Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5999551d-4c59-3231-8100-26312c58da4f.roa
File:                     5999551d-4c59-3231-8100-26312c58da4f.roa (raw, json)
Hash identifier:          KH4GZdRNrp6t4EHQjUZ5aOlv1Z2Iu730doZb7bLHIk0=
Subject key identifier:   AB:9A:C6:0C:10:75:47:AA:B0:D7:14:08:81:FD:5D:D4:A2:5D:14:81
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E000605E84DBA43E47F4D1B3B
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5999551d-4c59-3231-8100-26312c58da4f.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     396588
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:05:e8:4d:ba:43:e4:7f:4d:1b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=c9ac54b2-b7d1-49d2-bf5f-cad0cdc61d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:68:d5:7d:94:7e:79:1b:84:57:4b:90:77:e6:
                    6e:de:ad:01:72:35:4f:50:33:9c:b5:16:d4:80:a3:
                    29:85:01:ee:0f:6e:7f:1c:b4:10:47:e3:e3:36:02:
                    1b:8c:aa:7d:c5:64:23:78:5a:29:ba:d9:30:4a:e8:
                    2f:cd:55:4c:be:6e:ca:9d:10:f4:a7:83:06:1d:17:
                    e8:b4:b1:e7:64:72:b7:04:50:87:08:c4:91:e4:42:
                    81:dc:36:1c:ce:5d:a2:c1:52:7f:08:ef:66:5a:46:
                    a3:59:e3:f6:e3:14:8b:76:55:d5:1a:93:e8:3c:f0:
                    e2:0d:2f:53:78:85:53:d3:a8:96:92:d8:92:dc:2f:
                    85:a6:15:34:b7:60:f6:3d:ca:47:18:cf:50:58:9e:
                    c1:1e:c2:d3:0f:b4:c3:cd:1f:db:75:c9:56:e8:ac:
                    58:12:86:f8:18:62:8a:27:1c:9e:30:7e:70:43:42:
                    14:78:5a:f6:18:a8:a4:26:ef:d3:b2:02:cd:83:62:
                    3d:00:dc:ef:31:2b:30:f9:77:8f:69:ff:d2:96:5d:
                    94:4a:f1:0f:b5:89:d4:91:21:f5:ae:81:e0:16:cb:
                    8e:a3:fe:d4:46:db:eb:b9:2a:6d:ee:e4:75:3a:ce:
                    f2:c8:ca:88:22:6e:59:0f:08:07:40:ea:77:00:54:
                    ad:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9A:C6:0C:10:75:47:AA:B0:D7:14:08:81:FD:5D:D4:A2:5D:14:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5999551d-4c59-3231-8100-26312c58da4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:8a:8b:14:f4:ac:8f:58:11:c1:a4:1a:9e:29:e2:b6:04:4d:
         50:24:a9:34:1a:c0:84:d1:52:38:ec:35:ef:27:3c:cb:f9:2d:
         7e:d4:b8:bc:90:64:7b:d1:a0:1f:48:5d:c5:cc:00:ad:c7:a7:
         d0:b6:aa:0f:00:59:16:34:d9:56:04:1c:55:6b:f1:27:10:ba:
         50:c6:24:ca:c5:df:5c:fc:8e:a2:8d:83:c7:7b:d4:e5:13:c9:
         b4:43:a7:3b:32:cc:0e:23:f0:e7:1a:58:55:56:0e:e5:2d:fe:
         04:4c:11:59:ad:43:13:f7:60:2b:ce:31:14:8e:87:1b:f4:9b:
         83:a5:1b:51:38:63:f3:f3:85:8e:db:34:2c:ef:12:6a:39:60:
         f5:99:46:c3:7b:8e:a2:08:51:d9:ab:52:da:b6:36:d0:3c:5f:
         60:af:3d:60:89:8d:3a:f3:b2:50:84:fa:92:a7:2e:01:69:1e:
         4e:16:e0:b8:c2:2e:b9:80:40:94:94:e2:4f:7f:7d:79:97:44:
         dc:b6:ae:c1:ea:ef:45:11:82:42:98:b2:60:49:75:c9:7c:2d:
         96:a1:72:12:ce:bd:7f:09:74:8d:e5:d3:ab:13:27:e9:95:4d:
         50:fb:d7:f8:bb:be:aa:52:b6:75:96:d1:60:77:8d:f2:7d:04:
         72:16:d1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:08:30 2026 by rpki-client