Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea0e9c4f-2ff1-31e0-95be-064815fc7b50.roa
File:                     ea0e9c4f-2ff1-31e0-95be-064815fc7b50.roa (raw, json)
Hash identifier:          1bARVh1Txt10iz/f9R+zp8iGseOo0CeluZD71QCHKFU=
Subject key identifier:   B6:D8:02:AB:A7:C6:B4:F7:8B:84:F4:C3:E9:CE:4B:3A:BA:E6:AC:BB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA79AC9BEDA79B97896B84E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea0e9c4f-2ff1-31e0-95be-064815fc7b50.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396596
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:c9:be:da:79:b9:78:96:b8:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=041819cc-3207-409e-b03a-568331556dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:67:47:13:dc:de:23:ca:fb:07:fb:06:18:39:
                    35:5f:2a:ae:6c:1a:73:2e:57:ce:9d:f5:cc:3c:ef:
                    b6:c5:02:f3:a8:94:2a:3d:3d:1c:3f:c3:fa:84:3b:
                    bf:a9:c4:90:e0:35:23:fa:60:07:77:70:ad:f8:f8:
                    13:e3:69:0e:64:85:ac:20:44:21:5e:e2:25:f7:de:
                    73:ce:b7:13:49:9a:ba:b0:af:aa:39:24:77:3d:69:
                    68:ce:93:49:63:fa:59:b4:8c:d3:08:62:7b:6f:58:
                    d1:bc:dc:e9:bd:38:55:d1:76:ca:9d:b4:c1:72:52:
                    83:18:55:ba:0c:ca:9b:c5:99:01:cc:3b:c2:59:b8:
                    fc:b0:0b:09:36:31:02:a7:9c:d3:4a:42:c4:49:29:
                    83:1d:c1:bc:31:2f:ab:05:f2:c6:fb:4b:94:2e:9e:
                    0e:09:cf:d6:5c:d1:81:40:3d:d2:17:cc:51:69:e6:
                    f7:03:25:4b:b9:27:f6:90:dd:13:30:d3:b8:41:3b:
                    21:20:84:d3:47:1f:31:38:18:e7:de:3c:95:0f:18:
                    5a:30:4a:79:b5:40:6a:24:f1:f0:ce:b5:3e:37:c7:
                    9e:d8:4a:fd:99:09:31:14:34:db:aa:54:d9:1a:61:
                    18:95:7b:45:ba:7c:2e:4b:8d:dd:58:a6:81:2e:5c:
                    e5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D8:02:AB:A7:C6:B4:F7:8B:84:F4:C3:E9:CE:4B:3A:BA:E6:AC:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea0e9c4f-2ff1-31e0-95be-064815fc7b50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:67:43:e4:eb:59:77:a5:04:9d:39:1b:28:05:e5:55:bd:97:
         ee:51:db:0b:0a:45:7a:e5:ab:de:e5:22:bc:92:f6:13:f4:ee:
         59:8e:cf:45:22:0c:af:16:88:ab:5b:16:6e:7e:1f:90:a6:3c:
         c8:9a:87:f6:9e:cb:1b:79:af:5f:8c:e0:f4:c0:ce:f9:4e:4e:
         46:54:46:d1:e2:fb:99:6c:18:3e:ef:72:97:ea:49:0b:93:a2:
         ef:ba:b0:9e:43:6d:bb:32:98:fd:74:a9:54:a3:f5:09:25:89:
         08:3d:77:3d:72:25:a7:4c:aa:50:da:13:f5:fe:53:40:69:00:
         cc:29:b7:19:20:bc:f4:80:65:25:81:81:f3:ee:d3:7f:a0:10:
         26:3f:be:ee:db:dc:fb:31:c4:7c:0e:6c:89:77:60:2d:da:8f:
         cc:af:c5:2f:7d:d7:9a:72:1d:81:83:97:a5:e8:4c:2b:02:83:
         b5:a2:2d:38:0d:40:8d:1a:ee:06:16:c1:c3:2b:ec:70:4f:1f:
         0f:84:9d:ad:5e:11:0b:62:ac:2f:e6:e1:ba:61:5a:9c:0a:39:
         c9:b2:86:0f:33:d3:73:6b:79:fd:69:7b:5f:fb:62:8d:ab:ee:
         42:63:e2:17:c2:4c:52:74:cf:c1:96:dc:14:90:4c:6e:0d:cd:
         09:1f:3c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:20:55 2026 by rpki-client