Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/51ae6d68-6126-3d4f-ab30-9970d2105845.roa
File:                     51ae6d68-6126-3d4f-ab30-9970d2105845.roa (raw, json)
Hash identifier:          AYbUmXclJE2OHlBejT8LwxE4BqOpq0o5SMwDJ36vIyM=
Subject key identifier:   31:54:87:E0:4D:F8:B8:AF:3F:9D:FA:B9:04:9E:FB:87:DB:70:9A:BE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D237A56F83FFC88B5352CA600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/51ae6d68-6126-3d4f-ab30-9970d2105845.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        2604:2d80:bf80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:56:f8:3f:fc:88:b5:35:2c:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=ed171a87-c9ef-4285-8b14-2e43b2e0c8b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9b:48:9e:53:f6:34:87:54:4a:27:38:23:02:
                    76:c8:17:29:37:5c:9d:89:bb:b7:d5:5a:e5:f4:f9:
                    53:46:79:3d:88:f3:2b:51:02:89:df:80:fa:d7:72:
                    74:f7:32:df:91:90:5b:08:e2:5d:a8:fe:68:89:c1:
                    ed:7d:1f:df:7b:eb:c9:2c:a8:da:e9:b8:64:ce:6c:
                    02:21:cb:13:98:3e:11:46:9a:e7:24:6d:e1:2f:b9:
                    64:60:a7:05:e3:65:1a:c1:77:c6:05:a1:41:82:b7:
                    c3:b5:19:2c:fa:f0:71:b9:78:1e:f5:02:86:d4:6a:
                    9f:14:02:e2:c2:5a:9f:d1:88:03:2a:4a:b1:cc:3e:
                    75:70:76:0f:22:ae:6d:23:9a:85:ca:3f:54:87:ed:
                    25:3e:a8:b3:e9:2b:0b:37:df:be:da:d1:e1:9a:ec:
                    d7:0f:6d:e7:7c:70:3d:e1:8d:14:31:4a:26:38:3c:
                    49:94:a5:a3:22:65:4e:ad:8e:09:5a:e6:49:15:e2:
                    6f:03:64:be:98:0b:c6:8e:b4:2f:69:ff:38:a4:e3:
                    a3:9d:d6:a6:5b:7b:46:ef:ce:7c:b8:40:07:3c:53:
                    00:c7:ca:f4:29:62:04:7e:3e:10:60:e8:33:46:fb:
                    1f:da:fc:db:16:0c:69:45:c1:da:9b:d3:36:92:cf:
                    72:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:54:87:E0:4D:F8:B8:AF:3F:9D:FA:B9:04:9E:FB:87:DB:70:9A:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/51ae6d68-6126-3d4f-ab30-9970d2105845.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:bf80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:1e:6c:a8:f8:e4:a5:3b:af:5c:e1:9e:18:5a:20:bc:a5:9e:
         f0:ab:69:cd:6f:fa:fd:e8:a2:6b:56:7f:db:b8:d1:f2:df:ca:
         6d:e4:69:a5:ce:80:31:6a:83:53:9b:b0:f9:43:e2:e2:b6:f2:
         67:c8:57:cb:95:50:7a:2c:bf:d4:a1:b9:58:5c:8f:86:0f:e9:
         c0:d9:43:d6:11:7c:f4:e0:4a:7f:00:ee:13:bc:11:55:cc:6c:
         38:40:75:8e:0d:a0:2e:03:d5:7d:59:82:a7:f8:ea:55:93:aa:
         9e:15:b5:3b:2a:1b:01:97:4f:3f:c8:8f:80:28:78:35:87:7c:
         87:d7:2b:a6:b9:f6:56:06:d5:5d:63:24:cb:77:b6:81:61:3f:
         09:4a:19:96:45:17:da:b9:1c:09:ce:3d:85:dd:bb:87:a6:8a:
         ea:5e:3d:55:c3:47:95:bf:7a:9a:d9:6b:e7:4a:ec:60:d1:f7:
         8f:05:06:bf:37:29:88:7c:c1:7e:ab:5c:d9:37:52:f8:2b:46:
         7a:99:87:a7:ae:12:1f:89:e2:49:38:67:d3:73:d6:e0:47:a4:
         66:10:94:c5:a7:7b:8b:46:93:87:ce:43:3a:a2:ba:8d:b3:13:
         c5:ff:79:5f:2c:a8:3e:cd:4d:b9:02:81:3b:4e:e2:09:39:bd:
         f5:89:bb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:45:34 2026 by rpki-client