Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/5f900eb5-41ef-3759-be3d-6cfc67e72a04.roa
File:                     5f900eb5-41ef-3759-be3d-6cfc67e72a04.roa (raw, json)
Hash identifier:          ckooJMi+JQfHUEM+b/IrEh6KhhHDvKc7zKTSjT+Jvrc=
Subject key identifier:   80:4E:08:E1:A1:AD:25:DA:5D:D1:8A:0E:B0:EC:86:D3:20:C1:66:85
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F4328584D1B19EDC8554294468A3E3B80
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/5f900eb5-41ef-3759-be3d-6cfc67e72a04.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     1273
IP address blocks:        208.132.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:19:ed:c8:55:42:94:46:8a:3e:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=a25b4af8-ff8e-4cc1-b3f0-e4e1682e796d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:68:90:3b:79:1e:9f:82:9e:b0:5d:b5:b5:67:
                    72:e2:7c:b8:bd:31:6f:e7:3b:44:27:63:bb:81:c3:
                    bd:cb:cd:e6:15:56:60:05:b1:98:09:28:62:68:b8:
                    70:46:bd:11:9b:be:71:93:9f:ad:c6:6e:a0:cd:89:
                    b1:7a:a5:df:0e:ab:4f:e8:3d:f0:18:48:f0:1b:e9:
                    84:5c:e4:56:d2:64:b7:64:0e:3e:99:b7:77:69:ec:
                    47:bc:5b:81:30:32:6e:5d:42:a5:d4:8c:c3:02:65:
                    00:0c:c4:68:cb:35:76:e5:cb:e0:29:af:31:7d:4b:
                    fd:3d:61:fd:74:25:30:4f:ed:d0:17:b0:1a:5f:6c:
                    2b:dc:8a:ca:2d:4d:b3:e4:35:91:0b:f1:f7:62:eb:
                    6d:4a:fa:a3:d5:aa:b7:91:ca:44:b0:11:ba:16:dd:
                    e3:6c:47:f3:a7:34:e9:07:8d:97:01:89:60:c1:ec:
                    aa:4e:ad:c8:72:5c:cb:93:36:1f:2e:47:d8:9d:9f:
                    f3:8d:c5:e2:bc:d5:8a:8c:d3:e9:ae:9c:cd:3f:c7:
                    98:21:0f:08:2f:ad:b3:71:ff:ea:0f:0a:b6:34:4c:
                    76:3c:f9:27:c8:79:52:93:28:4a:7e:eb:a2:55:0b:
                    a0:5b:02:d4:39:30:b9:e1:27:78:fa:ce:9c:93:9c:
                    15:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4E:08:E1:A1:AD:25:DA:5D:D1:8A:0E:B0:EC:86:D3:20:C1:66:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/5f900eb5-41ef-3759-be3d-6cfc67e72a04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.132.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:42:22:ee:99:9c:ed:6e:60:cb:99:3d:a9:52:5a:a0:47:6c:
         af:8d:70:92:d6:de:21:8a:d2:a1:74:10:bb:4d:f2:21:06:f0:
         3e:ff:11:4b:fb:d2:04:fa:9a:f7:31:23:bd:d8:01:0f:c5:c5:
         20:c9:7a:6a:c5:d0:99:b6:ec:fd:9b:37:63:c6:d4:b2:10:7e:
         84:a1:a7:07:3a:83:c9:f3:a0:ba:2c:94:54:11:94:74:4c:3b:
         c4:dd:db:e2:7c:42:51:2b:c7:3b:7b:3e:6b:94:a6:13:8e:7e:
         b7:54:ca:a5:85:c5:4e:7a:9a:2d:58:87:80:12:1c:7b:9c:8c:
         f1:3c:b0:53:16:15:13:ea:df:e7:3e:19:da:4b:72:70:58:c8:
         ac:c8:76:05:01:76:f1:a6:1c:0b:6f:5f:9c:c2:ef:4a:d1:83:
         4f:4d:18:5e:3e:a3:a9:91:b1:22:58:aa:a9:08:68:17:be:02:
         db:80:bd:41:64:4a:16:38:4e:c0:e0:1b:bd:1e:03:35:79:a2:
         02:59:78:df:b9:2c:92:c9:1f:f0:74:00:61:78:63:3f:24:e0:
         40:08:f2:c4:2b:78:4e:8a:ca:06:16:b6:cd:d6:ae:5f:5e:36:
         79:c3:ad:fa:76:36:4f:10:3b:a8:1a:78:a0:aa:03:3a:a3:bb:
         cf:07:1e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:17:42 2026 by rpki-client