Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/5c697242-ad76-35ae-a237-cbcd2c341305.roa
File:                     5c697242-ad76-35ae-a237-cbcd2c341305.roa (raw, json)
Hash identifier:          3fDDWfOePLdaKo224NGgKnguHLdRdil2yfFSyHzrEE0=
Subject key identifier:   17:1F:CF:57:9E:19:49:59:23:19:71:31:17:AB:16:B3:CF:65:8E:6E
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F4328584F49881AB57F4C2349748A31E0
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/5c697242-ad76-35ae-a237-cbcd2c341305.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     1273
IP address blocks:        206.153.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:1a:b5:7f:4c:23:49:74:8a:31:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6c8ce426-cfc4-408a-87c4-d1a0cfabdb42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6d:56:c5:cb:da:99:5f:c4:59:97:55:65:02:
                    d1:ef:9a:83:98:7e:5c:24:d9:be:d1:6f:e0:b4:5f:
                    b9:31:12:ec:60:a9:aa:7f:b0:31:9e:89:0a:b1:05:
                    50:a5:67:f4:d3:5a:73:ce:49:e9:d5:7c:cc:1f:5e:
                    9f:a0:66:7f:55:7d:16:69:c8:c6:67:74:26:81:63:
                    e2:66:aa:6a:0f:c6:dc:6a:0d:36:f1:f0:3f:a3:0b:
                    83:88:8b:cb:d7:2e:6e:33:03:d2:f0:5e:ff:ff:db:
                    69:f5:96:15:e9:ad:6a:2f:2e:e1:6d:8c:74:b0:d4:
                    a1:71:e3:64:86:66:28:18:20:ed:af:32:44:e8:14:
                    db:19:5a:95:63:6a:56:71:63:f0:11:a1:91:db:72:
                    7d:6f:ea:ca:b9:cd:03:60:f3:ca:98:c6:f9:e3:10:
                    3f:fd:2d:b5:67:4e:7f:76:35:c5:b6:45:0f:f3:8a:
                    5d:9a:6b:d6:03:9c:36:64:e7:07:09:38:36:26:aa:
                    b3:bc:ad:4e:fe:1e:d1:32:70:01:ff:59:d2:6c:05:
                    72:69:e4:a7:42:1a:cd:a1:2b:d5:80:dd:81:68:82:
                    59:01:34:f4:fc:02:6f:40:30:21:d9:ba:0e:d2:aa:
                    80:f0:69:04:16:d5:18:76:53:d3:01:49:fc:58:14:
                    ce:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1F:CF:57:9E:19:49:59:23:19:71:31:17:AB:16:B3:CF:65:8E:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/5c697242-ad76-35ae-a237-cbcd2c341305.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.153.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:1b:a8:c1:71:25:c6:d7:ba:30:cd:0e:5b:9c:34:ea:a3:ac:
         02:0e:43:e4:47:8b:ea:01:08:58:bd:20:e7:3c:34:d6:31:a8:
         78:b6:46:a4:28:a0:7c:54:9d:fc:5f:5b:a7:8b:18:1b:fe:32:
         33:5a:a7:48:ff:b9:d5:f3:b1:52:ba:e3:18:c5:44:a1:24:a8:
         b6:db:09:c3:73:88:97:97:90:1b:99:70:4c:96:05:9d:7f:c5:
         70:d5:a9:b1:5e:42:d2:05:ac:95:34:6c:be:9d:d1:ff:c5:e9:
         32:37:5d:23:05:be:38:75:ee:da:42:1a:06:a2:e5:7f:19:7e:
         aa:79:37:9c:e1:55:85:b0:b0:b4:f0:51:a3:d3:ba:22:4d:39:
         8c:71:32:1c:f0:47:ed:dd:47:19:cf:e6:6b:33:ff:bf:66:ae:
         23:b5:22:de:f2:4b:06:5b:50:36:7d:c0:95:7e:76:f4:ed:81:
         5a:fd:04:53:8b:e9:69:b7:cf:ff:f8:26:7e:06:37:a3:98:0b:
         d9:09:ad:02:e2:ca:59:df:f6:c4:83:4f:d2:c8:8d:1a:e6:4e:
         10:59:0b:da:52:72:59:66:72:bf:f5:03:e8:25:d7:d4:57:04:
         30:cc:c6:f6:71:23:01:b4:8e:3f:8f:8b:fc:74:1f:82:2e:7d:
         6d:80:cc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:23:18 2026 by rpki-client