Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/8cf20e1d-1e93-3fbd-909b-734f61934be6.roa
File:                     8cf20e1d-1e93-3fbd-909b-734f61934be6.roa (raw, json)
Hash identifier:          +W0elMhAMQTFOqPL2TzwgXXve9v8mcmNi8tLpDgnqac=
Subject key identifier:   BD:9E:50:90:14:BA:58:A4:F8:46:BB:A2:70:92:5C:73:5B:85:DA:EA
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F4328584B2B919405E268BE598CCC11A0
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/8cf20e1d-1e93-3fbd-909b-734f61934be6.roa
Signing time:             Fri 12 Sep 2025 13:00:42 +0000
ROA not before:           Fri 12 Sep 2025 13:00:42 +0000
ROA not after:            Thu 11 Dec 2025 14:00:42 +0000
asID:                     16509
IP address blocks:        2606:9fc0::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2b:91:94:05:e2:68:be:59:8c:cc:11:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: Sep 12 13:00:42 2025 GMT
            Not After : Dec 11 14:00:42 2025 GMT
        Subject: CN=578f7647-ad65-4fec-a860-05990287e89f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:30:d1:f5:b5:90:c3:eb:3a:87:7f:b4:4b:81:
                    99:78:0f:bc:14:db:5f:77:5e:d5:0e:79:f7:80:ae:
                    77:21:f0:c1:dd:fd:69:b2:7d:77:7c:49:1e:25:aa:
                    c5:51:7e:03:37:30:98:64:4f:d1:b1:5a:61:10:6c:
                    28:c0:3b:01:d9:c0:2a:90:63:ab:1e:65:90:2a:c6:
                    78:72:65:3b:21:17:f0:70:bf:6c:1e:f4:20:9c:85:
                    03:76:3b:74:d0:cf:dc:f1:f2:0d:ec:72:1a:64:73:
                    6a:c8:ea:ec:e0:14:48:63:26:d6:53:29:21:86:52:
                    e5:98:7c:87:0d:37:1a:be:38:34:b2:51:d9:ee:38:
                    0d:fb:e6:99:a3:f3:ac:1e:d2:d9:12:23:cf:3b:83:
                    ba:fb:3f:c2:f7:26:39:98:36:67:14:a8:bc:64:b6:
                    26:ff:75:d9:36:fb:8c:ba:e2:87:75:d1:15:10:64:
                    74:a8:69:98:06:fa:75:1a:57:34:ff:ec:12:72:c1:
                    c7:0a:02:ed:72:25:da:a3:c5:4e:af:fb:e9:0f:cf:
                    0c:f7:a3:f1:b4:7c:d6:03:c0:52:6a:62:da:e5:c1:
                    88:36:d3:51:2c:68:e8:0b:05:52:49:b2:48:d4:0b:
                    7f:ad:39:8a:f9:12:de:8c:de:b6:9c:88:f6:15:07:
                    cd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9E:50:90:14:BA:58:A4:F8:46:BB:A2:70:92:5C:73:5B:85:DA:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/8cf20e1d-1e93-3fbd-909b-734f61934be6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:03:02:7d:f5:d5:d9:a9:0f:c2:24:db:08:0e:be:35:0a:fd:
         11:0a:4a:e3:12:6e:99:28:17:50:f3:f8:4a:c9:21:07:fa:09:
         62:b5:82:d0:00:4b:02:08:39:8d:be:68:8b:65:20:fc:8f:72:
         6c:e8:e5:aa:f9:aa:a4:23:3f:aa:1f:a0:cf:72:a1:a5:c1:44:
         61:52:88:31:1c:7c:3c:e7:ec:d6:30:7b:37:18:3c:8d:8b:a0:
         f7:1e:37:09:0e:d5:c7:08:a1:b3:ea:ac:4c:84:77:57:d9:df:
         ae:c6:15:a1:f1:c6:c8:9c:c4:a7:49:4a:c2:19:c3:71:61:c5:
         b9:30:6f:a8:33:19:88:22:53:53:3f:92:e2:8e:73:70:a1:45:
         dd:a6:99:45:74:94:32:f5:af:16:d5:ff:d5:4f:eb:55:da:b2:
         cf:07:2e:80:c2:70:0f:8d:68:27:f0:09:88:0f:21:35:04:45:
         9d:8b:ac:aa:27:c2:3a:17:18:35:15:a8:2a:2f:ae:ec:2c:49:
         38:b2:f7:d9:b5:9b:5c:ef:87:47:ef:a6:b4:e8:f9:be:2b:79:
         88:f0:cd:9d:e3:61:d9:e1:45:bc:cc:12:65:14:e9:7e:33:6c:
         f1:7a:52:37:b8:0e:4c:4a:c6:dd:dc:5d:d4:dc:3c:a3:7f:d9:
         5f:3e:c9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:21:51 2025 by rpki-client