Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/94a2875f-a39b-3088-a9de-af1c7a12722a.roa
File:                     94a2875f-a39b-3088-a9de-af1c7a12722a.roa (raw, json)
Hash identifier:          YH6Dgjfzqm2fAGnoKpK3xCu4OzT9lILSZaJP60ZzCrY=
Subject key identifier:   20:50:91:65:2B:CF:92:6E:B4:A3:87:C7:D5:83:26:26:C4:6B:8D:97
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F4328584D8EF582806A9908E401E54F80
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/94a2875f-a39b-3088-a9de-af1c7a12722a.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     1273
IP address blocks:        216.239.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:82:80:6a:99:08:e4:01:e5:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=2837b2ea-315f-499e-a900-78acd2496e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:14:28:b6:30:02:ea:56:99:e3:a3:99:af:18:
                    61:74:9b:bb:fa:4a:50:cc:94:89:e5:0a:27:9c:02:
                    0a:2d:15:f8:cc:78:5c:4f:a2:d8:3d:dd:8a:cb:d1:
                    1c:97:b6:23:62:1f:90:c2:62:77:06:d4:f9:0e:3b:
                    54:c4:69:35:5d:d7:37:43:8c:38:4d:2e:7b:62:9d:
                    3d:58:6a:a4:d1:19:a7:55:2e:55:0f:5e:e1:1a:15:
                    ef:d5:68:e5:27:fa:14:74:bb:dd:13:90:57:93:4f:
                    1a:f4:de:6d:b6:31:80:62:e7:e4:a8:23:27:29:09:
                    5d:56:ce:5d:e6:52:8c:d1:9c:43:88:62:6f:14:0a:
                    6f:5a:38:6c:1f:57:ee:b2:5b:5b:9d:9a:21:6f:40:
                    e1:9e:66:f2:2f:6b:62:c8:77:df:14:55:ff:12:28:
                    e8:70:96:a6:be:67:a5:e8:c4:21:4e:dc:58:3e:93:
                    90:a8:a5:1f:99:a0:9f:df:69:55:d8:a2:e7:09:70:
                    b7:02:62:bf:34:12:14:94:94:17:87:2f:ed:ce:db:
                    1f:d5:cc:34:de:8f:61:0d:26:12:c8:91:1f:28:06:
                    a0:93:a8:c4:66:5d:8e:b2:2c:60:d2:2a:2d:7d:3a:
                    e2:35:1a:3e:44:39:bb:af:90:9b:a0:de:74:c3:19:
                    f9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:50:91:65:2B:CF:92:6E:B4:A3:87:C7:D5:83:26:26:C4:6B:8D:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/94a2875f-a39b-3088-a9de-af1c7a12722a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.239.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:00:a2:59:02:2d:61:5d:22:26:72:85:16:29:a8:b2:01:37:
         41:79:ef:e8:69:b2:59:d2:b0:70:90:bf:de:71:7b:6d:fb:60:
         4a:31:08:9c:d3:cd:90:bb:7f:c0:64:ea:5d:0d:a7:d6:1a:ab:
         ed:3a:98:c5:e9:81:12:97:ce:f8:a1:6c:65:6c:ed:93:ea:62:
         aa:20:99:b5:e6:80:c8:1a:03:e1:ca:5e:2f:a8:96:85:b4:3d:
         82:04:2c:fd:50:94:b6:0f:d9:bd:18:2e:41:d3:52:d9:a1:2e:
         9e:0b:01:db:ed:aa:12:83:22:49:28:e3:9b:3c:d4:b5:d7:67:
         72:08:e0:1c:91:28:75:da:e2:89:bd:01:aa:b5:f4:d9:5e:da:
         f0:b9:90:54:81:92:23:9f:83:c5:a1:9d:52:4a:a4:76:10:a7:
         15:54:09:d5:65:a9:61:1b:c0:fe:52:d6:60:e7:0a:b5:d5:8b:
         be:52:ab:e5:01:2a:91:f2:14:15:05:bb:33:82:e6:1a:4f:b6:
         cc:87:75:46:a3:7e:9e:84:f5:4e:1a:9c:79:01:3d:92:97:b2:
         98:25:c4:52:54:40:07:4f:bc:b9:c3:a2:fa:f2:cd:ed:c9:01:
         81:25:54:0c:44:1c:36:5a:bf:0b:c4:15:60:bc:6c:51:ae:50:
         e9:cf:41:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:21:10 2026 by rpki-client