Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/212015fb-f664-3f76-aae6-4a984ff3ef20.roa
File:                     212015fb-f664-3f76-aae6-4a984ff3ef20.roa (raw, json)
Hash identifier:          te04ER1p/Bps41GMKEYqJHGIBC/JKfwynR08QZRcBQw=
Subject key identifier:   2D:AA:46:B7:8D:D9:4F:2D:30:69:F5:0E:E3:E8:73:8F:8B:C8:BD:4F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D0BDD1341FD6B4424066EE080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/212015fb-f664-3f76-aae6-4a984ff3ef20.roa
Signing time:             Tue 03 Mar 2026 14:00:40 +0000
ROA not before:           Tue 03 Mar 2026 14:00:40 +0000
ROA not after:            Mon 01 Jun 2026 13:00:40 +0000
asID:                     396540
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0b:dd:13:41:fd:6b:44:24:06:6e:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  3 14:00:40 2026 GMT
            Not After : Jun  1 13:00:40 2026 GMT
        Subject: CN=01363c3e-4952-4c34-9a1a-b7ba4aadf708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ac:7e:44:d5:a8:96:56:53:71:3c:f1:df:c6:
                    2c:1a:f8:e3:43:1d:c1:6a:e3:29:22:f8:9f:02:a3:
                    83:a5:3f:ac:e5:f5:e5:6d:72:98:9d:18:bf:07:eb:
                    d8:10:5d:2f:4c:9b:af:ff:f4:83:46:38:c4:f5:82:
                    5b:0e:5a:13:01:ef:ae:24:4e:c7:30:55:69:9a:2a:
                    a9:9e:32:6c:48:9a:ae:6e:f9:e4:1d:67:24:4c:91:
                    84:2c:d9:89:4d:b7:46:4a:a8:ad:c4:d1:94:a5:19:
                    13:d4:92:28:d0:7e:c7:13:7a:a3:d1:bc:b0:49:30:
                    e0:86:38:64:97:18:24:85:c5:45:4c:37:01:1b:51:
                    98:93:01:75:6a:6a:16:2c:a8:a0:0d:e5:44:a3:bd:
                    4e:72:f3:ed:88:01:36:db:66:8a:d3:e2:b0:c0:38:
                    e0:a8:1c:90:0a:0b:7a:ea:8a:c2:ed:a9:e4:02:54:
                    ea:3d:bd:d2:ee:f5:8f:48:1e:6c:90:de:1c:ab:c5:
                    95:8f:e4:d7:b7:30:cc:ab:a2:bd:11:ec:4a:3c:39:
                    80:a4:aa:a6:f1:a0:3c:eb:96:d2:6b:0f:8b:9c:51:
                    41:e7:f4:10:5d:fc:6e:ab:e1:4f:50:fa:e0:a4:d6:
                    20:2f:05:4d:34:da:b1:11:ce:de:d3:b7:ec:3f:c2:
                    e8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:AA:46:B7:8D:D9:4F:2D:30:69:F5:0E:E3:E8:73:8F:8B:C8:BD:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/212015fb-f664-3f76-aae6-4a984ff3ef20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:b6:86:c5:4e:ca:96:d9:28:3b:28:e4:fe:cb:25:8a:b6:48:
         a7:64:b2:d2:26:af:8a:0f:73:1c:44:2f:ce:5c:5c:c6:e7:cf:
         27:18:b5:2d:8f:8b:2c:5e:bf:59:97:e3:2b:9b:f6:d4:af:3a:
         e2:59:c9:60:d2:cf:1d:5c:d3:80:fd:7f:4e:e7:cf:08:69:5b:
         8a:2a:0a:12:24:b4:58:62:20:2e:7e:7b:7d:e5:d5:3c:ce:c5:
         f1:b0:60:74:b0:f6:18:46:a9:25:a7:6d:2a:93:0e:b5:12:a5:
         4f:7c:e8:b6:a8:fa:63:58:8d:39:22:4d:59:92:b5:6c:0d:58:
         aa:e8:37:96:f7:46:87:bc:b3:af:16:f5:36:58:c0:c4:24:4d:
         63:4a:b9:31:a4:2c:2a:78:8a:18:79:b6:4e:a4:6b:14:fa:e1:
         16:33:9b:83:e3:32:cd:69:6b:f6:d6:27:57:7b:85:21:5d:79:
         e1:82:d3:fa:2c:75:6c:d6:51:e0:be:fb:88:ac:a5:be:60:e0:
         37:f5:a4:53:5d:7f:09:09:9a:7d:3a:f4:7c:37:99:d9:bd:79:
         6b:58:b6:27:ab:09:68:a8:d3:d3:6e:f1:5b:d0:2f:05:14:23:
         20:1d:5e:20:0c:69:50:b8:c6:bf:7f:ba:84:24:a3:06:ab:61:
         e4:62:04:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:31:06 2026 by rpki-client