Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f94d214b-9fa5-3d7c-b796-879fd8a0f239.roa
File:                     f94d214b-9fa5-3d7c-b796-879fd8a0f239.roa (raw, json)
Hash identifier:          JJ03jxY2Ef7Jl7AExzDMZJQeOvntQ2Kn/XJ8wS8s4ZY=
Subject key identifier:   FA:CE:3C:1B:57:93:0E:9D:CA:CC:A2:12:BA:11:B3:A9:79:8B:66:FB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1F4A6BD3DD4CE7E7BB188A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f94d214b-9fa5-3d7c-b796-879fd8a0f239.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     396600
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:6b:d3:dd:4c:e7:e7:bb:18:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=d59f75f1-d4d6-446a-a119-f5494cb2be63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:94:96:59:ac:2e:a3:ca:ee:75:d5:09:38:35:
                    0b:03:e7:21:f5:b7:17:bc:f5:fc:12:82:2e:94:66:
                    0d:ff:cc:d2:51:1a:79:33:6e:4c:88:34:56:a8:ff:
                    35:51:06:15:ef:f9:bc:85:53:29:b8:45:f3:df:1a:
                    de:f2:c4:a0:38:ac:5c:43:f0:ae:4c:3d:2a:27:23:
                    fc:f9:74:3b:18:ea:51:38:37:31:90:74:0e:55:db:
                    ef:72:96:2d:2d:de:2a:14:14:e0:49:46:91:ac:c6:
                    0e:bf:bd:24:f8:26:9d:68:a1:0f:d7:0d:02:d7:88:
                    55:06:46:bd:31:cc:6b:11:a2:57:fa:96:79:f7:50:
                    ac:e3:54:d4:eb:16:0c:d5:8e:e9:5a:66:33:77:bc:
                    37:77:57:31:05:00:8e:ad:7d:60:7c:95:1c:e3:5a:
                    ea:e1:d3:3e:a8:96:3d:d7:8e:f1:06:78:78:02:c9:
                    c8:bd:b5:8f:b0:f6:03:f6:27:26:25:b2:fc:ea:39:
                    9a:22:2f:80:16:11:58:43:61:71:fa:c4:88:54:b0:
                    d1:a3:ec:6a:9c:8a:b0:57:50:d4:42:8c:45:8c:97:
                    a9:66:8f:de:63:b1:21:a4:41:8f:b7:5b:5a:d9:ee:
                    c9:a0:4c:0f:1c:f9:b9:c7:a6:34:49:68:d2:fa:84:
                    fb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CE:3C:1B:57:93:0E:9D:CA:CC:A2:12:BA:11:B3:A9:79:8B:66:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f94d214b-9fa5-3d7c-b796-879fd8a0f239.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:3a:5f:d0:03:b5:6f:b5:6f:9b:01:15:09:54:fc:eb:1b:cd:
         4a:90:b6:3d:52:7a:7b:c3:42:00:62:ba:a5:82:d6:d0:3d:dd:
         8f:67:36:ac:8f:56:7b:1e:98:84:07:4d:86:5b:d7:1f:41:ba:
         e7:94:9d:9a:d6:a1:16:f8:18:17:7a:e2:9c:9c:31:55:b6:71:
         69:3f:e6:39:1e:b8:11:b8:a2:e4:a5:28:c2:1b:98:15:b1:c5:
         23:e7:27:6a:39:cf:93:00:f8:b0:e3:34:e2:fa:de:77:63:fb:
         1f:fd:63:bd:b6:36:2f:7a:21:2c:76:e4:48:5a:61:e5:07:78:
         31:07:27:89:6b:01:32:7d:55:c5:d9:e0:92:fa:c8:1c:39:df:
         ad:96:06:42:fe:f3:b2:fb:24:10:c1:00:f9:23:c8:40:f9:32:
         33:d6:48:6c:09:7b:bd:a2:c4:7e:c1:d6:15:4d:b5:6a:41:44:
         fa:7d:09:e5:64:63:f3:07:40:5b:c9:d8:3e:17:67:61:7b:b3:
         f4:ce:a4:34:38:c5:5e:c8:0c:d8:46:f4:b2:52:35:4e:4f:eb:
         8a:0b:f6:30:23:74:e6:b1:80:6c:fb:b0:7e:fb:24:9d:27:1d:
         d7:e2:43:f2:25:84:62:15:d1:4b:1e:17:6e:dd:2c:0a:16:63:
         bd:74:65:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:40:57 2026 by rpki-client