Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/2140c9b1-330e-3461-bffa-e180266e388d.roa
File:                     2140c9b1-330e-3461-bffa-e180266e388d.roa (raw, json)
Hash identifier:          +LJBD1rUiBuW9aabWe/1HDjt+e/Z9JJoetj6o2zhiNc=
Subject key identifier:   AA:63:8D:70:D4:D1:B2:DC:3C:56:A4:55:53:C7:93:F8:A8:3E:4A:3E
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F4328584D65150AC90A74BB4846126A70
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/2140c9b1-330e-3461-bffa-e180266e388d.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     1273
IP address blocks:        206.28.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:0a:c9:0a:74:bb:48:46:12:6a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=0ef62464-6cc6-463f-9d8e-18ab9bb3d273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:2d:1a:a8:aa:c1:b9:ab:99:9a:d3:b6:c9:69:
                    ef:a3:10:67:ca:0e:bd:fd:d7:99:0f:de:e2:af:05:
                    9e:56:e6:c3:cd:cd:5a:72:f9:41:76:2f:b0:9d:57:
                    6d:cc:32:b4:5a:a3:c4:b1:56:be:6b:f3:fe:9e:a5:
                    c3:f2:1e:c2:5a:2a:47:3e:4c:2b:96:7f:d4:7e:6e:
                    2d:cd:f8:f3:8a:d7:94:5b:fe:eb:3b:4b:16:bc:7c:
                    cd:56:09:c2:2b:54:7b:9d:c8:56:da:a0:ad:28:20:
                    aa:0e:66:3d:61:31:f2:f3:16:23:d6:6a:74:52:cc:
                    e4:bd:1d:81:72:c9:1b:48:c9:7f:19:55:d5:bf:61:
                    c2:3f:0c:60:e5:78:f5:9c:51:27:74:05:70:f5:dc:
                    46:ec:52:f0:38:52:ef:05:aa:b4:31:65:7e:98:6d:
                    bc:77:2a:22:d1:9d:48:26:9a:bc:39:56:8a:50:65:
                    74:55:3f:f9:74:44:ec:85:1a:14:1e:c6:e4:e8:10:
                    39:64:c8:34:d2:95:42:9f:cd:a2:35:34:ac:f0:69:
                    44:3a:37:e5:72:39:80:a1:a5:82:c2:4b:be:fb:0f:
                    e0:8a:26:64:55:0e:b4:83:b1:c5:a2:96:5b:26:6f:
                    61:44:dd:61:33:74:3c:24:d2:ed:08:e2:5e:92:3a:
                    76:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:63:8D:70:D4:D1:B2:DC:3C:56:A4:55:53:C7:93:F8:A8:3E:4A:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/2140c9b1-330e-3461-bffa-e180266e388d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.28.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:e4:a3:b9:c2:a5:59:19:d6:9e:12:3e:fc:65:a4:32:c8:22:
         ad:c6:1d:9d:8b:31:c4:00:07:b2:bc:1a:f3:15:2a:81:48:18:
         96:7c:4e:3d:c3:14:57:72:e4:92:b3:13:95:e7:42:03:ac:2c:
         1a:d1:78:df:8a:12:ef:ed:e5:7c:65:01:00:f4:02:a9:c4:ca:
         9a:fc:5e:79:b0:80:b9:bb:68:2f:b5:4f:44:21:e5:be:b5:be:
         47:53:9d:3a:c6:33:6f:fc:ac:d3:eb:b9:9d:95:a4:73:09:23:
         97:6f:e1:0d:98:78:a1:5f:2d:1e:d3:c0:28:6e:fd:f0:74:2c:
         62:d1:83:6a:eb:95:b9:7c:c1:47:15:8b:dd:19:a0:50:ad:0d:
         ef:16:28:93:eb:04:66:95:ba:6e:31:aa:4d:46:1c:6c:f8:2f:
         71:43:4e:7c:2f:cb:79:cd:61:13:a0:26:cd:11:00:b4:98:38:
         09:95:5e:41:c9:43:f0:03:60:ea:3b:9d:54:43:0c:15:ae:61:
         6d:ad:2c:30:ba:c1:d7:b3:56:1a:7e:7c:f8:9b:db:48:00:08:
         87:c9:39:76:bb:cd:07:66:44:d7:d6:09:0b:70:74:3b:f7:14:
         03:0d:bd:01:41:c5:6a:fb:12:9b:6d:e4:34:35:ce:0c:b7:19:
         2c:f5:77:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:23:48 2026 by rpki-client