Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/51a29c7b-6cc5-38f4-8a92-1678e6d72c13.roa
File:                     51a29c7b-6cc5-38f4-8a92-1678e6d72c13.roa (raw, json)
Hash identifier:          FOiKSDcdsRoGfWyIsPGLRd5S/jJo0S+/W9mTcCd9s8M=
Subject key identifier:   B9:A5:EF:83:79:98:39:0F:30:BB:99:78:AF:33:C4:AE:38:DD:87:7C
Certificate issuer:       /CN=d5a6b267-6096-4872-9afb-b9517766833a
Certificate serial:       010D0C9F4328584D0EA7B85B31F2418CD2EEF400
Authority key identifier: 5E:E7:F2:BC:B2:15:17:7D:D7:6F:E8:FA:F0:04:46:11:E3:75:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/51a29c7b-6cc5-38f4-8a92-1678e6d72c13.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     10886
IP address blocks:        2001:500:2d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/d5a6b267-6096-4872-9afb-b9517766833a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/d5a6b267-6096-4872-9afb-b9517766833a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:b8:5b:31:f2:41:8c:d2:ee:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5a6b267-6096-4872-9afb-b9517766833a
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=fca263b7-0099-4d72-a649-1147e058861d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:95:f2:ce:df:f3:dc:24:56:17:39:ff:e0:93:
                    43:45:b4:d1:03:bc:5c:a5:5f:f5:0a:85:15:49:e5:
                    3a:36:3f:2d:4d:1f:6d:34:2a:18:d6:43:47:6c:34:
                    2a:a9:67:82:71:51:20:33:ce:33:45:28:3d:ea:0d:
                    18:93:5c:67:da:58:d2:b3:8d:23:2f:04:95:67:7a:
                    07:8f:69:52:ac:f2:2a:0e:b9:b6:21:e1:f1:d8:f7:
                    1d:1c:81:84:55:d0:62:f5:10:85:3f:db:73:5a:9b:
                    8e:f1:ae:f4:06:e5:43:cf:ff:45:ba:d1:f7:30:ca:
                    28:81:0f:f1:61:1a:00:5d:95:f4:3d:65:39:4e:24:
                    92:46:38:c6:da:22:94:bf:40:f8:13:1b:fc:98:6d:
                    c9:5c:0f:35:05:e7:9c:3e:80:db:73:b8:c1:2c:9f:
                    6b:f1:e3:68:bc:72:cf:84:9e:b3:d1:99:bc:08:49:
                    6e:ea:d5:c4:f1:25:83:3f:c5:60:0e:d9:22:9a:1a:
                    78:99:1c:23:94:3d:98:15:05:fa:2b:bc:fd:92:01:
                    f3:7e:95:bd:76:c4:08:52:21:ae:22:2c:8f:8c:65:
                    1b:97:c3:db:1b:88:7c:f5:89:8d:02:99:53:22:07:
                    23:55:a7:63:08:5a:6c:d3:10:82:89:dc:78:28:3c:
                    3c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A5:EF:83:79:98:39:0F:30:BB:99:78:AF:33:C4:AE:38:DD:87:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/51a29c7b-6cc5-38f4-8a92-1678e6d72c13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/d5a6b267-6096-4872-9afb-b9517766833a.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E7:F2:BC:B2:15:17:7D:D7:6F:E8:FA:F0:04:46:11:E3:75:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:2d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:cf:ec:c8:5b:f3:0e:f5:9f:c8:fd:b3:8a:39:8b:a2:ef:71:
         b0:9d:e9:57:11:3c:e6:b2:82:bf:0a:c4:bb:15:78:ed:34:46:
         c3:d0:dd:d2:1d:d1:76:11:4e:a6:ec:a4:43:f8:3e:62:00:8b:
         9f:24:52:6e:77:7d:21:87:26:d0:b0:f6:dc:cc:b9:ca:3b:86:
         ab:cd:78:3a:e4:d0:11:23:a0:b1:b4:dd:da:54:9b:19:ae:85:
         a1:e4:8e:29:d0:74:67:36:57:b0:a8:d1:2b:07:4f:ca:d5:74:
         d9:9a:a8:77:85:51:1a:df:8a:58:74:6d:64:3c:75:a8:07:ad:
         99:f1:b4:fb:56:c4:ff:56:14:7d:e7:43:bf:5e:a9:a4:68:c2:
         89:7c:07:82:f4:14:16:a1:9f:a5:e7:9a:b0:d3:0f:90:77:5d:
         15:d7:cf:75:d7:6b:ff:75:ec:6e:7f:e7:cd:9b:65:f8:1b:2b:
         15:99:c9:d4:2c:a4:80:52:cd:00:a3:1e:b3:d6:58:eb:23:fd:
         ea:95:b8:96:4e:b6:8f:74:f9:20:69:c7:f0:be:71:65:eb:5b:
         ff:17:f6:c0:48:c0:1c:16:2e:7e:cb:93:9e:2f:85:92:fc:8c:
         53:1a:2c:1f:8c:e8:34:31:48:f0:7f:6f:e2:66:b1:43:55:34:
         ba:d4:fc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:52 2026 by rpki-client