Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/8cf20e1d-1e93-3fbd-909b-734f61934be6.roa
File:                     8cf20e1d-1e93-3fbd-909b-734f61934be6.roa (raw, json)
Hash identifier:          8ED4W1LmjMYGBUVSTF045GVmvoXErYFUu/jvruzijlc=
Subject key identifier:   49:2A:D5:80:37:AC:06:02:DB:F2:00:17:28:9E:D2:3A:2D:25:A7:E1
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F4328584A4AD5956B58885905DAD42930
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/8cf20e1d-1e93-3fbd-909b-734f61934be6.roa
Signing time:             Tue 24 Jun 2025 01:00:50 +0000
ROA not before:           Tue 24 Jun 2025 01:00:50 +0000
ROA not after:            Mon 22 Sep 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        2606:9fc0::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:d5:95:6b:58:88:59:05:da:d4:29:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: Jun 24 01:00:50 2025 GMT
            Not After : Sep 22 01:00:50 2025 GMT
        Subject: CN=11e128ee-4e49-41e6-b1c8-1c8050380137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:33:11:a8:5b:5e:18:bd:0c:5b:9f:dc:9a:3b:
                    23:9b:2b:d7:36:64:f6:57:6e:ca:31:6b:c8:ae:a2:
                    1f:30:e1:0d:ad:e5:7b:61:f4:84:48:f4:98:67:c1:
                    a2:e2:37:1c:b4:89:9c:85:58:b6:ff:c6:66:74:e4:
                    0f:e1:52:10:59:12:83:77:6e:be:c8:ca:53:17:f6:
                    32:a2:fd:75:1d:f7:9f:99:32:49:3c:91:64:6b:dd:
                    db:94:97:93:a0:29:63:fc:62:b6:34:ac:d8:e7:c3:
                    54:4e:60:9a:40:c5:7c:83:c0:a9:5d:62:fe:f0:58:
                    b6:4d:0f:ee:05:00:ce:69:09:8d:0f:55:ae:77:4c:
                    96:a3:8b:00:d5:88:5f:3f:dd:8f:6d:82:9a:de:8b:
                    ab:25:a8:44:59:00:40:1a:2a:12:1b:ca:83:39:11:
                    3d:4a:6c:bf:10:cc:b4:32:be:f7:1a:c3:db:15:19:
                    8e:be:43:56:4e:e9:5f:e3:3b:71:c2:d3:b1:cd:ac:
                    c8:23:cf:ab:f6:10:3c:ee:1f:59:b0:ca:e2:e3:b0:
                    c9:82:c1:19:d2:17:08:69:ae:60:04:ba:b1:ae:85:
                    4c:3e:c5:c0:fd:27:30:32:67:a8:30:f3:73:8d:19:
                    fe:7e:11:b8:a9:81:89:ac:cd:5a:e4:68:d1:d3:40:
                    47:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2A:D5:80:37:AC:06:02:DB:F2:00:17:28:9E:D2:3A:2D:25:A7:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/8cf20e1d-1e93-3fbd-909b-734f61934be6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:67:f1:e0:ba:86:e8:88:36:85:c1:fd:54:ed:81:cc:38:25:
         50:59:7c:96:55:35:4a:67:40:92:57:48:50:ee:e4:14:dc:5c:
         e1:ef:b1:92:28:c5:29:40:72:7b:e3:22:b4:59:14:2d:82:6a:
         5e:b9:17:b2:1b:5e:bd:71:b9:06:83:61:30:5a:bf:4e:b1:2e:
         e0:3a:af:47:82:ad:93:bd:2d:41:60:20:ac:25:fb:95:0f:a0:
         87:b4:15:37:89:99:7a:32:e7:05:4d:94:58:82:42:b6:65:d4:
         2b:e9:4d:f0:f7:be:1d:6b:af:8a:1d:50:a0:61:e4:a3:74:4c:
         d8:8c:0b:6a:1f:10:81:9f:a1:43:31:34:41:15:4f:95:4f:b5:
         23:80:49:ac:e5:73:48:17:d8:73:91:64:c2:98:5c:8e:6c:22:
         06:03:cb:d9:70:6c:46:90:bb:21:08:db:d6:dc:71:bb:97:90:
         9d:e1:5b:d6:47:49:c2:f2:5f:16:3a:96:9d:cf:14:e0:31:15:
         d2:8a:51:db:be:99:b6:10:1f:6e:9e:4b:13:bb:3a:81:b3:eb:
         fa:bc:e7:3a:1a:b9:83:66:da:51:09:ea:94:f1:47:b6:27:ff:
         27:61:cd:34:87:2f:df:0f:32:f5:47:75:83:15:b9:ee:82:df:
         44:15:0b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:06:16 2025 by rpki-client