Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd3f39b1-225c-3a63-b362-46081ce30613.roa
File:                     bd3f39b1-225c-3a63-b362-46081ce30613.roa (raw, json)
Hash identifier:          r9KxGgCW4eHRokSGZ2FWNdXT3y7Axf94iUXqtvqffwU=
Subject key identifier:   8A:D7:5E:EB:0A:D0:6A:BE:F6:59:33:2B:84:AC:AB:27:B0:02:A0:47
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA79AC9FB014DC84EC490A140
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd3f39b1-225c-3a63-b362-46081ce30613.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36626
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:c9:fb:01:4d:c8:4e:c4:90:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=baad40e0-bcc5-4bed-9cc0-a4842dee364e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:60:c0:72:25:b7:b4:4e:30:66:11:48:37:86:
                    95:66:df:d5:8f:07:89:65:1d:a0:77:07:d6:db:ed:
                    8b:78:a4:20:db:4b:57:30:81:82:25:85:01:3d:4f:
                    51:af:ab:b1:01:5d:db:5b:2a:3d:c4:22:e2:5e:c2:
                    21:f3:a3:dd:7a:0e:d3:d0:a5:61:d6:05:80:13:94:
                    bd:ce:dd:9c:81:b4:91:d8:70:ce:41:0e:d4:c7:60:
                    38:36:65:99:1a:8f:2f:c0:89:51:6c:f1:ca:74:6a:
                    f2:2b:7d:d3:57:fb:7d:8f:ed:00:cb:67:c9:b2:31:
                    ff:8d:d4:b4:0a:7b:b1:05:05:80:2e:43:02:a9:2a:
                    2d:ad:d2:08:ac:4f:ec:33:93:04:5c:a1:8a:2f:82:
                    75:d2:a4:e7:5b:88:f1:a8:43:aa:2c:bc:1c:c0:ff:
                    7e:0e:38:3f:c2:b6:74:9d:4a:c2:d5:f7:cb:da:9d:
                    9b:a5:92:58:53:bf:1b:6d:f0:83:4e:ec:c0:86:e2:
                    26:36:06:3c:7b:27:6e:08:8a:6c:43:a9:b2:9c:f8:
                    ac:06:05:b2:3e:8e:f6:58:d2:67:72:b7:d7:0e:a1:
                    47:de:08:59:8f:a5:55:e0:7c:20:55:4f:a6:2d:f7:
                    ac:8e:a5:b5:33:1d:70:55:62:c4:1a:29:78:2b:ee:
                    1b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D7:5E:EB:0A:D0:6A:BE:F6:59:33:2B:84:AC:AB:27:B0:02:A0:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd3f39b1-225c-3a63-b362-46081ce30613.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:40:18:d9:74:8b:05:3b:80:28:63:ac:fc:48:5b:0d:ed:c6:
         8e:6b:ae:9a:86:c6:19:21:98:33:aa:40:f3:cb:0c:cc:00:ed:
         b3:45:21:42:ec:39:b5:72:20:5a:09:9e:0c:48:25:ad:6e:55:
         44:16:11:af:e7:b0:51:82:52:70:66:5e:3a:dc:3c:40:17:81:
         f6:e9:d4:bd:f6:ab:5f:eb:fc:4f:70:4f:00:7f:d5:5d:ec:6d:
         fa:9e:62:10:47:48:93:d8:63:96:3a:79:87:31:5d:3a:69:82:
         53:8f:b6:c7:c3:43:fe:05:60:ea:1d:1c:7b:d1:1f:a5:4d:f3:
         ab:e6:e4:b9:71:87:ed:20:e5:96:e4:24:0d:7b:7e:c2:f0:be:
         ac:f1:33:99:74:bb:55:85:32:c4:77:c3:f6:46:90:68:6e:db:
         08:ef:c9:35:03:82:3f:02:2f:70:bf:9b:43:7d:02:cc:3b:3d:
         e9:e0:01:1c:30:0d:52:7c:9f:0b:8c:a9:04:5a:e1:eb:01:5a:
         7e:5e:ef:af:f7:ed:14:90:b6:57:2a:3d:9b:84:f0:8c:e6:23:
         22:1c:99:b8:6f:09:a9:66:8f:e1:e7:a5:76:9a:91:8a:05:01:
         75:2b:c1:6b:93:0b:e7:b1:52:86:fa:5d:f7:1c:07:89:d7:d6:
         b8:92:f1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:59:49 2026 by rpki-client