Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/7547939c-7b56-3f25-8cb0-531d066b9605.roa
File:                     7547939c-7b56-3f25-8cb0-531d066b9605.roa (raw, json)
Hash identifier:          Z9dKNl6S0XHI66OkBIDS0+P1jr6+7/OL81ZcvEDzBrY=
Subject key identifier:   B1:DC:E7:7E:B6:79:75:76:08:A6:7C:95:D0:0F:D4:F3:17:D4:04:A5
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F4328584ADECBD41351C00EC0D3215A00
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/7547939c-7b56-3f25-8cb0-531d066b9605.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     6363
IP address blocks:        2606:9fc0:d00e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:d4:13:51:c0:0e:c0:d3:21:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=c9b63844-e866-4043-81d9-80dfe76e80b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:64:75:5b:ed:2b:43:91:7f:5d:ee:c2:f4:2b:
                    6a:2d:c0:45:36:8b:9c:4c:b1:3b:94:2a:a8:94:bd:
                    49:24:2a:58:cc:41:a7:6c:47:eb:b2:bc:4f:42:3c:
                    e0:eb:3f:8c:e1:9b:76:02:21:dd:63:9f:40:df:38:
                    92:b8:89:56:0d:12:73:7d:9c:e1:af:79:40:8c:93:
                    ae:23:73:37:8f:3f:03:2e:38:da:20:7a:30:ae:c1:
                    be:67:ab:56:b6:90:0b:94:11:19:7d:ac:e1:da:88:
                    37:53:36:5d:9b:fb:2f:f0:9a:53:c5:12:68:05:b0:
                    da:c3:98:1c:5b:69:0d:e3:a2:ac:5c:91:47:2b:94:
                    b7:29:17:82:ea:63:67:26:0a:ad:6c:6c:2a:37:e3:
                    9b:ed:64:99:b8:26:b7:03:7b:0a:88:ee:fe:d3:45:
                    7d:56:9f:1a:38:fc:0b:50:aa:f3:14:2d:d8:96:d1:
                    51:05:a0:79:58:a8:a9:d3:33:18:fd:a3:37:65:ca:
                    bc:e1:5e:fb:80:2a:9a:95:94:bd:8c:74:4b:e6:80:
                    48:96:56:84:13:78:5f:1c:d2:9a:d1:90:67:2c:06:
                    dc:7f:af:fe:9a:69:37:09:0a:2c:78:77:20:dc:da:
                    97:7c:83:de:e8:35:e6:d7:29:58:b8:54:ef:8e:dc:
                    b4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DC:E7:7E:B6:79:75:76:08:A6:7C:95:D0:0F:D4:F3:17:D4:04:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/7547939c-7b56-3f25-8cb0-531d066b9605.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:d00e::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ef:2d:b3:52:4f:ad:e3:3b:98:05:ef:db:cc:0b:3c:57:b5:
         87:6e:d8:3e:c7:bc:96:a2:e0:f2:99:1a:75:9e:35:83:b4:ce:
         cd:94:ab:61:15:34:9e:69:5d:92:49:58:76:3e:ca:e6:d6:e3:
         d2:a0:b3:4b:71:e4:4a:84:db:21:12:48:55:e6:89:19:b5:ee:
         9c:af:36:28:ac:e9:21:cf:c4:b4:ff:65:83:3d:d9:1a:fa:61:
         aa:07:96:9d:bf:a4:97:a1:eb:fa:6d:9a:44:a6:0a:1a:7e:45:
         3c:e2:09:be:0e:13:f2:fe:fc:25:f0:08:4d:d4:a1:46:0c:d2:
         50:35:8d:9b:22:5f:39:39:55:91:12:84:25:fa:cd:5a:60:ba:
         9e:11:ce:78:ad:c0:06:c6:0b:70:2c:11:98:7f:b0:ad:01:38:
         6e:bb:e3:b3:4d:a4:56:0f:da:38:cb:39:1b:8a:f3:13:14:45:
         20:68:23:70:b1:4e:97:93:2b:db:f3:c1:80:93:49:3a:98:a6:
         ca:e5:c9:44:26:66:f7:6e:3f:3b:87:f0:76:18:04:da:78:9e:
         ae:30:b5:fe:8a:71:a0:2a:1e:58:28:3f:27:3e:19:e3:66:b6:
         9f:f4:d4:da:8c:01:ba:6d:a2:bb:12:74:66:ea:e5:e8:3c:63:
         80:3c:cc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:12:18 2025 by rpki-client