Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc89e58b-e046-36d8-bdc6-97ac85e7f256.roa
File:                     dc89e58b-e046-36d8-bdc6-97ac85e7f256.roa (raw, json)
Hash identifier:          n1xt/TVYwuuE2wI6goMkuLNARekgtFqDClBIAoYQ3yw=
Subject key identifier:   DB:59:C8:A5:18:4C:8A:BE:74:D3:51:7C:01:36:C2:AB:77:7C:5C:32
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1F4A6A9639BE2A0D55E62E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc89e58b-e046-36d8-bdc6-97ac85e7f256.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     396562
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:6a:96:39:be:2a:0d:55:e6:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=4c561d95-5af4-4832-9b77-d889d53f0414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:17:ba:02:e6:04:02:c9:c7:e2:82:0a:9c:c3:
                    7d:e6:fc:49:97:e6:ad:41:4d:ca:d0:25:f4:22:3b:
                    a8:5e:07:5d:ec:9c:54:ff:52:ca:0d:1a:29:ab:59:
                    09:a6:15:63:aa:6b:23:64:58:db:70:65:f6:c1:10:
                    3e:8c:83:d2:d5:37:ab:bb:a9:75:78:3e:a7:1b:24:
                    62:be:25:b2:96:dd:09:05:15:a8:bc:ad:d6:95:f9:
                    a6:30:e0:09:f9:e6:60:02:c0:54:04:e5:36:8f:21:
                    20:63:48:32:51:66:06:2c:e3:41:b7:51:d5:ae:a1:
                    55:72:63:63:3c:38:dc:27:5a:0e:39:bf:75:e5:aa:
                    29:96:0a:72:fa:43:8d:f2:d1:97:c9:0a:33:a3:17:
                    e3:46:42:b7:3e:8b:f5:68:f2:13:46:b9:c3:7b:9e:
                    21:ac:4e:08:bd:89:5d:a5:98:9f:a9:6f:3f:48:20:
                    cb:fa:90:43:13:49:c6:ac:8e:e7:3a:bb:28:32:3e:
                    49:5d:fb:c8:02:e2:20:43:53:eb:e3:f7:89:19:d7:
                    75:17:5f:dd:e2:3c:cf:3f:1f:2e:43:fb:18:fe:c6:
                    94:e9:c2:b8:75:bf:e2:87:b3:3d:12:12:97:30:84:
                    10:a2:44:13:10:d4:45:d9:f9:e0:00:ed:4e:e6:b5:
                    b6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:59:C8:A5:18:4C:8A:BE:74:D3:51:7C:01:36:C2:AB:77:7C:5C:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc89e58b-e046-36d8-bdc6-97ac85e7f256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:2d:8b:d2:96:03:d4:3f:85:01:3e:de:ed:64:ba:41:3c:06:
         42:5e:8c:8e:0f:92:30:d0:1b:dc:5e:99:78:a6:c0:8a:29:b9:
         8f:f5:12:1b:b8:61:06:03:2e:45:58:c7:a6:8d:80:13:de:bb:
         3d:01:d6:36:4c:26:10:41:29:a5:f4:8c:e8:ac:f5:e2:43:86:
         3f:ea:2f:b6:3f:e3:78:e3:88:5f:3d:ca:7a:f9:db:ea:1f:13:
         eb:92:29:d7:1c:9d:e0:5e:3d:47:36:58:d9:0d:39:31:ba:8c:
         81:1a:9d:c6:58:33:9c:8b:90:dc:2c:e6:df:d5:b7:54:85:00:
         41:97:a7:01:4c:0f:03:1c:4f:4e:52:c1:74:44:51:4b:b9:ae:
         76:f9:2d:14:57:ba:14:77:ab:06:32:cf:74:75:68:74:23:25:
         7e:4a:86:8b:ce:fc:4b:da:55:53:29:57:d7:e9:42:40:03:d9:
         2a:96:be:28:bc:9b:fa:e3:13:93:1e:e0:78:77:99:d5:67:9e:
         28:50:74:56:a4:1d:e5:41:37:de:a9:d1:17:6e:1b:06:1d:fb:
         77:28:75:ac:6d:be:d8:d0:a9:d7:8a:73:0f:e5:88:e5:26:75:
         21:f6:f7:44:a0:32:5b:5e:b2:7e:aa:38:d8:1c:14:47:38:5b:
         46:4e:cc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:06 2026 by rpki-client