Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/5c697242-ad76-35ae-a237-cbcd2c341305.roa
File:                     5c697242-ad76-35ae-a237-cbcd2c341305.roa (raw, json)
Hash identifier:          qJlANGqQCNszagIG57wC/OI3WOtlf9sMPwbMKP/iP9w=
Subject key identifier:   17:DD:8E:B2:12:41:EF:FA:EF:8F:39:8C:06:BA:5F:23:9C:6E:58:67
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F4328584DFBD62306AF12A0B55AA5E9C0
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/5c697242-ad76-35ae-a237-cbcd2c341305.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     1273
IP address blocks:        206.153.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d6:23:06:af:12:a0:b5:5a:a5:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=90f21049-e47f-41fb-9712-2b0c1a43043b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:be:b9:80:88:ff:dc:6b:f8:4b:0d:83:ab:b2:
                    12:9f:c3:df:90:38:28:66:df:5c:0c:c6:84:07:5c:
                    e5:75:b6:02:0e:e3:cb:5d:b6:28:c3:28:eb:ce:ed:
                    28:49:42:e9:6a:91:53:64:38:5a:39:06:79:81:99:
                    11:2c:6c:e0:a6:f6:06:83:c8:6a:94:48:86:44:86:
                    b2:17:0b:ce:9a:54:a2:67:20:0f:14:1f:34:15:9e:
                    a2:17:71:f4:c4:e6:86:0f:bb:bc:6b:0e:0f:4b:97:
                    2c:e9:8d:e3:0d:b2:4d:9f:3a:3f:8c:60:a0:6f:cf:
                    6a:36:a8:41:ec:bd:f2:f8:33:ad:75:72:e0:31:c6:
                    e1:03:c2:49:69:99:88:c6:fc:4e:ec:5d:a3:8e:6e:
                    8b:e1:9d:80:ff:c1:9a:fa:fc:3e:b5:30:93:3a:1d:
                    07:d5:24:4a:ea:a9:09:96:b8:70:0f:7d:4b:e5:66:
                    a8:e5:d4:97:45:93:7e:27:2a:49:9c:f7:c7:77:5a:
                    ad:45:e7:39:e6:e4:b2:8b:13:1b:a0:97:b9:8b:cf:
                    c2:b8:c7:7d:f8:f1:13:fc:04:50:d9:af:28:b2:2a:
                    26:b9:3c:b0:65:36:41:ec:1e:df:1d:0f:d0:ba:85:
                    57:0f:5b:91:0a:da:75:4d:67:bb:c2:6d:8e:1e:83:
                    bb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DD:8E:B2:12:41:EF:FA:EF:8F:39:8C:06:BA:5F:23:9C:6E:58:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/5c697242-ad76-35ae-a237-cbcd2c341305.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.153.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:1b:b5:ed:83:1e:92:c9:78:ca:52:c0:55:6e:bd:81:68:e8:
         30:b5:2f:79:47:9a:23:38:25:19:2b:e9:98:db:07:0a:b6:ad:
         4d:f0:81:ea:0d:8e:89:b1:ec:f5:e2:aa:ec:41:d4:7c:a2:f7:
         e1:3d:fa:ba:b4:4e:1a:60:96:32:16:b8:39:b7:a3:78:e0:ef:
         d2:16:1e:d3:b3:b9:67:eb:42:21:0c:07:08:ad:8c:b7:c0:af:
         33:68:2f:c2:bf:9c:a5:0e:d0:c5:89:f4:90:9f:44:50:d6:d4:
         7d:df:37:c7:04:24:34:43:e6:17:9f:2e:ef:71:44:ff:f8:a3:
         8b:30:ed:23:30:57:4f:cb:20:48:22:07:3e:00:ed:c9:77:5e:
         a3:2d:eb:ae:8d:da:2d:28:a5:19:bb:6e:39:e3:39:ce:52:fa:
         e3:00:22:57:8b:62:7e:4e:a2:21:6d:6d:41:5e:8b:8b:73:2b:
         bd:3c:1c:d2:cd:03:75:6c:1e:19:c0:7c:6c:00:44:77:cb:e3:
         fc:c1:65:76:a4:75:d5:4d:be:b3:72:1e:f4:78:1b:9d:6a:01:
         4d:5d:19:62:3e:2a:58:cb:e7:82:d5:6e:26:af:ea:64:85:7e:
         31:b9:3e:72:59:de:e6:f7:82:06:1f:12:9a:08:44:de:12:81:
         69:4e:c6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:33:49 2026 by rpki-client