Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/4674c542-a229-3daa-8f2c-4c5ff78cf657.roa
File:                     4674c542-a229-3daa-8f2c-4c5ff78cf657.roa (raw, json)
Hash identifier:          0TFKODyU1O/gCzjotASrBsSnIUGyWi5Kg1fvleZMByw=
Subject key identifier:   D9:F7:6D:0C:F3:0D:25:9F:41:67:FA:DC:7E:77:6E:C4:68:43:C1:2A
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F4328584EE7BC9E80D05533C26B42BB00
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/4674c542-a229-3daa-8f2c-4c5ff78cf657.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     1273
IP address blocks:        206.128.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:9e:80:d0:55:33:c2:6b:42:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=e1f87e76-6fe6-4be0-95b9-53086c038afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:26:7a:d2:ba:98:95:15:f8:7b:a3:ca:e2:ab:
                    8d:a4:f7:14:f3:6f:e7:6b:50:9f:da:8b:fd:e8:f7:
                    23:14:e4:fb:da:86:76:1d:30:27:ec:40:c7:94:e8:
                    38:4f:f2:96:3e:c0:d5:cc:7f:6c:ce:9f:ad:44:20:
                    53:f8:5c:fd:f5:7a:96:1e:a1:fd:ef:8e:67:e9:1d:
                    6b:5a:22:67:b7:88:83:d4:04:3f:ae:84:e3:73:d0:
                    9e:2b:b4:38:1d:75:01:b6:bb:ff:32:97:1c:09:cf:
                    0c:16:16:c9:43:9c:6d:b1:58:78:ec:dc:ba:9e:18:
                    2d:f7:22:11:dc:1a:ca:11:85:21:36:ab:52:55:4b:
                    d4:93:1b:d2:c8:71:0a:d4:8f:c3:6e:9c:0b:b9:20:
                    c1:91:32:cb:45:25:2e:b0:ac:89:a7:c9:04:06:46:
                    34:4b:8a:f3:2c:d3:22:40:bc:92:1b:4b:ff:d6:6c:
                    5b:3d:85:41:0a:3c:14:02:98:2d:cb:b0:39:4c:13:
                    58:1e:cf:b4:7c:b4:35:df:06:a9:f0:00:93:cb:ca:
                    87:25:b7:31:56:fd:68:d9:d3:47:8c:55:1a:18:4c:
                    89:2f:92:e4:a2:90:ac:9b:38:8d:60:ef:47:63:de:
                    15:63:47:5d:be:8b:19:e9:68:6e:e7:75:4c:94:49:
                    54:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F7:6D:0C:F3:0D:25:9F:41:67:FA:DC:7E:77:6E:C4:68:43:C1:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/4674c542-a229-3daa-8f2c-4c5ff78cf657.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.128.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:be:aa:73:59:b6:9b:60:f0:b9:d3:31:b6:e8:2e:a3:d4:dd:
         58:79:80:f0:b7:e2:52:b5:89:22:0f:8e:0f:e6:fc:39:e3:e7:
         50:85:96:bc:06:32:57:e5:11:db:e8:62:d0:64:84:64:24:00:
         b1:41:15:38:67:1d:40:e0:0b:f6:28:d8:c3:1b:65:9c:4c:1b:
         9b:9b:a2:04:cd:5e:79:73:42:f0:09:4c:38:e4:c1:bb:36:03:
         30:13:b0:d4:7e:c4:2d:0d:fd:25:06:e5:2f:23:c8:6f:40:11:
         79:b1:d7:90:49:65:c8:ca:81:ed:d5:52:bd:c1:4c:25:9c:8f:
         1a:04:d5:64:c8:59:ce:60:9e:ae:4b:68:58:6c:16:92:55:a2:
         e8:18:13:18:ae:b6:3d:b2:a0:51:b5:5a:e9:20:25:e0:5c:2d:
         5a:e4:c9:49:8d:0a:de:85:af:fa:63:41:62:4a:05:ef:aa:c1:
         78:08:e5:32:31:f6:02:d1:26:6b:34:5b:36:24:17:32:9b:be:
         76:b3:ca:c7:9e:48:23:8f:d4:1c:51:99:16:62:ab:11:3e:8d:
         22:60:50:be:dc:7c:dd:48:bc:57:94:62:cf:ec:c1:ff:86:f3:
         c1:a8:5a:19:8d:4f:02:64:f7:ad:1a:73:0f:fb:62:e2:1d:f8:
         ed:e7:9d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:13:57 2026 by rpki-client