Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f9e87a5-daf1-38e1-9600-8596d3062364.roa
File:                     9f9e87a5-daf1-38e1-9600-8596d3062364.roa (raw, json)
Hash identifier:          Lr9kb05cJtwq4E+m+1DczbMolsu0ylQI4pS7g3+VjFk=
Subject key identifier:   54:F9:23:FC:68:47:93:4F:DC:47:9B:60:CD:5C:B2:CD:1E:18:FF:21
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E00060900DC79898AE876B3C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f9e87a5-daf1-38e1-9600-8596d3062364.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     396597
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:09:00:dc:79:89:8a:e8:76:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=a50bc672-0919-4e6b-9be6-3824771718af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:81:5b:16:a2:3e:94:21:93:1e:00:8e:8e:30:
                    72:fa:45:35:18:54:ab:a1:c1:65:8f:41:67:43:1e:
                    30:78:15:c5:01:b4:5e:8b:d0:32:d8:d6:1e:a5:91:
                    1c:4c:38:94:f0:67:d8:02:19:c5:8b:74:61:f7:f0:
                    c7:da:d8:7e:08:33:f9:f1:32:22:e8:fe:c3:e8:a1:
                    d2:9c:9d:a1:78:15:48:fa:a0:41:ee:09:52:b0:85:
                    55:eb:65:6a:0d:17:24:e3:3d:56:78:9a:a4:d9:1e:
                    70:4e:3f:55:51:c4:f1:33:dd:b1:11:8d:51:8e:6a:
                    af:99:8d:23:df:bd:c0:bb:1b:83:0b:b7:ac:94:5f:
                    9e:56:e8:58:12:00:35:dc:ff:d3:7c:60:2d:a7:3f:
                    09:b1:82:36:c4:16:8d:d3:88:93:e2:86:da:9e:c1:
                    a2:bf:b5:bd:3d:5b:e6:5e:81:cb:be:5d:6b:09:a7:
                    60:68:0f:d1:ee:da:96:93:4c:60:44:c5:cd:15:42:
                    e2:e6:e0:ac:bd:24:b8:f3:8b:4d:15:49:50:bb:8d:
                    6f:10:08:21:fa:b0:3e:2f:4b:f2:f8:ff:9a:ed:38:
                    23:70:96:54:5c:60:47:e8:9f:2c:3d:de:85:e3:80:
                    9d:70:ba:bc:5f:2e:b8:5d:d6:01:29:99:7e:94:5c:
                    e8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F9:23:FC:68:47:93:4F:DC:47:9B:60:CD:5C:B2:CD:1E:18:FF:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f9e87a5-daf1-38e1-9600-8596d3062364.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:42:80:d3:83:9b:2d:12:4e:8c:c3:82:13:67:76:8d:17:b9:
         74:a5:33:a4:6f:7c:27:03:28:50:6c:35:4f:0a:c7:d5:30:f9:
         4a:a3:3b:2f:25:da:a0:19:0d:60:1e:b7:97:92:ed:19:e9:c1:
         f7:a2:83:ad:88:f1:f8:2d:20:be:8c:89:61:9d:4b:da:54:ac:
         6c:9b:f8:9b:11:1e:ee:80:2d:26:6c:4b:20:02:41:5e:76:05:
         9b:14:4b:f7:6c:ea:bb:86:17:6f:06:11:48:b5:81:f6:d3:85:
         ae:53:0b:9b:42:e9:96:99:d6:10:a1:2e:ad:e9:51:e0:ad:b6:
         35:43:41:6b:4f:c1:7c:8d:58:54:91:67:fb:3d:be:ca:ff:ac:
         e1:ef:a0:e1:26:90:34:eb:26:1d:8a:c1:73:62:9e:3c:ec:2c:
         3a:0d:5c:27:35:7a:cc:19:1b:b0:6f:6d:62:03:b9:8e:88:fc:
         b4:c2:f1:f3:e2:25:da:15:a2:72:65:f4:75:6b:00:6b:7c:a9:
         51:4d:f3:68:ef:1d:8f:60:02:64:94:99:d4:8e:82:6b:7b:e0:
         db:c6:19:73:69:cf:66:c9:1f:b9:1d:44:d4:94:42:47:4f:ee:
         be:67:ce:62:d2:19:4e:37:4f:8e:4a:f1:64:cb:e8:ef:42:7a:
         f7:38:0c:d0
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE4ABgkA3HmJiuh2s8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
YTUwYmM2NzItMDkxOS00ZTZiLTliZTYtMzgyNDc3MTcxOGFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoFbFqI+lCGTHgCOjjBy+kU1GFSrocFlj0Fn
Qx4weBXFAbRei9Ay2NYepZEcTDiU8GfYAhnFi3Rh9/DH2th+CDP58TIi6P7D6KHS
nJ2heBVI+qBB7glSsIVV62VqDRck4z1WeJqk2R5wTj9VUcTxM92xEY1RjmqvmY0j
373AuxuDC7eslF+eVuhYEgA13P/TfGAtpz8JsYI2xBaN04iT4obansGiv7W9PVvm
XoHLvl1rCadgaA/R7tqWk0xgRMXNFULi5uCsvSS484tNFUlQu41vEAgh+rA+L0vy
+P+a7TgjcJZUXGBH6J8sPd6F44CdcLq8Xy64XdYBKZl+lFzouwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFFT5I/xoR5NP3EebYM1css0eGP8hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWY5ZTg3YTUtZGFmMS0z
OGUxLTk2MDAtODU5NmQzMDYyMzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAWQoDTg5stEk6Mw4ITZ3aNF7l0pTOkb3wnAyhQ
bDVPCsfVMPlKozsvJdqgGQ1gHreXku0Z6cH3ooOtiPH4LSC+jIlhnUvaVKxsm/ib
ER7ugC0mbEsgAkFedgWbFEv3bOq7hhdvBhFItYH204WuUwubQumWmdYQoS6t6VHg
rbY1Q0FrT8F8jVhUkWf7Pb7K/6zh76DhJpA06yYdisFzYp487Cw6DVwnNXrMGRuw
b21iA7mOiPy0wvHz4iXaFaJyZfR1awBrfKlRTfNo7x2PYAJklJnUjoJre+Dbxhlz
ac9myR+5HUTUlEJHT+6+Z85i0hlON0+OSvFky+jvQnr3OAzQ
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:10:52 2026 by rpki-client