Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c3efdaa-4860-3b3d-9d2d-623125457a04.roa
File:                     3c3efdaa-4860-3b3d-9d2d-623125457a04.roa (raw, json)
Hash identifier:          u2Oc9UKU0hBCr8JCd992jaufNWnhqaT6J/FzdvIlvzw=
Subject key identifier:   92:41:32:CB:8A:FA:E3:B8:8A:23:A1:21:28:A3:2B:AC:24:6B:CF:F1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DFA709DA53DD78EEB168B4900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c3efdaa-4860-3b3d-9d2d-623125457a04.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     396613
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:9d:a5:3d:d7:8e:eb:16:8b:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=578f5103-5a43-401a-a16a-e3c0bd4df1b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:09:30:4b:c3:09:bb:71:a3:01:c7:4a:96:fb:
                    d3:44:ce:70:d9:90:f3:89:95:9f:41:04:9d:6e:7b:
                    43:15:66:62:29:0a:a4:4a:74:7c:88:8c:41:0f:b5:
                    a2:89:ca:d3:95:88:5b:90:8b:09:b1:79:93:a7:40:
                    38:a8:83:c7:cf:29:b6:4c:de:1c:57:b2:ba:2f:1e:
                    7e:25:3e:9e:5f:c0:a7:f9:11:7d:4d:a2:f2:6b:10:
                    a6:7a:f0:8e:9d:04:c7:0d:42:fb:35:b5:94:ed:e4:
                    53:45:e5:2c:9a:16:61:4b:39:6a:78:aa:6d:b1:11:
                    fb:9c:c5:3e:77:49:35:ba:74:44:18:5c:96:81:be:
                    6b:98:78:a8:67:83:41:3b:48:ac:84:08:fd:67:07:
                    df:45:2a:96:30:5b:d7:82:ef:f0:3a:db:d1:9a:bf:
                    73:ae:c5:5a:c9:d8:ce:ca:0b:49:9b:e1:07:af:3d:
                    68:0d:36:21:44:2a:a6:f1:27:10:f6:7f:cd:f5:93:
                    43:dd:23:87:a1:45:f1:3c:45:fa:5c:74:8d:95:a8:
                    11:2e:16:b8:0c:3b:e2:34:6a:2d:e4:c3:f0:c1:77:
                    0e:f9:a7:12:04:74:04:5c:9c:72:81:79:b4:2e:38:
                    0d:66:e0:a8:47:2f:6a:75:d1:7d:41:4a:04:55:36:
                    4a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:41:32:CB:8A:FA:E3:B8:8A:23:A1:21:28:A3:2B:AC:24:6B:CF:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c3efdaa-4860-3b3d-9d2d-623125457a04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:6f:b8:3f:02:6a:0f:bd:1f:35:24:ae:e2:fe:96:18:5b:db:
         6c:e6:49:b1:9f:30:0e:ea:64:32:ad:13:23:6e:a8:b2:91:87:
         cc:56:52:fb:97:d9:9f:32:2e:c7:02:84:3a:7b:4f:90:66:82:
         55:66:4d:a9:4b:7d:81:80:6e:c8:53:5b:4e:34:ad:4f:74:43:
         fb:67:e1:4d:c2:1a:89:fe:76:aa:fb:a8:f7:17:9b:fe:2e:81:
         89:a3:2e:fe:48:3d:0e:fe:9e:13:4a:ad:14:2a:78:2b:88:d2:
         75:d8:fd:0f:89:76:d0:36:3f:0f:76:68:43:82:ac:05:49:26:
         5f:f9:9f:aa:d3:23:66:1c:82:fc:a5:26:cc:f1:69:23:6f:37:
         6c:20:d7:b3:15:20:d9:07:c4:83:68:30:90:89:5b:77:58:12:
         36:4c:6f:35:b2:a1:c6:64:62:67:67:06:3e:cd:4e:f5:5b:a8:
         f8:0f:20:8c:d4:f9:b7:db:15:40:79:53:03:4a:44:a2:80:17:
         45:70:cf:f5:e5:ea:3f:96:62:ef:36:6c:7d:dc:5e:18:75:b3:
         d0:c0:99:a9:0e:29:d2:df:80:04:3e:8c:a2:18:cd:a8:2f:26:
         fb:72:69:17:06:b2:77:47:97:5f:ce:57:35:4d:e4:df:2e:1d:
         57:72:10:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:33:57 2026 by rpki-client