Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/2140c9b1-330e-3461-bffa-e180266e388d.roa
File:                     2140c9b1-330e-3461-bffa-e180266e388d.roa (raw, json)
Hash identifier:          W1STUn377cJbiKRjbKYPhBYMSpqFKYlk0jdgWUpb4Wo=
Subject key identifier:   8F:8B:F7:1A:01:A1:7A:27:A7:AE:8E:D0:2E:0B:12:00:BB:16:7E:5A
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F4328584F89A85ADA934F58DDD799BE40
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/2140c9b1-330e-3461-bffa-e180266e388d.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     1273
IP address blocks:        206.28.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:5a:da:93:4f:58:dd:d7:99:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=f4984db3-bd12-40ff-9d87-3112a2bd8e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:12:55:16:bb:5d:49:3c:32:bd:a6:11:cd:1c:
                    28:1b:b1:96:29:20:45:68:73:fe:df:f5:d4:cd:8c:
                    5d:8e:56:be:0d:12:74:fc:cf:90:4d:06:5c:e3:0c:
                    a3:88:a0:da:5a:12:67:bd:9b:f9:9a:bf:7c:53:c3:
                    22:8a:8a:59:65:29:ce:d7:ea:5a:6d:03:56:53:48:
                    c9:54:b5:88:50:1b:50:ce:82:ed:7c:88:93:b1:20:
                    38:fb:7d:a2:9f:a5:c1:0a:d3:e0:7f:e8:ac:9a:67:
                    71:8a:24:0b:b0:2b:29:e3:ba:13:d6:2d:46:31:b4:
                    1f:20:10:eb:0f:f4:9d:60:2c:96:ea:10:4a:5b:bc:
                    a6:80:9b:51:7b:eb:a3:79:9f:9f:50:d2:5a:5c:d4:
                    3e:aa:ba:0b:6b:d9:a0:38:c7:20:55:bc:c5:c3:c0:
                    f5:f4:8f:42:01:36:23:e7:d8:56:6d:4e:6e:81:7e:
                    01:bf:5d:1c:e3:56:ca:62:f3:a8:93:18:84:b9:b1:
                    4b:08:d1:4a:bd:2b:09:13:3f:b3:2f:1c:cb:7e:48:
                    58:32:3e:ff:66:74:7f:dd:19:6f:8c:31:f6:08:b8:
                    73:20:ef:a4:6a:95:67:1e:24:dd:a9:40:0b:1d:e0:
                    1f:88:94:51:4b:a5:5a:43:2b:5e:3f:47:c1:62:6b:
                    b5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8B:F7:1A:01:A1:7A:27:A7:AE:8E:D0:2E:0B:12:00:BB:16:7E:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/2140c9b1-330e-3461-bffa-e180266e388d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.28.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:b0:a8:95:17:9f:c1:e1:1e:ab:b0:7e:78:c6:c0:89:49:de:
         3b:be:2e:39:d6:75:d0:22:21:60:b5:29:fc:98:44:57:11:d4:
         b2:b3:44:87:e2:2b:80:40:2d:82:c4:41:e6:cd:44:6b:ea:b0:
         30:5f:68:32:d7:50:bf:40:11:85:32:ea:08:7f:c7:39:f9:35:
         4b:77:f2:78:88:25:cd:d2:e7:77:2e:65:70:33:71:9e:5b:8f:
         71:97:95:86:9a:39:b2:c7:6c:94:cb:39:75:cb:99:3c:52:6e:
         2d:cb:b6:e7:54:24:3e:ba:8b:81:51:d3:91:00:cf:1a:7b:82:
         09:e7:82:ff:fa:e9:f9:9b:92:85:cb:03:b2:43:cd:7e:6a:37:
         c3:d0:a7:34:13:e2:af:6e:0d:c9:ce:b9:95:94:0c:8b:ce:e1:
         0e:36:38:99:6a:f8:a9:e2:05:c9:a9:6c:89:e3:be:47:50:fa:
         be:9b:94:df:bf:7f:d5:ba:23:a6:83:50:2f:8b:ed:13:0d:03:
         07:d3:ad:85:ef:78:c4:42:c5:77:3b:b8:32:e1:1f:d6:74:c0:
         8b:53:8e:f4:af:b4:06:50:99:db:27:a0:99:81:ad:9d:d3:94:
         02:f5:b3:c4:fb:8d:c6:fb:3b:6a:e5:6a:30:84:9f:6b:cb:9e:
         1d:bf:69:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqFrak09Y3deZvkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWMyZDM4NzYtMjllNi00MmY1LWI3NmYtMjNiYjQ4YmE4
NTgyMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk
ZjQ5ODRkYjMtYmQxMi00MGZmLTlkODctMzExMmEyYmQ4ZTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxJVFrtdSTwyvaYRzRwoG7GWKSBFaHP+3/XU
zYxdjla+DRJ0/M+QTQZc4wyjiKDaWhJnvZv5mr98U8MiiopZZSnO1+pabQNWU0jJ
VLWIUBtQzoLtfIiTsSA4+32in6XBCtPgf+ismmdxiiQLsCsp47oT1i1GMbQfIBDr
D/SdYCyW6hBKW7ymgJtRe+ujeZ+fUNJaXNQ+qroLa9mgOMcgVbzFw8D19I9CATYj
59hWbU5ugX4Bv10c41bKYvOokxiEubFLCNFKvSsJEz+zLxzLfkhYMj7/ZnR/3Rlv
jDH2CLhzIO+kapVnHiTdqUALHeAfiJRRS6VaQyteP0fBYmu1dwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI+L9xoBoXonp66O0C4LEgC7Fn5aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJk
Mzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2JiNDhiYTg1ODIvMjE0MGM5YjEtMzMwZS0z
NDYxLWJmZmEtZTE4MDI2NmUzODhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWMyZDM4NzYtMjllNi00MmY1LWI3
NmYtMjNiYjQ4YmE4NTgyL2FjMmQzODc2LTI5ZTYtNDJmNS1iNzZmLTIzYmI0OGJh
ODU4Mi5jcmwwHwYDVR0jBBgwFoAUDEkkReUZkCywPx/BY7zBtY7YpJ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJkMzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2Ji
NDhiYTg1ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzhy4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABWwqJUXn8HhHquwfnjGwIlJ3ju+LjnWddAiIWC1KfyYRFcR1LKzRIfi
K4BALYLEQebNRGvqsDBfaDLXUL9AEYUy6gh/xzn5NUt38niIJc3S53cuZXAzcZ5b
j3GXlYaaObLHbJTLOXXLmTxSbi3LtudUJD66i4FR05EAzxp7ggnngv/66fmbkoXL
A7JDzX5qN8PQpzQT4q9uDcnOuZWUDIvO4Q42OJlq+KniBcmpbInjvkdQ+r6blN+/
f9W6I6aDUC+L7RMNAwfTrYXveMRCxXc7uDLhH9Z0wItTjvSvtAZQmdsnoJmBrZ3T
lAL1s8T7jcb7O2rlajCEn2vLnh2/ad0=
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:49:23 2026 by rpki-client