Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddc65554-e3b0-3017-b4a9-4be5acf37481.roa
File:                     ddc65554-e3b0-3017-b4a9-4be5acf37481.roa (raw, json)
Hash identifier:          Z7OzR7nrADjK3Ls0Y0QZP9bCB1Clo/jSURXZaA6KxUI=
Subject key identifier:   13:05:32:4E:26:6D:8E:29:79:5C:DE:6F:75:5E:A1:02:C5:FD:EF:17
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DEC7B37D6DA2BEB316ACFE880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddc65554-e3b0-3017-b4a9-4be5acf37481.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     396545
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:37:d6:da:2b:eb:31:6a:cf:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=458ca283-f10b-4a1c-be91-df84e1958760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6a:39:a8:22:e2:b3:8b:a8:71:1b:a3:33:56:
                    5a:3c:d6:70:54:69:3b:56:56:6e:58:fa:d5:ac:0e:
                    65:55:83:95:da:09:a8:26:cf:ff:1b:30:80:fa:3d:
                    0c:66:1f:6c:a9:e3:66:c1:8c:97:73:3d:30:4b:4a:
                    af:65:eb:62:a3:44:90:0a:e1:59:d2:84:91:fe:a0:
                    a5:2b:55:4c:99:cd:9d:2b:d4:11:8a:87:9a:1f:ff:
                    d3:ff:09:be:09:25:1b:05:65:80:42:af:5f:fa:6c:
                    29:43:48:98:44:d2:ec:75:56:6b:56:02:72:65:8b:
                    13:8f:b5:fc:37:0b:92:34:b4:74:f0:67:3c:9e:83:
                    cc:8c:5f:be:54:67:52:da:bb:21:81:12:2c:3f:77:
                    bb:0b:27:0f:73:45:a1:c7:c6:fd:24:89:33:76:98:
                    3d:ad:9b:ef:ed:b8:6e:cb:e9:fa:7b:19:ae:88:6f:
                    3f:55:0a:75:67:35:8a:d8:31:df:e1:c7:a3:df:8f:
                    e2:bd:7d:53:49:cc:7f:8f:cf:b7:85:3c:95:db:a4:
                    03:23:2a:2e:08:23:c7:0b:46:f2:fc:ff:71:67:97:
                    a5:5f:c0:a8:2a:91:c0:20:59:b5:ac:10:1a:3d:e0:
                    b5:c2:8f:1f:f6:19:8b:09:ee:6a:4b:08:cc:e2:57:
                    25:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:05:32:4E:26:6D:8E:29:79:5C:DE:6F:75:5E:A1:02:C5:FD:EF:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddc65554-e3b0-3017-b4a9-4be5acf37481.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:db:40:84:c0:c0:41:09:78:21:9f:7f:08:27:35:2e:74:2a:
         21:13:16:ee:70:3f:0f:28:cb:73:ae:44:04:29:4c:41:40:db:
         0c:73:36:7d:d2:10:20:27:9a:80:b3:6e:81:ac:a8:ad:6a:2b:
         cd:07:e5:81:80:d9:7c:f5:6c:c0:a0:e6:77:c5:e1:eb:fa:3f:
         df:ee:28:eb:1b:f2:60:e3:c9:1a:73:d8:de:f2:ff:28:aa:7a:
         31:16:a9:7d:ef:df:fb:1c:f7:3c:41:e1:9e:d1:1a:1f:3f:64:
         33:31:59:ba:9e:62:4b:b3:5a:a7:ef:0e:9b:bb:17:df:04:88:
         8e:c0:84:a4:ed:e6:b0:4b:7e:07:d3:64:06:dc:ad:ab:42:c0:
         ad:f4:7f:1b:29:16:ff:64:32:44:38:d7:95:bd:6d:a9:c5:bb:
         33:30:a6:e2:21:00:1c:c4:24:c5:31:7e:c8:36:1e:c9:5c:5d:
         4a:b8:72:f6:62:71:d2:0b:ea:50:b6:82:be:b8:9d:f8:87:93:
         64:43:b1:b0:2e:1c:1d:4d:62:1e:5b:44:1d:bf:98:88:d4:e5:
         32:b0:68:e6:14:68:f9:c9:e7:95:c4:3c:6c:48:d0:16:3d:27:
         d9:a3:4d:e6:01:95:3d:28:8a:7a:e5:5d:27:25:1a:22:1a:ff:
         9b:86:4e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:02:08 2026 by rpki-client