Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/9aba4dd9-58ca-3cf3-ac94-a1170ac78d32.roa
File:                     9aba4dd9-58ca-3cf3-ac94-a1170ac78d32.roa (raw, json)
Hash identifier:          4rtZV4YMojseCuUoREyPSZy8+iBlAmnI7rKeRkLt77Q=
Subject key identifier:   0B:79:89:3B:11:F2:7B:E7:9D:EE:F4:47:FE:F8:46:80:27:4C:22:47
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F43285849FE20B4AD51967EDF37B6D080
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/9aba4dd9-58ca-3cf3-ac94-a1170ac78d32.roa
Signing time:             Tue 27 May 2025 13:35:03 +0000
ROA not before:           Tue 27 May 2025 13:35:03 +0000
ROA not after:            Mon 25 Aug 2025 13:35:03 +0000
asID:                     6363
IP address blocks:        2606:9fc0:d008::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:20:b4:ad:51:96:7e:df:37:b6:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: May 27 13:35:03 2025 GMT
            Not After : Aug 25 13:35:03 2025 GMT
        Subject: CN=089a8dfc-ba28-4e48-ad08-95b9f75a449c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:de:3d:dd:84:12:af:88:36:3a:cd:48:34:f2:
                    d0:be:ee:17:5d:91:1a:06:0a:8b:f2:fc:9d:63:96:
                    46:01:17:42:f3:d1:fa:22:23:18:9c:cd:f3:20:c4:
                    41:17:71:75:be:6a:e1:40:a3:cc:c9:ea:32:47:3c:
                    dc:95:ae:b9:f8:4a:45:7e:22:db:64:ea:ba:df:44:
                    2c:49:3a:8e:a8:3f:6f:2e:e1:6c:70:0b:ea:04:ce:
                    33:96:18:34:2d:bd:f7:42:9b:dc:73:a5:57:f0:5e:
                    55:9a:4b:f5:91:d8:c1:c2:21:76:c8:86:88:e5:04:
                    f5:8c:92:04:4e:6a:85:a5:e1:b6:dd:e5:79:7f:84:
                    40:d5:1f:7d:97:92:5a:1b:19:d6:25:65:1b:ee:46:
                    64:62:ec:a3:ca:e7:28:cc:2a:a1:c6:aa:ec:3e:b0:
                    26:1d:88:82:ea:13:1e:21:03:97:b4:5b:69:f4:a9:
                    11:51:48:5f:4f:9f:1d:96:e0:5b:9f:c8:68:a3:a6:
                    14:2e:f0:84:a2:18:d6:76:46:06:62:33:b0:1b:d7:
                    12:13:43:8c:c7:ff:ce:69:74:20:2d:06:b8:bf:72:
                    b5:38:3d:0d:f3:bc:eb:54:b1:dd:9a:4e:2d:9b:d3:
                    97:08:cb:9b:6e:11:60:9b:61:fb:32:b4:e9:0a:3b:
                    83:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:79:89:3B:11:F2:7B:E7:9D:EE:F4:47:FE:F8:46:80:27:4C:22:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/9aba4dd9-58ca-3cf3-ac94-a1170ac78d32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:d008::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:b9:6d:e1:c5:64:1d:57:db:bd:8a:e8:a3:59:b3:3a:ff:af:
         c5:f0:e4:b8:d2:0c:36:45:b1:4b:8a:c1:e7:36:10:7e:e7:9c:
         0e:97:2a:0d:82:37:82:3a:86:4c:a4:b6:55:07:10:56:73:a9:
         b9:81:e4:80:5c:b1:44:cc:f0:14:d1:d4:74:41:46:b8:95:0c:
         20:e0:2f:ba:d9:e5:ea:19:4d:88:c5:eb:cd:a5:c1:01:14:2a:
         71:ff:e9:8a:7b:a2:a0:af:bd:87:84:9c:49:95:f6:2a:e2:d6:
         72:fb:7f:fd:da:77:ce:f9:3e:47:8d:47:d0:d9:b5:41:e2:7d:
         7b:44:54:33:38:d0:e3:89:ac:5c:51:f4:7e:c2:6e:26:28:24:
         17:80:f4:e1:46:b6:a9:5f:19:16:0c:c4:a1:a9:53:09:bb:db:
         b2:95:b1:f2:79:11:22:5a:75:eb:10:c3:d7:5b:f7:df:47:5b:
         83:77:5d:92:f6:d7:a8:55:af:4d:96:3b:80:7a:f7:35:08:63:
         86:fc:d8:88:77:b0:8e:ba:d2:be:63:4b:6d:4e:34:02:bd:f1:
         2f:74:6c:92:2b:29:bc:6f:fa:00:10:34:44:25:5c:ac:37:a0:
         8b:48:3a:ea:d8:02:72:b0:1a:98:3b:7d:0c:65:d3:11:6f:70:
         00:36:26:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:41:35 2025 by rpki-client