Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/51a29c7b-6cc5-38f4-8a92-1678e6d72c13.roa
File:                     51a29c7b-6cc5-38f4-8a92-1678e6d72c13.roa (raw, json)
Hash identifier:          eGwxSBVdqsPSWqnqwYgmMY41UpWWMlX7+ZpDUYFEYwc=
Subject key identifier:   2C:C9:FC:FD:5F:59:07:77:10:AB:CA:C5:FB:CB:93:2B:BD:62:74:11
Certificate issuer:       /CN=d5a6b267-6096-4872-9afb-b9517766833a
Certificate serial:       010D0C9F4328584F497536F275C5BD54F98E45C0
Authority key identifier: 5E:E7:F2:BC:B2:15:17:7D:D7:6F:E8:FA:F0:04:46:11:E3:75:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/51a29c7b-6cc5-38f4-8a92-1678e6d72c13.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     10886
IP address blocks:        2001:500:2d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/d5a6b267-6096-4872-9afb-b9517766833a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/d5a6b267-6096-4872-9afb-b9517766833a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:36:f2:75:c5:bd:54:f9:8e:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5a6b267-6096-4872-9afb-b9517766833a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a04f1cdf-d00c-4b21-9f3d-637d348c2430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ba:a0:98:67:9a:37:f2:3a:f2:9e:c8:d6:0a:
                    dd:5b:ae:56:af:24:4c:3a:52:ee:01:b3:ff:27:31:
                    fe:97:ff:a9:45:26:a6:60:38:75:52:a0:7d:f8:5b:
                    81:bc:9f:0f:bf:15:3d:61:97:39:78:8a:52:8f:df:
                    d3:a7:7e:11:31:a4:e9:55:20:1e:b8:8e:23:9d:72:
                    f9:5e:b9:07:f5:cc:11:8f:48:88:81:e5:d7:44:6e:
                    6d:03:a2:11:57:90:bc:d3:3b:b1:d4:ef:33:73:34:
                    4c:ef:2a:ac:76:1a:ff:a4:e9:68:a7:17:26:54:bb:
                    b6:7a:73:18:0b:55:d5:d7:12:f1:3f:a3:c2:8b:ac:
                    fc:9b:24:27:fd:f0:22:45:45:17:4d:f6:d5:33:63:
                    96:20:56:9e:86:17:7f:c0:19:47:d6:ec:f1:73:d0:
                    f0:ba:af:5c:89:99:d3:dd:c4:26:b1:d8:95:a7:66:
                    b1:3f:d8:b6:40:01:8d:e0:dc:be:46:be:d6:31:d1:
                    fb:69:9b:a8:2f:e4:a9:c7:e9:ec:ec:4a:41:14:7d:
                    56:38:29:0d:03:11:e5:d4:db:e5:47:ba:72:90:84:
                    fa:24:db:45:15:06:c0:d8:60:11:57:ae:de:2a:12:
                    ee:1e:c3:50:34:fa:f3:4d:78:6f:f3:bd:3c:cd:cd:
                    7a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C9:FC:FD:5F:59:07:77:10:AB:CA:C5:FB:CB:93:2B:BD:62:74:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/51a29c7b-6cc5-38f4-8a92-1678e6d72c13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/d5a6b267-6096-4872-9afb-b9517766833a.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E7:F2:BC:B2:15:17:7D:D7:6F:E8:FA:F0:04:46:11:E3:75:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:2d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:39:0c:43:be:d4:28:20:80:8b:65:6b:6c:94:9d:d1:f9:12:
         96:6d:3a:ec:53:a4:a8:7c:1d:6d:a7:68:51:2f:27:dd:c4:a4:
         5d:b0:c6:f2:9b:1e:3e:23:c5:a4:f6:f2:c2:a0:e9:74:54:5f:
         50:4a:05:e0:04:99:3c:07:a3:80:0f:21:25:ca:88:29:f0:32:
         b5:e6:7c:c3:13:37:94:89:d9:b6:d1:ee:f0:6f:9d:02:ba:52:
         57:de:9d:e5:0f:24:fc:0e:a8:27:be:d5:c9:e9:8f:74:bc:13:
         f9:f8:01:a2:21:fb:e0:44:5d:69:1a:0b:65:86:c4:1c:4a:67:
         81:d1:72:63:99:58:2b:9b:88:0c:a3:4f:45:12:8f:86:ef:7c:
         34:93:4b:f6:5a:9e:f3:20:9b:74:bd:d5:36:39:8b:10:c4:b8:
         35:69:9b:d1:89:e2:db:4e:ff:29:9d:46:bc:05:c6:b8:03:09:
         0a:52:c3:dd:56:a2:f7:54:19:cc:16:46:7f:f6:15:24:b2:64:
         57:58:ab:98:69:85:13:4a:e6:08:3d:a2:2d:14:5c:69:22:90:
         15:c9:f6:8f:2e:9c:24:f9:5e:fc:a1:16:a7:86:e8:45:c6:a8:
         f1:77:db:78:37:cf:0f:0b:b2:ba:0d:e5:07:7c:8f:0a:ee:d6:
         b4:36:4d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:28:08 2026 by rpki-client