Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/cf28d96d-39da-39e5-aade-7826c420cf3f.roa
File:                     cf28d96d-39da-39e5-aade-7826c420cf3f.roa (raw, json)
Hash identifier:          xSzWea81jVolN++T11BAdxHX9S85C4sPj/IvawoVoJQ=
Subject key identifier:   04:C2:B7:CC:F5:D5:E8:7B:01:5A:79:08:27:FB:40:47:97:E3:98:12
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F4328584ADECBD3A3A7A1A687E6DEFA00
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/cf28d96d-39da-39e5-aade-7826c420cf3f.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     6363
IP address blocks:        2606:9fc0:d000::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:d3:a3:a7:a1:a6:87:e6:de:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=0881c1e8-ea96-499d-bcae-71a8b857c425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b4:3b:20:2b:52:16:b5:7c:57:11:82:95:13:
                    3a:5e:cf:f4:5e:ab:22:ee:81:9d:56:01:57:87:20:
                    45:cc:e7:de:ca:b4:bb:59:56:07:49:30:84:10:91:
                    bf:fc:84:d2:1b:af:01:d3:46:50:ee:90:14:fd:de:
                    79:37:9a:88:d5:5d:d7:1f:6e:c7:fb:ea:40:23:58:
                    ba:75:09:55:f6:3a:e4:be:82:5b:cf:81:3e:d9:18:
                    88:51:75:db:79:2f:78:11:9f:8f:9c:a1:26:9b:e9:
                    20:cd:8f:96:07:84:3b:ab:b6:a2:b6:17:8d:1a:43:
                    50:6c:df:51:8a:3d:14:12:33:27:87:95:f8:d4:81:
                    54:43:9d:c8:ed:21:78:bc:b1:35:81:b8:ea:d4:18:
                    de:3d:73:80:6b:71:33:6f:25:38:5a:55:ac:39:05:
                    27:97:e3:5c:b6:24:41:97:d4:72:62:1e:57:af:38:
                    f7:29:a2:b0:87:b7:a1:f7:68:e9:07:db:24:8e:de:
                    28:d2:3f:26:74:6e:c7:71:53:91:b9:8b:bc:b3:4c:
                    15:f6:ae:a7:d1:7a:32:26:3b:4f:37:6c:25:00:9c:
                    53:11:e1:ea:fc:5c:57:f5:44:50:3c:3a:ef:de:ee:
                    3d:c2:0e:40:99:31:66:26:52:b9:3b:d2:81:c9:95:
                    0f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C2:B7:CC:F5:D5:E8:7B:01:5A:79:08:27:FB:40:47:97:E3:98:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/cf28d96d-39da-39e5-aade-7826c420cf3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:d000::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:3c:a5:63:ff:1d:3c:46:ac:60:ee:6a:fe:d0:2b:75:ab:03:
         71:be:64:4d:6f:c8:af:07:29:80:d4:df:88:34:a0:4f:a4:25:
         73:c0:d4:b7:28:bc:7c:ab:5a:25:ad:26:04:cd:4b:48:ad:69:
         54:69:17:40:62:ae:48:55:38:c9:9d:98:19:55:cf:b9:38:e8:
         12:8d:aa:92:58:c2:2e:d5:5a:f0:a4:aa:28:bb:15:11:f5:de:
         78:af:31:88:cc:b0:c7:d2:66:c6:1b:79:68:cc:20:7b:6d:c6:
         71:9f:7d:83:b0:20:33:30:1f:84:3f:f5:aa:52:49:72:7f:93:
         3e:df:d3:54:7e:84:0d:98:14:a6:ec:59:a5:e8:6d:b0:25:30:
         da:55:67:21:a4:0b:00:32:40:b4:7a:a8:aa:9c:24:c8:e9:c0:
         e0:36:a1:99:2f:8e:0a:c8:33:18:fd:74:fc:95:10:26:aa:0c:
         19:79:33:21:df:95:7f:b6:76:66:20:6b:d6:da:bf:36:33:83:
         a6:10:24:a9:b9:69:26:7d:d5:fb:fe:9b:b6:a0:8a:79:ae:70:
         69:19:67:c1:ec:5a:e0:a4:a2:f1:9f:37:84:1d:e7:1e:4e:93:
         e5:0a:63:2c:e3:cb:54:15:36:ef:91:18:c0:3f:f5:7a:99:27:
         e7:d8:b8:26
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErey9Ojp6Gmh+be+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx
YmUwMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk
MDg4MWMxZTgtZWE5Ni00OTlkLWJjYWUtNzFhOGI4NTdjNDI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrQ7ICtSFrV8VxGClRM6Xs/0Xqsi7oGdVgFX
hyBFzOfeyrS7WVYHSTCEEJG//ITSG68B00ZQ7pAU/d55N5qI1V3XH27H++pAI1i6
dQlV9jrkvoJbz4E+2RiIUXXbeS94EZ+PnKEmm+kgzY+WB4Q7q7aitheNGkNQbN9R
ij0UEjMnh5X41IFUQ53I7SF4vLE1gbjq1BjePXOAa3EzbyU4WlWsOQUnl+NctiRB
l9RyYh5Xrzj3KaKwh7eh92jpB9skjt4o0j8mdG7HcVORuYu8s0wV9q6n0XoyJjtP
N2wlAJxTEeHq/FxX9URQPDrv3u49wg5AmTFmJlK5O9KByZUPMwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFATCt8z11eh7AVp5CCf7QEeX45gSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4
NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvY2YyOGQ5NmQtMzlkYS0z
OWU1LWFhZGUtNzgyNmM0MjBjZjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz
ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx
MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1
OTI1MTFiZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgafwNAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHY8pWP/HTxGrGDuav7QK3WrA3G+ZE1vyK8HKYDU34g0oE+kJXPA
1LcovHyrWiWtJgTNS0itaVRpF0BirkhVOMmdmBlVz7k46BKNqpJYwi7VWvCkqii7
FRH13nivMYjMsMfSZsYbeWjMIHttxnGffYOwIDMwH4Q/9apSSXJ/kz7f01R+hA2Y
FKbsWaXobbAlMNpVZyGkCwAyQLR6qKqcJMjpwOA2oZkvjgrIMxj9dPyVECaqDBl5
MyHflX+2dmYga9bavzYzg6YQJKm5aSZ91fv+m7aginmucGkZZ8HsWuCkovGfN4Qd
5x5Ok+UKYyzjy1QVNu+RGMA/9XqZJ+fYuCY=
-----END CERTIFICATE-----
Generated at Thu Aug 21 04:58:05 2025 by rpki-client