Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/624ef82d-1620-301b-8b81-05f5db9f4162.roa
File:                     624ef82d-1620-301b-8b81-05f5db9f4162.roa (raw, json)
Hash identifier:          7C4YaOdid/+RkJw2AZpz8e7YdoOBrSRGNzjzWczj9ys=
Subject key identifier:   A1:32:F6:BF:C3:9D:93:C4:F7:5D:D7:17:D6:48:EC:5A:2F:D3:35:A9
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F43285849FE226099A065C113D3021400
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/624ef82d-1620-301b-8b81-05f5db9f4162.roa
Signing time:             Tue 27 May 2025 13:38:25 +0000
ROA not before:           Tue 27 May 2025 13:38:25 +0000
ROA not after:            Mon 25 Aug 2025 13:38:25 +0000
asID:                     6363
IP address blocks:        2606:9fc0:d010::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:22:60:99:a0:65:c1:13:d3:02:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: May 27 13:38:25 2025 GMT
            Not After : Aug 25 13:38:25 2025 GMT
        Subject: CN=3a838722-5477-4232-b276-b7f70dd53412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:71:81:b5:e1:75:2f:71:a7:7a:2f:5a:21:fc:
                    82:ad:15:e1:31:73:3b:e4:a3:65:00:67:32:1e:83:
                    e2:6a:5e:e0:69:2b:14:1e:76:5b:50:ff:7a:fb:5d:
                    db:77:4a:27:ca:1d:55:a3:5e:01:20:7d:83:59:3d:
                    be:85:0e:6b:98:83:cd:b7:6d:bb:c1:42:0d:7e:7f:
                    98:85:c1:c5:04:0a:e4:ce:8d:8a:81:a7:67:ae:58:
                    c0:b6:9f:ce:88:a7:93:0f:22:c2:32:73:30:f7:04:
                    8b:b8:10:7e:cf:25:29:ae:76:e7:60:7f:ac:66:cd:
                    2f:a8:14:81:1d:d0:92:7c:8d:b6:13:54:4c:35:9f:
                    59:cb:c9:d1:90:6b:d9:e9:f2:30:3b:36:5c:32:cc:
                    e5:74:6d:cb:1c:f5:bb:90:ca:a8:5b:b9:c1:6a:e4:
                    a3:97:cc:0f:a3:1f:d8:b6:43:d9:54:9d:8b:bb:c1:
                    12:31:68:e5:d2:fd:32:1d:e9:4d:0c:a7:71:1e:6b:
                    10:f5:f9:6a:b1:4c:49:10:fa:3a:c1:06:15:c4:d7:
                    9d:5e:4f:bf:96:16:c9:07:0f:03:01:f4:b5:a9:ed:
                    d4:d0:89:08:11:70:e7:c0:52:49:25:e9:8d:e9:75:
                    d4:c7:ba:28:0f:67:22:f2:85:4b:d2:50:15:72:af:
                    21:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:32:F6:BF:C3:9D:93:C4:F7:5D:D7:17:D6:48:EC:5A:2F:D3:35:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/624ef82d-1620-301b-8b81-05f5db9f4162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:d010::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:dd:a6:bb:51:b0:26:13:b1:cd:e9:35:b6:99:c6:f5:cf:52:
         41:1d:4f:2c:71:9b:25:a2:7f:de:e4:00:9d:63:df:f0:f6:9f:
         fb:02:2d:33:71:73:46:8b:0e:46:4f:34:32:ec:d2:cd:51:e2:
         87:35:17:e3:68:a1:9e:29:8f:fc:d6:db:3f:94:83:0c:24:9b:
         9b:a7:cb:78:7f:65:c3:ad:9e:4b:1a:72:0f:bd:c0:a7:f3:2b:
         62:5a:39:a8:7f:6f:df:89:4d:30:90:cf:b0:5c:42:bc:75:46:
         3c:2d:55:4c:4e:73:42:a9:5f:35:ef:29:91:c9:4c:e5:f0:05:
         35:49:c7:6e:bc:00:28:4e:fe:bd:14:71:0b:fa:99:df:68:78:
         b4:e1:63:0d:24:82:d2:92:1e:4c:86:ba:da:02:b4:41:70:11:
         06:1b:90:30:32:96:df:3e:f6:19:fd:d0:df:cb:84:81:11:d5:
         9f:1b:be:41:e6:3a:14:8d:e2:7e:25:bd:2d:7e:b2:62:45:c0:
         a9:dc:44:29:ea:4a:c9:ba:61:35:8c:9e:6c:47:4c:f5:ce:f2:
         f1:60:74:3a:a8:fa:b2:b1:81:ec:db:25:51:a4:0b:93:4e:1f:
         92:72:46:be:0a:64:5b:a9:db:cf:60:14:e4:9c:68:1c:c7:ad:
         bf:6a:5b:b4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn+ImCZoGXBE9MCFAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx
YmUwMB4XDTI1MDUyNzEzMzgyNVoXDTI1MDgyNTEzMzgyNVowLzEtMCsGA1UEAxMk
M2E4Mzg3MjItNTQ3Ny00MjMyLWIyNzYtYjdmNzBkZDUzNDEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nGBteF1L3Gnei9aIfyCrRXhMXM75KNlAGcy
HoPial7gaSsUHnZbUP96+13bd0onyh1Vo14BIH2DWT2+hQ5rmIPNt227wUINfn+Y
hcHFBArkzo2KgadnrljAtp/OiKeTDyLCMnMw9wSLuBB+zyUprnbnYH+sZs0vqBSB
HdCSfI22E1RMNZ9Zy8nRkGvZ6fIwOzZcMszldG3LHPW7kMqoW7nBauSjl8wPox/Y
tkPZVJ2Lu8ESMWjl0v0yHelNDKdxHmsQ9flqsUxJEPo6wQYVxNedXk+/lhbJBw8D
AfS1qe3U0IkIEXDnwFJJJemN6XXUx7ooD2ci8oVL0lAVcq8hhQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKEy9r/DnZPE913XF9ZI7Fov0zWpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4
NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvNjI0ZWY4MmQtMTYyMC0z
MDFiLThiODEtMDVmNWRiOWY0MTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz
ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx
MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1
OTI1MTFiZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgafwNAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHDdprtRsCYTsc3pNbaZxvXPUkEdTyxxmyWif97kAJ1j3/D2n/sC
LTNxc0aLDkZPNDLs0s1R4oc1F+NooZ4pj/zW2z+Ugwwkm5uny3h/ZcOtnksacg+9
wKfzK2JaOah/b9+JTTCQz7BcQrx1RjwtVUxOc0KpXzXvKZHJTOXwBTVJx268AChO
/r0UcQv6md9oeLThYw0kgtKSHkyGutoCtEFwEQYbkDAylt8+9hn90N/LhIER1Z8b
vkHmOhSN4n4lvS1+smJFwKncRCnqSsm6YTWMnmxHTPXO8vFgdDqo+rKxgezbJVGk
C5NOH5JyRr4KZFup289gFOScaBzHrb9qW7Q=
-----END CERTIFICATE-----
Generated at Mon Jun 30 12:29:10 2025 by rpki-client