Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/5c8198c3-443f-3157-8fca-1bbafe1037ef.roa
File:                     5c8198c3-443f-3157-8fca-1bbafe1037ef.roa (raw, json)
Hash identifier:          rY3NgXBYNVe9lwhNNkKjV2OaklTjFC/tYZlDt8PBuOM=
Subject key identifier:   E8:A3:A4:DC:7B:04:A5:BA:E7:D0:CD:FE:CB:57:C5:36:85:C2:06:4F
Certificate issuer:       /CN=51ca7155-bca1-46e1-9945-f2519df32314
Certificate serial:       010D0C9F4328584E2AD459F32FD5435E49DCA200
Authority key identifier: F3:08:C6:8C:84:9C:D2:1D:4A:1D:D2:30:0A:69:9C:8D:8F:82:AB:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/5c8198c3-443f-3157-8fca-1bbafe1037ef.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     11251
IP address blocks:        2620:138:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/51ca7155-bca1-46e1-9945-f2519df32314.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/51ca7155-bca1-46e1-9945-f2519df32314.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:59:f3:2f:d5:43:5e:49:dc:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ca7155-bca1-46e1-9945-f2519df32314
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=54dcc146-a2c6-4429-950f-b8b86e54d73d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:67:89:00:d9:4a:e9:6e:76:f7:10:fb:eb:a0:
                    91:b6:79:ed:27:69:52:57:ca:a4:39:f4:fe:6f:58:
                    28:b8:db:17:b1:10:fe:c7:df:a1:b8:3f:7e:0e:76:
                    83:00:78:d0:31:bf:34:66:09:65:d0:2c:65:72:63:
                    54:50:5f:92:61:37:6f:55:4b:d8:3d:5e:0c:b2:e3:
                    be:cc:65:5e:51:f8:04:5a:9a:4c:cf:34:67:48:69:
                    2a:d7:0e:ea:86:d2:1f:f8:65:42:95:fe:eb:55:cb:
                    ed:b4:d7:12:a6:22:c3:47:46:a2:c8:14:2c:94:bd:
                    17:29:43:55:90:e8:c2:4a:b0:97:96:8a:94:de:b3:
                    04:70:5e:81:be:6f:44:b7:ba:0e:ce:c0:c9:37:63:
                    f3:a0:05:3d:45:bd:dd:46:af:72:98:19:b2:3d:5a:
                    16:2f:0a:5b:04:b8:5a:3e:a7:71:13:c3:8a:fa:09:
                    9f:31:ab:fe:bb:fc:a0:d3:8c:06:4f:42:0b:24:37:
                    da:03:48:31:f3:e1:00:43:5c:b3:ae:af:21:4b:36:
                    0e:4a:4b:8d:1d:13:18:cf:69:26:e6:70:04:02:5e:
                    19:60:fa:b2:77:d8:92:4f:d4:52:6d:af:6b:77:9b:
                    d9:36:9b:de:bc:04:8f:06:cf:e8:d2:31:73:3f:ee:
                    25:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A3:A4:DC:7B:04:A5:BA:E7:D0:CD:FE:CB:57:C5:36:85:C2:06:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/5c8198c3-443f-3157-8fca-1bbafe1037ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/51ca7155-bca1-46e1-9945-f2519df32314.crl

            X509v3 Authority Key Identifier:
                keyid:F3:08:C6:8C:84:9C:D2:1D:4A:1D:D2:30:0A:69:9C:8D:8F:82:AB:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:138:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:df:13:ef:57:e1:25:4f:9d:1c:91:5f:f6:fe:9d:5c:fe:bb:
         16:c7:b4:00:dd:2c:5f:83:e0:b7:bd:dc:96:2f:1f:e3:a4:e2:
         fc:f0:6d:11:bc:d9:97:88:cf:33:5b:7f:10:ab:3f:9e:66:ff:
         fa:78:58:47:f3:f1:d6:e7:80:53:5c:46:df:0e:93:0d:81:b6:
         23:33:d6:90:42:7e:4b:55:25:55:92:d1:84:fc:1b:07:62:eb:
         03:21:89:85:77:13:83:ab:7b:a5:eb:b6:ce:86:13:6b:00:43:
         b5:7e:7f:5f:83:19:a5:31:5c:b4:f2:f1:f8:91:c2:3b:71:dd:
         7e:d3:56:76:67:7f:28:12:c1:b7:79:09:98:0e:0b:a8:df:c2:
         96:cf:89:ba:6e:73:e0:cd:5b:dd:48:2d:af:7f:b0:91:7f:3e:
         00:c5:bb:0c:60:8c:70:be:f0:28:da:d6:00:5a:70:6c:59:e8:
         c1:53:e0:f1:08:87:15:b3:85:8b:0a:12:c2:78:11:3c:ee:e1:
         40:e8:b8:d6:bb:88:72:2a:4e:c1:b4:c2:6b:f0:1f:23:b3:79:
         68:b4:23:ea:7c:0d:fb:ca:7c:a9:60:81:c0:b8:ba:ed:6b:3f:
         84:5f:95:7d:07:4c:25:4d:1a:fb:dd:c0:31:93:8b:15:86:b6:
         f3:13:d8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 00:46:08 2026 by rpki-client