Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbadc4c2-0df9-3f7c-bf56-de05d52a42b0.roa
File:                     bbadc4c2-0df9-3f7c-bf56-de05d52a42b0.roa (raw, json)
Hash identifier:          kbrOCybq1kfLcCU56Vdzczvpsf0nD3Ku+4/Vo2XZk1Y=
Subject key identifier:   84:DE:4C:9E:2B:97:A2:FC:D8:44:97:C3:F3:56:4C:6D:34:F4:95:25
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D0BDD1B35973A243B5D975380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbadc4c2-0df9-3f7c-bf56-de05d52a42b0.roa
Signing time:             Tue 03 Mar 2026 14:00:40 +0000
ROA not before:           Tue 03 Mar 2026 14:00:40 +0000
ROA not after:            Mon 01 Jun 2026 13:00:40 +0000
asID:                     36630
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0b:dd:1b:35:97:3a:24:3b:5d:97:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  3 14:00:40 2026 GMT
            Not After : Jun  1 13:00:40 2026 GMT
        Subject: CN=8eae8ba0-030b-4c5e-ab53-6d3ec5727f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3d:7a:c4:d4:3f:f1:a0:40:6b:58:c8:c6:d6:
                    9f:0f:c2:1c:51:ea:ac:97:f8:8c:74:a8:f2:ab:79:
                    09:08:c3:3c:ef:69:22:a7:30:a3:2c:da:62:9d:5e:
                    20:e8:fb:14:36:4b:88:41:7f:58:aa:b7:08:51:50:
                    95:65:e0:b5:8c:cc:de:31:58:93:09:07:cd:7d:9f:
                    60:a4:2b:91:a3:a6:77:99:a3:29:aa:5b:a0:bc:8d:
                    1c:03:d7:f5:21:01:6e:98:56:62:c9:fa:9e:31:a9:
                    d1:6c:1b:1f:28:e3:40:fd:e3:05:c1:53:33:e8:38:
                    ad:5a:00:0e:5e:3a:a2:6c:34:5e:66:be:b4:2d:9a:
                    82:c0:41:3b:f9:3d:9a:f8:8b:04:07:54:6a:b2:31:
                    66:27:cd:2e:8a:29:3f:e9:b5:4d:cc:5a:07:b8:80:
                    81:87:9a:28:66:40:b7:5e:d0:a2:bd:de:66:f6:2e:
                    0d:41:7e:e5:fe:94:94:22:6f:aa:20:6b:10:d2:0d:
                    52:e5:6c:c8:1c:b0:f4:5b:90:eb:07:ce:6c:ae:50:
                    b0:36:e3:d4:6b:78:9d:e0:41:3a:35:89:a6:5f:74:
                    a8:2b:d2:24:5c:aa:b2:bf:b9:c3:fc:05:38:4b:ac:
                    b4:2f:1a:1e:fc:22:0f:86:3f:b2:3c:56:55:4b:20:
                    0c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:DE:4C:9E:2B:97:A2:FC:D8:44:97:C3:F3:56:4C:6D:34:F4:95:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbadc4c2-0df9-3f7c-bf56-de05d52a42b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:75:2a:f5:37:41:62:00:ca:54:f1:89:62:5b:b8:d2:e3:2d:
         d7:f7:f6:b4:19:73:32:a5:df:c7:1b:db:c1:1c:5f:9b:66:07:
         d1:0f:34:bf:df:92:85:69:f5:95:12:69:35:b8:df:49:99:ce:
         95:32:4d:a4:63:28:e8:af:5e:5e:dd:17:49:1d:e1:bb:52:69:
         77:63:cc:8a:43:75:2b:63:ce:c2:70:1d:df:db:bd:3b:7f:c8:
         41:db:94:be:bd:97:38:b0:05:8d:77:f3:a8:ca:f4:2e:07:72:
         52:1d:0a:f4:5e:6e:d4:f8:f1:21:35:db:62:22:ca:b8:e3:7d:
         64:8b:c1:fa:6a:2e:03:dc:de:94:53:af:d5:5b:2e:c8:ed:7b:
         e0:06:db:6f:14:53:41:45:63:ee:10:a8:6c:35:f2:bf:81:6f:
         93:20:9a:8f:2e:be:e6:cd:b4:a2:53:18:80:17:8c:0c:a6:4a:
         7e:52:10:68:04:a5:2a:17:c9:93:13:fc:05:d2:f6:03:4e:9a:
         17:9a:90:ce:fd:53:b1:b0:0e:0b:0d:ff:af:32:b9:fd:d9:67:
         01:75:c9:a9:17:af:9d:f5:2d:89:d7:b6:80:19:ad:94:46:b0:
         ed:ad:4d:db:94:bf:4a:a9:e6:55:ea:5c:37:15:d3:9c:b3:67:
         b2:c4:a3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:38:35 2026 by rpki-client