Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/708953cb-d215-3fd6-93e9-296bb798a89d.roa
File:                     708953cb-d215-3fd6-93e9-296bb798a89d.roa (raw, json)
Hash identifier:          VXuKN5Lu6wYQax7hD197aDz6agcFXKh7E1YzK4HlSdw=
Subject key identifier:   7A:24:9B:FE:54:18:A9:68:0F:F9:BD:B7:CF:F9:56:AD:00:DB:32:DF
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F4328584F093CD2E6912F4C2A1DE76764
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/708953cb-d215-3fd6-93e9-296bb798a89d.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     6363
IP address blocks:        2606:9fc0:e004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:d2:e6:91:2f:4c:2a:1d:e7:67:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=afc679cc-88ba-43d8-b2a1-adbacc18385a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7e:fc:b9:5f:6b:b3:e8:0c:df:42:00:92:21:
                    27:bb:55:63:88:0e:fc:9f:83:c8:0d:80:a2:09:4c:
                    f7:a2:9f:36:22:f9:f4:e3:42:ad:ab:65:33:1b:8a:
                    e0:6f:6d:3e:74:2a:9b:bf:68:80:17:27:29:dc:eb:
                    65:e0:6d:de:ac:59:1c:c6:bb:ac:2b:1e:96:20:6d:
                    ca:2f:7f:82:00:20:77:42:76:e9:77:46:20:fc:62:
                    18:dd:27:2a:07:2e:84:57:e8:ca:32:3b:e0:8b:2f:
                    4f:6c:fa:ef:1c:fc:48:8f:5e:b9:d2:2e:da:22:89:
                    69:d0:6f:32:d5:99:c8:4f:c1:35:0e:6d:d7:03:68:
                    b5:1a:1e:92:6b:03:74:33:35:49:d9:6a:cc:62:c0:
                    03:97:1c:dc:95:ed:a7:3d:dd:96:ba:a4:9a:dc:00:
                    cf:48:b1:a6:4c:f8:26:e9:1e:d8:98:df:9c:f7:8b:
                    f6:44:25:eb:f7:70:b7:fe:76:af:0f:45:37:96:4c:
                    ca:43:bc:bd:50:be:6a:81:a4:1c:a7:d8:4d:70:a8:
                    9a:0b:e6:59:f3:38:31:d5:b4:42:22:53:da:1e:fd:
                    84:81:04:9a:16:8e:95:de:35:f3:69:38:bc:4b:1c:
                    b7:5b:0c:90:8c:b1:8b:03:7e:ea:29:72:ef:91:7f:
                    a0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:24:9B:FE:54:18:A9:68:0F:F9:BD:B7:CF:F9:56:AD:00:DB:32:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/708953cb-d215-3fd6-93e9-296bb798a89d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:e004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:1b:29:e5:16:f5:a9:3d:c5:92:b3:6f:75:7e:a9:08:af:74:
         9e:6a:d2:19:09:f9:14:41:5f:13:e5:2a:5c:af:e7:d9:ed:4a:
         63:49:b1:13:f8:1d:2f:54:dc:59:50:ce:82:40:b3:8c:4c:74:
         c3:86:3c:ce:a2:4b:ea:86:49:27:0d:48:2d:8b:0a:86:a2:b5:
         17:a6:f6:26:6d:79:b0:60:80:3e:64:35:66:6e:54:09:8b:01:
         ea:40:eb:50:6e:77:9d:78:96:45:ab:08:d2:8d:c4:25:15:8c:
         04:dc:a1:0a:27:6f:66:48:77:1a:a3:a9:86:f4:cf:17:f6:44:
         de:57:66:08:d7:11:b1:b4:20:9d:c3:a8:35:7d:db:e4:37:9b:
         61:55:65:91:f1:43:f4:bb:13:4b:7d:88:fa:f3:0c:c2:9f:6a:
         e5:e4:5c:4a:71:40:82:a6:8c:78:29:7e:d8:06:48:63:a5:3d:
         20:f1:2a:82:a0:ce:e5:51:83:98:3b:f5:06:df:7a:eb:81:d0:
         8f:8c:ce:72:de:4d:cb:11:2b:85:9c:32:94:01:8c:63:d4:c8:
         a5:63:96:70:08:32:df:1f:07:67:41:0a:da:7e:16:94:ec:2d:
         a5:b6:3e:79:51:ca:11:89:9e:32:b5:bb:88:a4:ef:57:9a:1d:
         21:03:26:93
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8JPNLmkS9MKh3nZ2QwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx
YmUwMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk
YWZjNjc5Y2MtODhiYS00M2Q4LWIyYTEtYWRiYWNjMTgzODVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln78uV9rs+gM30IAkiEnu1VjiA78n4PIDYCi
CUz3op82Ivn040Ktq2UzG4rgb20+dCqbv2iAFycp3Otl4G3erFkcxrusKx6WIG3K
L3+CACB3Qnbpd0Yg/GIY3ScqBy6EV+jKMjvgiy9PbPrvHPxIj1650i7aIolp0G8y
1ZnIT8E1Dm3XA2i1Gh6SawN0MzVJ2WrMYsADlxzcle2nPd2WuqSa3ADPSLGmTPgm
6R7YmN+c94v2RCXr93C3/navD0U3lkzKQ7y9UL5qgaQcp9hNcKiaC+ZZ8zgx1bRC
IlPaHv2EgQSaFo6V3jXzaTi8Sxy3WwyQjLGLA37qKXLvkX+gBwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHokm/5UGKloD/m9t8/5Vq0A2zLfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4
NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvNzA4OTUzY2ItZDIxNS0z
ZmQ2LTkzZTktMjk2YmI3OThhODlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz
ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx
MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1
OTI1MTFiZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgafwOAE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJ8bKeUW9ak9xZKzb3V+qQivdJ5q0hkJ+RRBXxPlKlyv59ntSmNJ
sRP4HS9U3FlQzoJAs4xMdMOGPM6iS+qGSScNSC2LCoaitRem9iZtebBggD5kNWZu
VAmLAepA61Bud514lkWrCNKNxCUVjATcoQonb2ZIdxqjqYb0zxf2RN5XZgjXEbG0
IJ3DqDV92+Q3m2FVZZHxQ/S7E0t9iPrzDMKfauXkXEpxQIKmjHgpftgGSGOlPSDx
KoKgzuVRg5g79QbfeuuB0I+MznLeTcsRK4WcMpQBjGPUyKVjlnAIMt8fB2dBCtp+
FpTsLaW2PnlRyhGJnjK1u4ik71eaHSEDJpM=
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:33:34 2026 by rpki-client