Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d9280d0-3fe5-3036-b1c2-86ddd36d6a45.roa
File:                     8d9280d0-3fe5-3036-b1c2-86ddd36d6a45.roa (raw, json)
Hash identifier:          wslm0qFQZoBck1RlChGewQfCgoaXZZXj829fc59w9Tc=
Subject key identifier:   6A:39:06:44:21:33:7F:AF:2B:C3:7F:AC:76:EA:9A:8D:6B:90:41:1D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1F4A65DC3D00784B5961C500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d9280d0-3fe5-3036-b1c2-86ddd36d6a45.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     396545
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:65:dc:3d:00:78:4b:59:61:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=945e7a27-23ea-4d48-9d13-d0d90d8070fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c3:70:db:38:d5:8d:b4:3a:be:ea:cc:58:5c:
                    14:7a:ca:43:40:9c:e8:e3:21:99:ee:28:14:45:2e:
                    ee:3a:63:ba:e4:80:d6:11:4a:5a:c6:d2:40:b5:17:
                    c0:b5:c6:97:85:84:2b:14:2e:f1:5a:5f:4e:0a:e3:
                    3c:85:5d:18:36:75:15:2c:6f:31:02:56:b0:c3:68:
                    42:2f:c1:17:24:8d:35:50:8e:70:04:85:98:53:a3:
                    9b:31:08:ca:b1:5e:71:db:ef:5d:13:0a:dd:d8:86:
                    bd:68:ec:ed:e4:d9:5c:bc:fa:66:59:25:d8:4f:be:
                    5f:af:de:a3:75:19:d0:ce:98:48:70:3b:fc:6e:bd:
                    9b:ba:c4:9c:96:f0:a4:85:54:1c:90:bb:70:6b:8e:
                    aa:c8:5d:fd:3d:e1:73:93:ec:d0:59:67:fc:ec:9f:
                    37:9c:49:77:26:79:71:56:b0:b3:2c:48:de:68:da:
                    be:88:b5:cf:1b:c1:21:32:51:d6:f5:c9:ae:57:70:
                    ad:3e:a0:27:d7:08:0f:c6:a5:31:fd:fe:98:9f:f5:
                    6c:a6:9e:c2:3e:f7:4a:0f:ce:96:53:fa:a9:92:d9:
                    08:df:27:b9:66:80:14:9b:01:7e:76:94:a6:dd:37:
                    7f:4f:5b:cd:34:6b:9f:12:de:29:f3:b1:ff:43:99:
                    8b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:39:06:44:21:33:7F:AF:2B:C3:7F:AC:76:EA:9A:8D:6B:90:41:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d9280d0-3fe5-3036-b1c2-86ddd36d6a45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:31:64:3e:89:3f:0a:47:68:40:77:81:c1:69:21:1f:62:5f:
         77:04:55:61:85:4f:4c:c9:9c:61:b6:89:fc:2c:62:3b:45:02:
         67:3a:49:8b:30:97:ef:ff:08:2d:52:07:7f:98:8d:51:47:7e:
         c1:e7:16:01:38:cb:7f:8c:9e:11:87:87:3f:c2:11:6f:e6:bc:
         de:ed:75:41:ab:28:c4:c3:4a:3d:6e:11:90:33:e7:af:df:be:
         62:77:b6:75:86:2f:ac:a3:43:61:48:79:25:5d:32:f2:9c:46:
         61:59:6b:90:ec:8f:c0:ce:80:82:e3:3a:d6:b9:c2:2f:0c:4b:
         42:1a:35:76:af:85:41:55:eb:85:51:58:9b:31:38:3f:f0:c2:
         42:33:b4:94:ee:a5:ca:6b:cc:bc:6f:a4:e0:a6:a8:5d:d0:e2:
         96:6f:8a:e9:62:03:3f:74:06:37:e0:11:92:88:23:15:61:2f:
         1b:94:5b:86:f6:74:c6:ba:75:f7:ca:29:3f:a4:30:6e:3e:ba:
         ca:1f:2a:3f:42:e7:c9:5d:8c:92:68:66:17:83:5e:c9:8d:39:
         f2:83:68:87:73:4c:0a:63:3b:ee:97:7d:40:78:ba:b1:24:a5:
         5b:28:80:31:fa:74:da:95:93:b8:e9:88:81:fb:ef:fd:6c:c9:
         68:99:e8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:27:23 2026 by rpki-client