Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/d785e9a0-591b-365f-82a1-937ac3110e69.roa
File:                     d785e9a0-591b-365f-82a1-937ac3110e69.roa (raw, json)
Hash identifier:          PTo8nOyv04nKCsTRSjyKidck8xzLBhLsUF1K9DFPoD0=
Subject key identifier:   1D:0E:B6:8C:27:01:6A:94:50:5E:73:66:1D:1B:3D:CA:D7:8D:50:88
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F4328584ADECBD4DFB28E4E7B458BE480
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/d785e9a0-591b-365f-82a1-937ac3110e69.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     6363
IP address blocks:        2606:9fc0:e010::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:d4:df:b2:8e:4e:7b:45:8b:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=05304836-204e-46ef-bc93-b41116c48489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5b:22:ce:28:2b:9b:34:4b:6a:36:9d:a4:3b:
                    3d:b7:a4:72:8d:6e:4f:19:cf:53:b9:13:46:1d:8b:
                    0f:09:3a:7a:a3:ec:f9:36:64:33:93:f8:b1:79:e8:
                    72:b5:17:e4:33:13:c2:d3:bb:3d:87:20:96:ff:41:
                    55:d0:3b:5c:87:14:13:f4:d4:bd:aa:69:cb:c4:9c:
                    e8:ee:ff:d2:bc:c9:a8:e6:dc:69:e5:9a:f3:89:a2:
                    e4:b3:a2:e6:89:c0:6d:94:97:80:47:2d:92:1d:6c:
                    50:4a:fb:3b:20:a1:94:38:df:da:5d:44:91:cf:2b:
                    09:a5:94:5d:b1:6a:d9:95:05:9a:3d:4f:72:b7:13:
                    70:de:48:f5:0e:62:b6:12:59:d7:b8:4c:ee:8b:f1:
                    6b:e3:4d:4d:2f:fe:32:05:4e:5c:fb:d8:67:d7:62:
                    be:c6:35:62:3c:08:2d:5e:0c:b9:41:6d:b5:15:c1:
                    22:c7:b3:dd:6c:34:94:c6:6d:ea:55:83:82:6b:86:
                    ea:c9:e0:7e:23:06:e7:01:e5:4b:48:74:0e:64:08:
                    82:9f:2f:cf:ae:9b:92:73:5f:a7:4d:63:2a:ca:30:
                    75:42:c2:9e:72:77:49:72:3f:ac:d7:cc:9e:73:c0:
                    b6:02:8b:f5:12:2c:fc:2d:33:7c:a4:55:e4:a1:0a:
                    7c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0E:B6:8C:27:01:6A:94:50:5E:73:66:1D:1B:3D:CA:D7:8D:50:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/d785e9a0-591b-365f-82a1-937ac3110e69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:e010::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:1b:c1:ed:7d:d3:0a:9f:1a:e8:f7:fc:c2:e6:47:1e:ac:32:
         5f:0a:5c:be:e0:12:98:2e:9b:24:45:8d:28:eb:65:4e:68:b6:
         20:4c:45:6a:a9:73:3d:04:83:a6:54:eb:a2:32:60:6c:6e:34:
         c3:17:65:4f:da:74:51:13:75:fc:4c:e1:ba:00:8f:30:48:d0:
         2a:a3:49:1e:2d:3f:66:60:9c:cc:61:70:4b:ed:7a:32:46:4e:
         bc:e2:46:8b:5a:ea:68:cf:f2:14:c0:1a:1c:d6:af:56:a1:a5:
         02:b6:14:e4:31:b7:4e:b2:ab:3b:a0:43:42:c5:e9:ec:6a:27:
         ed:9c:49:48:56:1f:6f:4f:cc:d9:eb:4a:be:85:9b:79:d6:26:
         ce:00:a0:6c:bd:0a:eb:f6:7e:6e:ac:8e:70:d7:84:71:13:01:
         93:dd:8e:8a:27:58:22:24:38:cb:c1:e9:86:79:df:db:58:60:
         22:85:6d:7b:48:73:00:47:17:fb:36:a6:08:57:af:b0:43:bd:
         bb:f9:29:85:01:49:25:72:bd:0e:19:b0:eb:5b:64:88:50:df:
         ac:58:7c:41:26:0c:67:3c:d2:3f:b4:b8:c4:f5:cb:de:79:f6:
         2d:fa:81:74:71:9d:c3:8c:27:78:8c:eb:4d:29:d4:fe:72:f3:
         02:e2:7e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:00:36 2025 by rpki-client