Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/51ce0173-4a36-359f-b3af-21efe7090623.roa
File:                     51ce0173-4a36-359f-b3af-21efe7090623.roa (raw, json)
Hash identifier:          IfUazPTzXYfskAc4Io2JvXLG9pqu4TLsvR4GmmCxUaM=
Subject key identifier:   2C:29:19:BD:9E:24:9C:BB:73:2D:AA:67:89:54:85:5A:57:DB:73:A7
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F4328584EBC77035B6D72C12B5EE47600
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/51ce0173-4a36-359f-b3af-21efe7090623.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     7862
IP address blocks:        2620:16d:1000::/38 maxlen: 38
                          2620:16d:1000::/40 maxlen: 40
                          2620:16d:1200::/40 maxlen: 40
                          2620:16d:1400::/40 maxlen: 40
                          2620:16d:1800::/38 maxlen: 38
                          2620:16d:1800::/40 maxlen: 40
                          2620:16d:1a00::/40 maxlen: 40
                          2620:16d:1c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:03:5b:6d:72:c1:2b:5e:e4:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=ca7334e8-ef41-4267-9dd1-db679017ab97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:aa:e6:a7:87:1a:1c:2f:b4:12:f8:0a:ad:26:
                    f2:8e:88:f9:15:d0:f3:b2:06:5e:c2:1f:f4:18:71:
                    c0:bd:15:a2:8e:d4:0d:a0:60:79:ea:3e:41:6e:c4:
                    41:09:08:f1:bb:68:8c:ad:77:6b:ad:09:e3:bb:3b:
                    2c:ed:82:df:52:14:86:62:c3:3f:19:3c:70:78:8b:
                    bc:27:0f:a9:5c:b5:a5:e0:d5:b6:81:8d:96:24:80:
                    4f:ec:ed:55:ca:df:1b:23:9d:cf:0e:50:03:33:91:
                    b8:bb:19:4b:a3:53:60:d8:4f:f4:c5:d8:cf:f0:8c:
                    d3:70:36:f6:3b:a5:75:a3:8e:2b:61:43:1f:4f:20:
                    3c:ae:8e:ed:fc:ae:47:89:4b:a9:45:79:f1:25:31:
                    7a:da:4d:21:97:76:d1:31:fc:aa:9a:5e:a4:eb:52:
                    e5:85:b9:1c:17:fa:96:13:e2:a0:cc:9b:53:2e:0f:
                    be:0c:a8:e7:fa:a7:ec:22:3b:80:56:1b:d3:bc:22:
                    ec:da:5a:f4:7e:46:5c:ef:7b:0a:59:3e:60:d8:ac:
                    61:6b:8e:28:40:b8:c7:bd:3f:9c:58:d1:fb:22:0d:
                    f4:cc:54:bf:13:e2:ff:14:af:fa:4d:d0:4b:4d:f5:
                    24:20:6f:3f:86:b6:39:4c:08:b9:07:f6:ea:04:f6:
                    c2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:29:19:BD:9E:24:9C:BB:73:2D:AA:67:89:54:85:5A:57:DB:73:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/51ce0173-4a36-359f-b3af-21efe7090623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:16d:1000::-2620:16d:14ff:ffff:ffff:ffff:ffff:ffff
                  2620:16d:1800::-2620:16d:1cff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:d2:4d:f7:d2:33:c7:9d:5c:54:6c:bc:47:dd:9e:71:b9:68:
         c3:80:83:cc:95:cb:6d:2a:37:52:a1:5c:09:e8:ff:0b:95:8c:
         65:cc:8f:0d:f3:e0:13:62:6c:6d:06:b2:1a:db:64:fa:cc:b2:
         c0:ed:fd:c3:1a:3b:ad:1d:32:32:b1:0a:3a:2a:32:a9:26:51:
         a1:9e:72:f0:f8:74:e7:b5:1e:64:cb:8a:e0:08:96:35:48:62:
         47:75:f5:fc:1b:2e:cb:fd:90:59:75:be:89:eb:c0:9f:11:fb:
         d6:59:e3:35:12:94:ab:c5:f5:b8:82:87:27:7f:01:93:e7:a7:
         00:22:df:d3:15:51:c2:bd:09:da:ef:3b:ba:44:4e:b2:a8:3b:
         88:14:64:e3:16:26:6d:37:8c:10:8f:3c:d3:43:a3:91:2e:94:
         0e:52:3b:11:f1:67:7e:b0:da:64:95:85:2e:18:bb:08:bf:a8:
         94:47:b3:0c:00:a0:6a:e6:91:f8:28:fa:a0:7c:e3:b5:6a:4a:
         25:ae:db:bd:38:77:c2:f0:3f:7f:2a:8f:5b:ac:7a:e0:e6:00:
         79:d4:7e:28:21:dd:b1:54:e3:ce:b2:b0:fa:54:10:db:5c:03:
         ee:9e:5d:c0:94:f7:0b:85:7c:03:e5:40:8f:25:e7:64:46:5a:
         cc:32:04:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:26:10 2026 by rpki-client