Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/e6679876-bbc5-3741-aa58-b00c68e0dd8d.roa
File:                     e6679876-bbc5-3741-aa58-b00c68e0dd8d.roa (raw, json)
Hash identifier:          i2gHXUfYdM7b8zPqq5bCT8kfY7Q1mi4a/ss0KeBBLik=
Subject key identifier:   B2:9E:F8:56:73:0E:8A:BB:A8:0A:86:55:CA:89:59:A3:58:3D:89:86
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F4328584E4559DCBE9A9374A0B301B740
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/e6679876-bbc5-3741-aa58-b00c68e0dd8d.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     1273
IP address blocks:        206.99.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:dc:be:9a:93:74:a0:b3:01:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=9bcaa98d-c6ca-46ff-b32f-53632c19c4fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:93:5d:e7:83:32:e1:5a:4c:ab:2a:85:12:26:
                    cb:41:f5:53:d3:bf:41:86:0c:73:75:f4:a7:b1:de:
                    75:a1:36:88:58:a8:5d:11:2b:54:cf:0e:71:7f:93:
                    19:1f:69:d2:a7:80:2f:44:a8:65:94:d8:82:6f:bd:
                    c5:79:f6:dd:45:47:a6:b9:d1:02:bc:88:c5:18:16:
                    77:fa:31:25:0a:df:54:1e:6c:8a:cc:fb:d7:e8:e8:
                    9d:78:b4:11:c7:f3:06:35:66:59:ec:0d:82:5f:37:
                    c9:fa:04:87:07:67:68:98:79:83:da:d2:8d:c6:72:
                    97:a3:e2:5f:1d:22:4d:65:5b:0a:d3:63:82:96:9b:
                    c8:4a:b6:65:86:45:1d:60:98:a9:0b:95:f3:07:ec:
                    eb:1a:f4:81:ac:b5:1c:b8:a7:19:4e:0e:0e:f0:e7:
                    78:e7:75:ba:5d:4a:d3:a5:2b:42:11:ae:76:32:bd:
                    03:ba:37:81:8e:e9:92:80:b1:f5:ea:a2:13:0f:4f:
                    73:08:e1:12:f3:15:aa:b1:e9:cb:19:2a:95:18:fa:
                    52:79:48:d5:20:eb:a9:29:b0:23:bf:c3:32:fe:2d:
                    56:2a:40:d0:08:f9:a0:38:d8:31:ea:c3:04:1e:63:
                    d5:9f:a0:ea:93:33:66:59:d0:2c:16:45:07:e3:0f:
                    06:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9E:F8:56:73:0E:8A:BB:A8:0A:86:55:CA:89:59:A3:58:3D:89:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/e6679876-bbc5-3741-aa58-b00c68e0dd8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.99.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:a2:9f:3c:05:2c:32:11:ed:31:f1:98:0c:85:64:92:33:a4:
         4b:23:27:27:b8:45:22:16:c4:21:8e:4b:74:06:de:51:f5:a8:
         49:45:44:70:19:57:38:8a:d6:a5:1d:ae:29:03:34:af:61:ad:
         25:86:96:d2:84:c2:75:b7:e2:6b:95:a8:6e:c2:4b:75:be:f0:
         11:3b:12:4a:4c:c5:ec:6f:d1:96:f2:7b:4c:e9:ec:6f:84:19:
         aa:2f:35:b2:c6:06:d9:e1:49:db:da:d1:38:26:a4:95:24:9c:
         e1:53:5a:71:c7:2a:84:1c:63:00:d6:7e:4a:1f:38:c0:a5:a9:
         8b:04:14:7a:ee:58:49:ad:58:3f:19:f8:34:92:e0:4d:86:ec:
         1d:2f:37:f2:d7:3b:e1:ec:27:89:09:b3:58:25:2b:d8:97:08:
         42:49:f9:c8:ec:48:26:b1:5e:e1:db:6a:ea:2f:54:6d:f0:1d:
         16:ef:a6:eb:37:7c:59:84:d6:cb:9f:4c:23:75:a8:07:2d:4e:
         b8:34:80:c2:02:ea:46:23:87:f5:b5:fd:96:20:90:a9:f9:f6:
         00:e2:f7:5c:ac:7f:87:56:8d:ce:24:f8:5f:b4:3a:a0:c0:4f:
         6a:54:2e:6b:4a:b7:1d:78:a2:ed:9e:06:e9:e1:a8:b4:0c:ef:
         d4:19:da:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:56:41 2026 by rpki-client