a3:2b:99:16:fb:25:
         86:87:9a:aa:2a:39:bd:1d:4d:d5:f3:94:66:06:e2:bb:13:5d:
         1a:63:c5:4f:f6:da:08:d3:5a:43:ea:16:d6:ff:1c:7b:4f:1f:
         a8:47:de:fb:99:16:57:01:64:a8:8f:ac:f1:47:2d:47:4d:f8:
         06:75:c2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:00:10 2026 by rpki-client