Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/1ca07006-9037-38eb-a1cb-047bccb0883e.roa
File:                     1ca07006-9037-38eb-a1cb-047bccb0883e.roa (raw, json)
Hash identifier:          A8c+SoD32C8IqC+jsUShzpmiZkSrUgVPj80Nc6Ne20c=
Subject key identifier:   DC:AB:2D:41:E7:01:A8:D3:55:C0:BF:99:5A:4F:B0:D8:27:C5:DF:2A
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F4328584ADECBD5684FA3CC49B99FA480
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/1ca07006-9037-38eb-a1cb-047bccb0883e.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     6363
IP address blocks:        2606:9fc0:f200::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:d5:68:4f:a3:cc:49:b9:9f:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=8c93e277-e522-4f16-af83-dedee4dcd667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:52:4a:d0:b4:4a:57:96:44:d3:d1:b5:66:05:
                    05:82:d8:45:da:c7:21:c2:2a:f8:36:81:3a:19:0c:
                    62:53:33:f1:ec:3d:31:aa:ea:6a:4c:d3:6a:3a:d3:
                    66:32:76:98:cf:bd:cb:20:da:fa:3f:05:1b:cf:74:
                    f3:1f:c4:21:c3:87:dd:b5:d9:e5:c5:51:0c:29:3b:
                    64:9f:48:b3:dc:b4:2d:b7:a3:70:e1:9c:a0:a4:d0:
                    1b:a5:f8:41:34:56:e2:5a:c4:59:79:b6:75:f9:83:
                    0e:e3:7c:89:5d:a1:c1:3a:92:6f:d5:5a:1b:30:91:
                    0a:ed:b9:51:51:51:d6:2c:e3:ec:2d:ef:d2:7b:b2:
                    e3:a1:2d:e0:f8:4c:1a:72:7e:93:22:db:15:40:f5:
                    dc:2e:e4:34:47:2a:e7:42:8f:e8:f9:c2:21:b4:31:
                    89:79:24:2e:cb:7c:0a:99:1e:3e:62:df:84:29:df:
                    65:8f:d2:17:25:c9:67:e6:78:24:e9:16:8c:eb:e9:
                    b0:d7:b9:93:f7:75:5c:b5:52:2a:02:2a:90:5c:f1:
                    b5:0d:00:49:79:81:11:3c:5e:40:66:52:20:1a:15:
                    b2:92:b6:03:60:83:04:d9:3f:69:2d:12:18:02:ae:
                    64:46:ec:58:f5:61:ac:96:73:b3:45:98:cd:10:e6:
                    c2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AB:2D:41:E7:01:A8:D3:55:C0:BF:99:5A:4F:B0:D8:27:C5:DF:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/1ca07006-9037-38eb-a1cb-047bccb0883e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:f200::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:de:a4:19:01:23:40:a1:f5:38:15:20:1b:43:a1:43:88:2f:
         16:a9:d2:3b:26:3f:a8:05:af:49:6b:5a:be:47:cc:c0:8d:e3:
         9e:81:1a:2b:50:32:61:d8:ae:93:a4:e5:10:ae:3b:88:e0:31:
         7a:2f:72:98:b2:3a:0c:21:7b:49:9b:23:c8:60:3a:87:b9:b6:
         82:aa:af:17:a6:0f:db:82:01:f8:89:1a:28:e5:81:e3:ae:cc:
         4b:50:7f:7c:ca:df:78:76:3c:8c:80:f1:92:a1:51:a4:78:9c:
         38:a3:2e:b2:4b:2d:b0:ca:09:2a:d5:a7:89:94:b2:47:b0:4e:
         06:83:fc:fb:ae:53:26:7f:29:8c:fa:d3:01:b7:a1:ee:46:7c:
         5b:d1:68:f0:39:da:20:ba:a0:31:26:27:76:06:f1:2f:8b:1b:
         7d:61:91:4b:f8:43:3d:23:38:70:7b:cd:ab:84:85:b8:d4:64:
         5c:ed:59:b2:1a:ee:77:07:98:a9:a7:b4:79:c3:9a:b4:a3:f9:
         20:c5:9f:47:95:90:11:6c:72:9d:da:d5:95:2f:f9:ae:f5:a7:
         ac:74:b8:0c:b7:cc:7b:e5:05:c5:2b:f4:a4:bf:3a:35:ab:0c:
         ee:cf:39:b9:f4:b3:fe:6d:b3:26:41:11:80:a2:7c:65:51:07:
         72:16:b9:35
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErey9VoT6PMSbmfpIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx
YmUwMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk
OGM5M2UyNzctZTUyMi00ZjE2LWFmODMtZGVkZWU0ZGNkNjY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVJK0LRKV5ZE09G1ZgUFgthF2schwir4NoE6
GQxiUzPx7D0xqupqTNNqOtNmMnaYz73LINr6PwUbz3TzH8Qhw4fdtdnlxVEMKTtk
n0iz3LQtt6Nw4ZygpNAbpfhBNFbiWsRZebZ1+YMO43yJXaHBOpJv1VobMJEK7blR
UVHWLOPsLe/Se7LjoS3g+Ewacn6TItsVQPXcLuQ0RyrnQo/o+cIhtDGJeSQuy3wK
mR4+Yt+EKd9lj9IXJcln5ngk6RaM6+mw17mT93VctVIqAiqQXPG1DQBJeYERPF5A
ZlIgGhWykrYDYIME2T9pLRIYAq5kRuxY9WGslnOzRZjNEObCTwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNyrLUHnAajTVcC/mVpPsNgnxd8qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4
NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvMWNhMDcwMDYtOTAzNy0z
OGViLWExY2ItMDQ3YmNjYjA4ODNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz
ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx
MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1
OTI1MTFiZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgafwPIA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGHepBkBI0Ch9TgVIBtDoUOILxap0jsmP6gFr0lrWr5HzMCN456B
GitQMmHYrpOk5RCuO4jgMXovcpiyOgwhe0mbI8hgOoe5toKqrxemD9uCAfiJGijl
geOuzEtQf3zK33h2PIyA8ZKhUaR4nDijLrJLLbDKCSrVp4mUskewTgaD/PuuUyZ/
KYz60wG3oe5GfFvRaPA52iC6oDEmJ3YG8S+LG31hkUv4Qz0jOHB7zauEhbjUZFzt
WbIa7ncHmKmntHnDmrSj+SDFn0eVkBFscp3a1ZUv+a71p6x0uAy3zHvlBcUr9KS/
OjWrDO7PObn0s/5tsyZBEYCifGVRB3IWuTU=
-----END CERTIFICATE-----
Generated at Thu Aug 21 03:02:53 2025 by rpki-client