Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/2ba24ee2-2c27-3427-9c64-dc1f79dd0f14.roa
File:                     2ba24ee2-2c27-3427-9c64-dc1f79dd0f14.roa (raw, json)
Hash identifier:          tAs9R5Q0SSTsCVn6r40oEMlS23qm4Pw8WgecJbxKuLQ=
Subject key identifier:   38:73:A9:F4:C0:A4:3C:06:D2:73:3C:A8:95:35:59:C2:88:7C:CA:9C
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F4328584ADECBD47684108421367EA680
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/2ba24ee2-2c27-3427-9c64-dc1f79dd0f14.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     6363
IP address blocks:        2606:9fc0:e004::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:d4:76:84:10:84:21:36:7e:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=2b1e75ca-7814-441e-b790-5e1c5bdaad66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:43:ad:34:b1:7d:e3:21:5a:d2:9d:08:70:d8:
                    37:16:b4:3c:f1:7c:38:5c:62:34:27:c3:91:94:23:
                    70:de:3e:40:94:03:bc:74:86:6a:4b:9d:96:6b:3c:
                    ef:f6:f6:8b:7d:88:d9:81:ac:77:c1:77:8b:75:26:
                    cf:0b:3f:b3:0b:4b:1a:c4:d6:6e:c6:02:a9:ff:61:
                    f6:54:e0:ef:93:10:5b:14:c5:5c:43:61:ea:ed:93:
                    bc:0f:5b:39:66:74:bd:6a:1f:5d:02:c9:5d:40:36:
                    9b:0e:b8:e6:bd:6a:72:88:7d:8e:bb:1a:98:fb:e5:
                    63:29:58:da:83:8c:63:a1:bb:03:8f:f4:37:3b:07:
                    7b:25:dd:3f:c1:14:93:59:39:c3:ab:2f:82:4f:b4:
                    85:24:02:b4:bc:51:76:b5:76:e9:d7:f0:98:ba:12:
                    fc:57:b3:fb:63:b2:88:34:72:fe:b9:76:ab:17:ca:
                    1d:8d:43:04:10:45:c5:8f:ac:93:d8:8b:d8:33:fe:
                    60:b6:94:52:58:c2:8f:27:7b:e9:ba:e7:41:69:05:
                    e3:88:be:70:60:be:a6:e1:13:26:4f:46:1a:b5:f4:
                    d6:8d:73:c1:0e:15:a3:a6:7d:d6:d2:57:f4:c0:8e:
                    89:47:47:fe:ce:e8:62:16:04:54:1d:2a:e8:e3:88:
                    e4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:73:A9:F4:C0:A4:3C:06:D2:73:3C:A8:95:35:59:C2:88:7C:CA:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/2ba24ee2-2c27-3427-9c64-dc1f79dd0f14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:e004::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:36:76:b9:8a:76:72:9b:d2:06:24:c0:85:94:10:c5:be:26:
         82:19:73:cb:7b:39:94:7e:a6:02:f8:28:50:04:ba:17:28:ee:
         b3:24:53:19:58:51:c3:c6:bb:9d:0f:55:e5:37:1f:76:2e:79:
         fb:6d:db:25:27:34:d3:d8:43:d3:3b:c0:05:91:1a:18:e8:67:
         30:20:39:12:af:01:e4:3c:d1:b6:e8:ca:b1:e1:27:87:41:ff:
         56:34:2a:26:05:6e:99:96:96:58:49:7f:49:e4:ca:a7:cc:fe:
         22:11:26:90:12:1e:04:40:22:c5:44:93:ee:10:bd:a8:27:50:
         34:e6:3b:08:5e:f0:06:aa:38:0f:ec:f6:4f:42:34:40:a0:37:
         9a:cf:c4:8c:30:5f:41:c0:d6:f9:63:cb:32:70:61:69:a0:56:
         bb:0e:17:bd:33:a1:d0:07:e4:a6:47:1b:20:43:c4:1c:82:2c:
         fc:5b:0f:5f:12:88:08:fd:07:79:cf:6c:05:18:35:36:5e:72:
         17:d3:11:ca:48:7e:d3:93:36:0a:22:1f:bd:8f:43:f2:ff:d0:
         f9:ba:dc:e0:25:2a:f1:30:b2:0c:25:2a:a3:14:e9:b9:85:c1:
         fd:92:04:2a:41:e8:7c:33:ac:22:7d:10:53:d2:1a:48:52:25:
         17:1c:63:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 03:01:50 2025 by rpki-client