Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/753a5fd3-7ead-3451-8a4a-8d52bc868907.roa
File:                     753a5fd3-7ead-3451-8a4a-8d52bc868907.roa (raw, json)
Hash identifier:          bLZnDNYev0pzcS+/Kn1hNUFa5SN79emzPICyJrfKfZU=
Subject key identifier:   D7:0F:F0:74:31:BC:59:44:9F:7E:84:01:20:13:63:77:F8:9E:21:40
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1F4A6CFE03C77C4EE2817960
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/753a5fd3-7ead-3451-8a4a-8d52bc868907.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     396543
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:6c:fe:03:c7:7c:4e:e2:81:79:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=2f8e0bca-e848-46c3-9d26-a439cd9757d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a4:49:4f:27:91:15:fa:ff:91:6a:c8:d8:72:
                    b5:4a:ed:bf:67:6e:e6:40:0d:30:2f:27:17:24:d5:
                    2d:4a:4f:ca:db:b7:28:c8:85:ac:55:4e:79:e0:94:
                    12:0d:da:57:9d:9d:34:23:70:57:3a:69:da:5e:95:
                    05:a5:52:d4:b0:36:03:2f:50:1c:9e:8f:38:d7:98:
                    8e:84:b0:00:86:47:c9:51:18:51:7a:6b:ab:fe:ca:
                    df:a3:ed:22:13:fc:b6:a2:6c:ef:f3:b3:38:fb:da:
                    ef:cf:46:d6:18:6d:d1:ac:b0:1d:eb:05:21:74:7d:
                    d1:75:67:7a:13:42:77:8c:2a:6d:67:7e:14:11:e1:
                    bd:cb:e1:a0:ab:af:cc:a4:ec:26:4b:14:eb:42:ad:
                    b9:fb:37:fa:c1:be:1e:d1:79:9e:51:34:d7:fc:4f:
                    5b:80:c6:e2:94:d0:31:c7:48:78:11:b6:69:db:16:
                    ae:90:f9:7d:61:18:d4:50:a8:e4:ed:c3:b8:d0:1a:
                    38:0f:22:b5:bf:0c:a9:c6:61:47:4c:0c:ad:8f:ec:
                    aa:28:b7:74:6c:f4:bf:dc:ef:7a:a4:da:ec:0e:eb:
                    d1:16:d0:4a:17:17:92:8f:f6:19:ef:57:07:13:96:
                    57:56:7c:74:41:c3:ba:40:72:67:5f:c3:b4:72:d2:
                    3a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0F:F0:74:31:BC:59:44:9F:7E:84:01:20:13:63:77:F8:9E:21:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/753a5fd3-7ead-3451-8a4a-8d52bc868907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:fc:76:a3:ba:1f:95:49:35:07:03:ff:22:3c:5b:a8:ea:b6:
         5b:da:5c:e0:5f:ef:e5:3d:82:7f:52:97:20:42:bf:ff:ee:25:
         d1:c1:96:cb:da:70:ee:43:2d:0c:44:4c:6d:72:be:b4:86:9a:
         93:d8:f4:4e:2d:71:f1:fe:83:be:8f:8f:24:d8:ac:75:56:91:
         fa:ac:7e:65:87:23:cb:86:a0:20:30:e1:4a:bb:37:b9:76:b5:
         85:df:b0:24:8d:97:3c:75:d3:9e:38:34:53:a2:9b:e5:d1:4a:
         70:31:3b:b1:12:ad:9a:b7:f6:0e:92:4f:c3:3f:39:3f:df:10:
         e0:3f:78:f8:73:38:eb:76:eb:99:bc:a4:68:96:d8:06:9c:31:
         0a:82:02:f9:c6:a3:ed:64:18:25:92:d7:c2:4d:92:6b:37:70:
         0b:a7:5f:70:1e:f2:8e:3e:a5:57:f9:44:dd:e6:47:b3:e5:f0:
         fb:a1:c3:50:9f:fe:ad:6f:4f:56:6c:6e:36:8c:3c:89:a7:a1:
         e0:1d:40:da:42:a7:14:49:ef:7d:a5:69:d7:66:96:21:81:e5:
         30:5d:d4:2a:e0:50:53:48:b4:a9:7a:91:32:50:82:fe:6b:9b:
         05:b1:75:1b:6d:9e:26:4c:ac:a7:e4:a6:5f:2d:f0:9e:6e:63:
         f5:b8:14:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:29:06 2026 by rpki-client