Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/2c0a9f0c-38f6-3210-8986-04b9d5ab0fc3.roa
File:                     2c0a9f0c-38f6-3210-8986-04b9d5ab0fc3.roa (raw, json)
Hash identifier:          FwzlAkS76GE5fD+9PsSsf7CF7bxZt+7c2/xTTApBsCs=
Subject key identifier:   9D:0F:82:C9:AD:A9:67:FB:F7:82:C7:E0:11:D1:78:12:D4:F1:7E:57
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F4328584D8EF5825B89F2346649AD1680
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/2c0a9f0c-38f6-3210-8986-04b9d5ab0fc3.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     1273
IP address blocks:        207.50.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:82:5b:89:f2:34:66:49:ad:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=fcd19289-8b73-4874-8566-254ea3d0926f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4f:6f:00:c2:10:d4:51:4a:ea:61:91:95:17:
                    9d:69:7c:77:1f:6e:e8:0c:cc:41:84:3d:47:ec:64:
                    6a:2a:ea:f1:ff:24:8e:4a:28:c5:be:30:f8:df:a7:
                    78:bd:b0:9c:94:b2:61:cb:c4:ef:fd:84:f8:2b:0e:
                    c7:63:5a:76:aa:76:30:ab:3b:1a:b3:a5:fe:14:5f:
                    ab:f8:ed:9d:da:21:4c:0e:64:2d:37:85:6e:34:5f:
                    5d:37:24:12:e9:04:b9:22:24:22:e5:f7:74:f0:52:
                    c7:be:7e:e5:92:d4:a7:d8:b2:dd:56:f7:dc:75:47:
                    b3:2d:95:2e:d1:a2:4e:70:68:82:cb:85:3d:50:06:
                    4f:45:78:a3:3b:32:f4:92:b9:ba:22:d7:d4:34:9e:
                    a1:68:6b:64:7d:02:76:b0:9e:01:c4:aa:62:ef:2d:
                    c2:da:92:17:64:20:36:b9:96:82:67:a7:98:8d:2a:
                    24:6e:5f:5b:1d:93:ea:dc:2b:a3:c3:cd:ab:53:fb:
                    ed:37:79:a6:0a:71:e4:cd:27:a7:cf:8a:3c:ed:1b:
                    3e:94:07:58:56:16:1f:c4:3c:cf:ff:e8:df:5d:7b:
                    0e:87:d1:34:63:61:d6:1d:a2:d1:f1:12:1f:91:78:
                    7d:fe:b5:0a:17:9c:d6:dc:e9:05:be:15:7b:23:34:
                    7a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0F:82:C9:AD:A9:67:FB:F7:82:C7:E0:11:D1:78:12:D4:F1:7E:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/2c0a9f0c-38f6-3210-8986-04b9d5ab0fc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.50.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:64:ce:b9:46:ea:11:81:4b:11:3b:21:6f:47:6e:20:02:5d:
         06:54:26:22:3d:a8:6b:cd:2d:5c:28:02:56:a9:3d:93:72:bc:
         d4:31:a3:93:58:38:57:9b:b9:21:a4:2a:63:74:7b:a7:cc:7b:
         1b:f3:b5:17:ed:fc:37:9a:56:c5:91:ba:54:a8:fc:1d:e6:b1:
         f8:6d:05:9e:ca:cf:f7:f2:77:be:0f:9e:92:94:53:56:6f:24:
         02:ee:61:ac:bc:83:71:b2:30:15:f9:bd:d0:b9:9e:9c:08:9f:
         16:5c:ff:e5:8b:27:ba:00:ca:75:c9:3b:d2:6d:4e:0a:9c:d1:
         c6:88:00:1e:d0:85:da:3d:39:c7:31:87:0b:0e:91:4c:9e:6b:
         33:6f:bd:ba:08:42:70:89:c6:df:14:74:64:6b:c1:b0:5f:d6:
         5c:23:68:c1:b5:1f:90:20:50:f3:cf:bc:c4:38:5e:80:bd:e5:
         24:a3:e3:8f:cb:99:92:9a:e3:48:04:23:d6:a7:6c:be:4b:eb:
         f0:a1:83:b3:ca:a1:75:0f:7f:69:06:58:70:b7:45:96:8f:05:
         d4:91:5f:58:84:e3:70:fe:6a:62:22:0e:c4:46:51:19:5d:d5:
         87:5d:82:b7:9f:63:ae:18:bd:63:1c:83:8b:fa:14:15:9a:fb:
         61:9d:89:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:22:15 2026 by rpki-client