Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/708953cb-d215-3fd6-93e9-296bb798a89d.roa
File:                     708953cb-d215-3fd6-93e9-296bb798a89d.roa (raw, json)
Hash identifier:          mXNyr91GcpjCksE8igHKWbf30nI0jID/9Cx/taw7ago=
Subject key identifier:   B1:A0:92:A3:0A:69:56:5C:AD:6E:F4:C5:BC:BE:85:2F:A6:B8:11:27
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F4328584AE46147B693AD35898371D400
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/708953cb-d215-3fd6-93e9-296bb798a89d.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     6363
IP address blocks:        2606:9fc0:e004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:47:b6:93:ad:35:89:83:71:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=b0606911-8812-4535-aeb0-0b3011f2f760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e2:25:ce:f7:67:c4:aa:c6:54:f3:11:f7:c4:
                    c6:42:a4:08:74:5b:f6:db:d6:a6:7e:32:c3:ee:56:
                    3b:0a:ef:e9:cb:9c:4e:b0:58:e5:3c:fb:ed:25:21:
                    23:ff:2a:67:ab:26:a2:ca:62:01:ef:00:09:b3:ff:
                    d6:fa:24:53:de:21:c9:a9:6e:a1:83:e0:92:db:fb:
                    9e:d9:f6:5a:e8:3c:58:aa:ef:7a:f7:78:f9:3a:43:
                    88:eb:c9:88:37:0d:34:77:96:59:30:29:f9:37:5e:
                    5d:85:86:13:a8:a9:7d:e2:66:a4:af:09:3a:93:f2:
                    9a:56:a0:11:95:28:86:4a:8b:34:32:32:07:bb:9e:
                    32:84:1e:80:8e:35:68:68:27:17:1c:c2:15:45:e1:
                    03:38:2b:27:1e:b1:ec:25:f1:b9:86:c9:64:f5:c8:
                    b5:21:5a:e9:52:11:d9:df:7b:44:54:25:d2:db:cf:
                    f5:db:23:8d:56:d0:47:c7:39:bb:2d:19:b1:3a:b3:
                    4c:e7:18:d9:f7:db:2e:7a:8b:65:43:57:9c:26:dd:
                    97:1b:ae:b6:03:84:82:bf:c3:6d:e1:ed:f2:27:b9:
                    2f:ff:2b:a7:d0:05:9f:29:4e:c3:8f:64:8b:af:ca:
                    e2:75:48:06:19:5a:57:48:35:15:f5:26:c8:60:db:
                    5a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A0:92:A3:0A:69:56:5C:AD:6E:F4:C5:BC:BE:85:2F:A6:B8:11:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/708953cb-d215-3fd6-93e9-296bb798a89d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:e004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:73:27:6f:3e:28:aa:b4:85:ce:97:60:a5:db:75:c2:0e:da:
         00:83:a6:94:98:b1:ea:bb:3b:0a:a3:57:a2:86:74:89:9d:9b:
         6c:6c:60:f5:11:bf:ab:b3:da:f5:37:8b:a2:e1:d9:a8:ee:29:
         ea:1a:2f:79:f7:e1:3c:04:04:d3:10:ca:80:af:33:db:d3:54:
         d4:6e:48:9d:76:b6:ac:84:e3:61:c1:90:51:18:5e:c4:54:83:
         90:5a:27:43:60:a4:24:04:4b:64:83:c6:2b:f5:61:c7:56:6b:
         a3:ef:a3:3d:84:86:fd:16:f0:6e:ac:e9:f4:19:f2:ff:f0:2c:
         20:45:ba:d8:a7:40:ea:0f:a1:b7:19:3f:32:76:81:ad:3e:6f:
         99:b8:3c:ad:08:1d:5c:86:9b:72:aa:f4:9c:9c:79:a6:f2:39:
         9f:59:86:9d:68:33:c7:56:da:8a:71:db:bb:fc:e4:31:56:e9:
         05:30:75:f4:b8:1c:83:4f:a6:c7:ce:bf:b9:11:f6:9a:4f:c9:
         3f:c0:d2:b8:12:5a:45:93:2b:32:c6:24:90:39:b6:45:95:66:
         0a:0d:e9:36:49:ea:ac:18:0f:23:44:35:c1:48:19:b3:25:fc:
         e1:fa:09:70:e1:a7:66:49:d3:17:d5:5d:86:41:0c:c1:9b:10:
         c4:1b:b9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:11:46 2025 by rpki-client