Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/ebacf8da-8713-3cba-a3e0-b197e2937ebc.roa
File:                     ebacf8da-8713-3cba-a3e0-b197e2937ebc.roa (raw, json)
Hash identifier:          uNpR8UL9R6OoDd5mg78yxJjb7DTPBglub6ijI9YeSbw=
Subject key identifier:   BF:AF:1D:95:9F:B8:85:74:69:35:16:EE:E6:11:7D:EC:75:93:BE:48
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F4328584ADECBD3CA1A23FB1A148CD9C0
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/ebacf8da-8713-3cba-a3e0-b197e2937ebc.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     6363
IP address blocks:        2606:9fc0:d006::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:d3:ca:1a:23:fb:1a:14:8c:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=a2a70493-7e9f-451e-96a0-6aa258cc2362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5c:ae:c0:6d:2e:f9:2f:27:10:e0:e3:4b:c3:
                    42:c7:39:e2:d9:91:82:c3:43:cf:07:d0:3f:32:13:
                    f9:2b:a3:73:86:ba:54:a8:22:4c:a5:7f:3a:00:d4:
                    86:2c:0e:80:fb:06:12:65:5a:1e:79:a4:54:9f:31:
                    b9:04:8f:49:72:18:e4:06:ec:ad:a5:87:19:a4:bf:
                    86:61:41:8b:d7:ca:5d:b7:be:67:57:81:a8:a3:99:
                    95:61:8c:fe:3d:f5:a3:a7:42:82:93:48:65:c8:84:
                    8d:78:40:96:ad:73:97:61:24:87:f4:08:a0:2e:d0:
                    85:51:02:49:17:48:d8:b4:9a:16:07:45:38:0f:b9:
                    d5:dc:0b:5b:81:13:b6:fb:69:bd:83:73:46:82:2b:
                    41:78:aa:0f:df:e5:41:9d:66:85:42:e5:39:52:3c:
                    6e:87:09:8c:4c:57:1a:ad:8a:80:e0:e6:83:36:1c:
                    51:4d:0c:98:fe:fc:3b:23:56:4c:f5:b7:19:4d:70:
                    63:18:a7:8c:8d:9b:7b:1a:f3:78:fe:7b:5a:56:e9:
                    c9:cb:4f:d8:16:7e:45:0e:6d:77:45:b4:c5:f4:a4:
                    0c:e1:46:07:d3:b6:30:d6:74:0d:a6:e2:e7:e6:6e:
                    0e:e1:d2:77:90:ff:63:88:46:a3:df:dd:b5:db:d1:
                    da:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AF:1D:95:9F:B8:85:74:69:35:16:EE:E6:11:7D:EC:75:93:BE:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/ebacf8da-8713-3cba-a3e0-b197e2937ebc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:d006::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:f5:4f:a0:60:3e:1b:89:7b:28:a9:b9:c5:33:64:98:bb:7e:
         5c:b4:3d:5b:b3:98:e7:c4:0e:42:bd:1f:15:a8:8c:1b:22:00:
         af:1c:fc:29:49:82:ef:ce:51:41:d6:63:17:41:dc:42:d7:74:
         d5:88:ce:11:65:ee:ab:78:19:7e:3f:1d:79:2d:f7:60:b1:1a:
         67:48:9a:7f:c4:3a:99:cf:81:d0:1e:6a:19:d1:ee:98:3a:64:
         a0:e9:44:aa:70:93:0f:73:3c:f7:56:c7:46:fa:e9:4a:98:a2:
         0e:92:90:ac:96:73:fd:a2:38:4c:a7:e7:14:9d:17:e6:2f:69:
         3a:6d:da:3c:c6:02:c9:f9:e3:9e:fb:7a:49:4e:54:85:dd:5e:
         7d:1c:85:9e:a9:8c:ea:51:33:44:c2:52:26:04:34:6d:f7:21:
         ed:6f:b8:ba:72:f9:0b:ee:c8:ca:9e:c4:da:fb:fb:08:66:7b:
         56:31:39:64:6e:77:88:1d:4f:64:59:55:f9:2e:69:88:b8:08:
         ae:f9:06:32:a7:bf:4f:03:ab:80:a9:71:a5:53:b8:04:4d:c1:
         7c:d2:ca:44:8f:85:9a:38:e5:7a:df:ce:1a:cf:4c:02:43:b4:
         d7:73:e5:fa:e7:49:e8:77:e4:9a:59:6d:6b:5d:ee:f0:0d:06:
         3a:c4:6a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:33:46 2025 by rpki-client