Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e909739-8dde-3b87-91a3-15e4978a6ece.roa
File:                     1e909739-8dde-3b87-91a3-15e4978a6ece.roa (raw, json)
Hash identifier:          xBMZrIcT0xlwXobwxNoNONI8tcefaQ3nYZQ67laW1Lk=
Subject key identifier:   3E:37:CE:1F:D1:AE:74:0B:45:98:C2:7B:35:52:C6:FB:15:C1:44:DC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D19B4EDCD970C0822F441E9B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e909739-8dde-3b87-91a3-15e4978a6ece.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     396587
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:ed:cd:97:0c:08:22:f4:41:e9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=9fe32a01-0dc7-489b-a880-d531168e1bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ab:05:7a:fc:c4:14:b5:00:7d:ee:76:d9:f8:
                    f3:b8:36:9d:41:05:f4:3c:ca:6c:7c:4b:ec:32:5e:
                    21:6a:33:32:27:3f:90:a6:a4:ae:4c:56:99:b6:9b:
                    1a:25:ed:b8:12:0b:61:3e:51:cc:01:ef:a8:1b:8e:
                    c2:ea:8e:db:d8:b0:be:8c:d4:c5:ef:b1:cb:bf:9d:
                    f3:37:80:f4:fa:d5:f9:35:7a:df:f4:89:7a:1e:e8:
                    0e:9e:6c:21:9b:96:77:4e:22:a6:bd:43:6b:0e:e8:
                    e6:ed:28:ed:6c:c4:53:ff:2d:aa:f9:90:67:72:28:
                    ad:16:a1:8a:c8:3b:9d:a2:04:a0:4e:f1:bc:fe:5f:
                    19:36:e7:9f:c0:18:37:ae:3e:4e:46:9a:86:4e:ff:
                    4c:b5:ee:a8:44:37:77:1d:f9:fa:2b:7e:f2:b7:7f:
                    55:74:76:97:b2:0b:24:f0:c3:39:93:9e:bf:a2:91:
                    61:1b:84:cb:62:80:74:d3:2b:50:3f:d2:0c:9e:46:
                    1a:1c:b6:d5:58:a8:d7:08:84:e2:94:98:d5:89:b0:
                    95:38:1a:c9:47:7e:d3:34:7c:e1:58:ce:6d:d2:cc:
                    d6:ed:f9:b0:92:34:a7:cc:b4:d3:07:93:eb:0c:1b:
                    51:3e:54:55:e3:79:08:31:ef:98:b4:21:1b:ac:eb:
                    fb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:37:CE:1F:D1:AE:74:0B:45:98:C2:7B:35:52:C6:FB:15:C1:44:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e909739-8dde-3b87-91a3-15e4978a6ece.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:82:4f:b0:b8:9f:64:01:59:d8:f6:e9:5a:0a:66:c4:ae:6f:
         ee:6c:98:a8:92:7b:60:6b:b4:b8:2d:61:41:b2:2d:92:99:bc:
         ec:e5:a1:cf:6f:5b:53:fd:86:8d:a4:9e:b3:93:65:0b:7c:b4:
         af:26:9c:56:59:cd:96:fe:90:89:e4:7a:fc:fc:74:2d:78:be:
         dc:96:e7:d5:0a:43:81:b0:20:8c:58:ab:40:32:89:e3:0e:a8:
         9a:ca:73:98:32:71:3b:f9:d1:1f:ba:b8:9f:2a:0b:97:7f:35:
         20:7e:f6:96:e5:bf:b8:f5:c7:60:0d:dd:eb:69:12:10:4e:35:
         c2:fb:da:47:68:4f:49:6b:8b:60:5f:af:4d:bb:1a:25:35:13:
         c2:35:2c:ab:76:8f:89:aa:ce:05:de:a2:f7:d4:65:b7:03:0c:
         0d:0e:33:d6:6b:a9:65:08:96:e7:40:d2:e2:03:7b:cd:10:c7:
         83:93:34:3d:6e:46:3e:4d:22:3d:2c:b7:b7:bc:fd:90:5c:da:
         2d:a5:6d:2b:fd:9b:4f:61:bb:c6:e7:65:d7:ae:42:54:f5:db:
         05:97:5b:33:37:65:48:b1:1d:21:92:17:be:ca:28:2e:9c:d1:
         d4:24:80:59:9d:9d:c5:6c:86:c0:3b:14:8d:c6:d7:f1:fe:1e:
         2a:62:da:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:51:57 2026 by rpki-client