Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/1b492151-6f12-3451-92e2-0c8974ba6107.roa
File:                     1b492151-6f12-3451-92e2-0c8974ba6107.roa (raw, json)
Hash identifier:          55sg60ru8P8S5zupSd/AShWwzu0DFkhf/+dJqzrkSBc=
Subject key identifier:   B9:FD:DF:0F:FF:E6:C1:98:D7:C4:6E:5D:65:C4:40:E5:C4:4F:E3:13
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F4328584AC2E0EB3077B2B316552DD410
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/1b492151-6f12-3451-92e2-0c8974ba6107.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     1273
IP address blocks:        206.96.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:eb:30:77:b2:b3:16:55:2d:d4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=591b5f23-2cc2-44c4-aca2-4e87809e6c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a2:70:ae:57:44:d1:1d:8a:fc:c9:58:12:28:
                    91:31:54:75:1a:ba:36:b1:9a:f5:5f:8b:6b:b7:5e:
                    c8:af:5c:0a:2d:f1:ba:2d:2b:94:b1:d6:a2:b3:09:
                    34:48:f9:9c:32:48:de:f9:57:21:33:e7:67:84:b4:
                    e8:da:45:60:34:95:2d:59:78:97:cd:4d:d0:8e:98:
                    1c:7c:dd:4b:0a:f2:c1:51:61:df:9c:f0:63:1d:e9:
                    81:e7:a3:68:99:0b:dc:b4:56:3b:1b:65:6b:26:2e:
                    0a:23:d5:ec:43:39:b5:a7:1a:5a:52:ef:7e:74:ce:
                    d4:07:8e:70:b4:32:45:a2:d0:ad:5f:dd:73:a9:d7:
                    26:57:e4:b1:09:e6:d9:ca:6f:f1:b4:64:4f:a8:2a:
                    d1:6b:8d:12:bd:e7:23:b1:f4:54:c5:f3:88:f0:23:
                    81:8c:7c:ad:99:65:67:6b:e3:74:ad:50:3e:83:16:
                    15:91:f0:47:1f:4f:21:be:ac:19:c2:18:a4:df:ad:
                    58:0d:01:b0:c5:01:9b:0a:9d:35:e0:ac:42:b1:ab:
                    c4:e0:1e:b5:29:62:96:85:7d:d3:70:f2:2c:63:4a:
                    48:0e:3a:9d:6d:cc:23:b6:a6:b2:d0:e5:c7:6f:8a:
                    a9:10:66:0e:19:51:90:ee:3c:cb:68:6f:8c:d7:8c:
                    28:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FD:DF:0F:FF:E6:C1:98:D7:C4:6E:5D:65:C4:40:E5:C4:4F:E3:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/1b492151-6f12-3451-92e2-0c8974ba6107.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.96.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:8f:04:3d:03:9a:e9:8a:8c:1c:ac:18:a0:2d:86:ba:b4:c5:
         bc:1c:86:c3:de:da:61:26:23:7a:91:22:97:b1:43:09:2d:40:
         c4:62:28:a0:9c:bd:fb:17:85:6d:45:03:f7:d8:c8:96:38:1c:
         b1:58:ed:66:b9:9c:d4:a7:c4:ef:9d:63:21:b8:cc:83:8e:b1:
         11:17:24:de:06:ac:19:eb:84:fb:85:5a:93:b0:71:2d:a2:f2:
         a0:29:88:cb:d2:a4:c8:e3:ca:0a:ed:1b:f7:ce:29:c9:77:82:
         c4:31:61:d0:1f:4f:e2:2b:4b:22:40:45:e8:35:db:b5:b6:67:
         bf:bc:b1:30:7c:7d:0b:db:b0:ef:7e:29:d2:ba:06:ca:1e:c7:
         48:fa:22:29:8c:15:03:3a:f1:87:0c:36:7d:13:f8:1d:6f:ab:
         ad:4f:0e:ee:fa:03:e9:01:18:24:87:07:3c:6e:30:0e:d2:1f:
         65:8b:93:1d:14:f7:04:fa:73:d7:92:c9:8a:02:6a:bf:be:ed:
         66:76:bc:3a:93:64:9f:91:0b:75:96:8b:b3:7b:78:50:28:b0:
         5b:4d:f1:a2:2d:00:db:df:7a:51:c9:8f:07:76:46:b8:a3:10:
         12:30:61:85:3f:db:e2:78:a6:6f:7c:55:ef:c5:26:40:81:59:
         dc:a1:3a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:50:11 2025 by rpki-client