Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd248fc5-930e-3860-aece-04e4e0e8003a.roa
File:                     dd248fc5-930e-3860-aece-04e4e0e8003a.roa (raw, json)
Hash identifier:          YEquMAE0cqCf/uF8nAb0uMg2DWnMMM52ypkEEdVwAwQ=
Subject key identifier:   84:62:BC:20:32:77:01:CF:B9:7E:1C:3D:D2:5F:DF:96:26:FB:C6:74
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0006069D6AE73B2B20E3B900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd248fc5-930e-3860-aece-04e4e0e8003a.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     397201
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:06:9d:6a:e7:3b:2b:20:e3:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=5106b5e9-b239-4d94-a407-bd582507d18f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:29:d3:17:50:9a:41:eb:23:c7:80:98:61:1b:
                    c1:08:5c:e3:61:39:8a:55:b8:a2:1e:24:86:a5:f5:
                    b9:9b:5a:29:11:19:ff:01:4e:9b:0c:50:7f:87:6b:
                    fd:24:e4:5a:51:4b:0a:78:c0:ab:eb:b5:08:ff:6b:
                    9c:79:f9:d3:8f:9c:ba:96:dc:84:89:01:0e:7d:52:
                    dd:60:72:77:98:db:06:26:22:a9:71:8d:38:09:d5:
                    af:e6:89:b9:98:a5:a2:77:fd:0b:3b:d7:89:4a:05:
                    22:2a:be:fb:b3:a8:eb:57:e2:2a:19:e7:e7:c2:f3:
                    c5:90:ed:e1:83:0a:9f:c7:3f:f1:9d:ed:62:32:5e:
                    5c:35:e4:f3:b3:0f:65:0b:6d:6c:3e:7b:58:6d:df:
                    2d:c4:9d:cb:63:bf:cb:ec:d0:7a:e3:42:3d:5f:84:
                    c5:ed:bd:34:ff:6c:d3:bb:f1:4c:f4:43:72:d7:a1:
                    79:28:e8:b3:d4:58:a7:af:d4:cc:d9:42:e0:48:11:
                    fd:a3:3b:b6:c7:0a:da:3e:c3:8f:76:d6:b9:01:57:
                    e9:80:93:de:4e:a7:44:ab:3c:39:ed:24:52:b8:23:
                    0d:2d:5c:21:44:b6:67:e3:b7:db:e9:eb:6d:54:76:
                    55:a8:6c:35:fa:02:e0:2d:59:1f:bd:6c:78:32:8a:
                    57:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:62:BC:20:32:77:01:CF:B9:7E:1C:3D:D2:5F:DF:96:26:FB:C6:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd248fc5-930e-3860-aece-04e4e0e8003a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:08:64:64:7e:4d:34:36:20:e8:97:ab:e6:04:bd:0e:5a:ec:
         41:4e:3b:4a:7e:9a:ad:3a:28:1f:73:d5:e1:36:55:6d:a3:ae:
         49:cc:a1:c2:9a:b2:4c:e8:8d:52:83:cb:82:c5:b9:a9:73:83:
         ad:f1:f6:ec:e6:7d:2e:60:d0:93:21:93:aa:63:18:5a:e6:9b:
         22:07:e9:d1:6e:c6:87:d2:2d:bd:6c:a6:43:24:61:3a:07:d1:
         ad:36:2a:59:9a:68:b4:ff:b2:c2:c0:97:07:c5:15:96:d2:02:
         fe:39:60:a8:ee:00:a3:f2:90:8b:03:ea:b7:98:b9:2e:53:21:
         b9:30:82:16:62:cc:e6:0a:7e:3e:92:a9:95:92:b3:81:6b:60:
         76:1e:3a:9c:20:73:6e:8f:ec:d5:e3:4c:61:82:07:32:85:9e:
         df:1b:fb:cd:47:8b:8f:62:f8:a9:a7:32:46:22:e0:1e:6d:57:
         19:44:d8:17:60:36:a5:60:66:1f:50:4a:33:4e:c5:23:95:cd:
         9f:b9:71:96:2e:b4:66:4b:63:0d:0e:c1:3d:2d:5f:4a:2f:60:
         32:7f:14:24:48:26:57:57:41:a3:e1:1e:bf:14:7a:d2:c1:66:
         f9:46:bd:cb:9b:88:83:a9:d9:34:9e:87:3a:3b:52:ea:17:89:
         a9:5f:bc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:52:20 2026 by rpki-client