Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/5e09b4be-660c-32d7-905a-93080ed41e33.roa
File:                     5e09b4be-660c-32d7-905a-93080ed41e33.roa (raw, json)
Hash identifier:          PyHz3bMj47w7u6Ik3JPK+Bzn/fowUu2Y38Ucyrq5w0Q=
Subject key identifier:   6C:7D:BD:94:BA:25:76:99:20:33:12:EB:D2:3D:47:EE:00:AC:7C:DC
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F4328584C8476D26F2E5B09EEB626FF00
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/5e09b4be-660c-32d7-905a-93080ed41e33.roa
Signing time:             Wed 14 Jan 2026 02:00:31 +0000
ROA not before:           Wed 14 Jan 2026 02:00:31 +0000
ROA not after:            Tue 14 Apr 2026 01:00:31 +0000
asID:                     1273
IP address blocks:        206.128.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:84:76:d2:6f:2e:5b:09:ee:b6:26:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: Jan 14 02:00:31 2026 GMT
            Not After : Apr 14 01:00:31 2026 GMT
        Subject: CN=39bd08c6-feee-4b9f-9ba3-5c9aab791bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7f:c2:dd:68:05:9f:22:8d:2e:46:d1:71:b0:
                    17:e0:0a:e2:54:ab:12:2b:91:9c:e5:7d:f1:ff:e2:
                    50:a3:9e:c8:bf:da:2e:86:71:16:21:74:e1:46:eb:
                    50:71:f3:f6:de:fd:72:52:3b:d9:ef:91:52:db:8f:
                    84:e0:fd:22:8f:4c:3d:17:bc:e2:f0:a1:8e:8e:66:
                    14:96:0a:36:d1:93:b9:7d:25:19:d3:48:0d:2f:f0:
                    ce:2f:df:52:08:eb:79:c3:18:70:05:2e:f2:56:77:
                    5a:9c:9a:ff:42:1b:46:99:2d:0e:f7:b9:2d:20:d5:
                    ea:07:c4:68:b0:55:97:09:cf:7d:6c:7f:ca:bc:c3:
                    e5:9a:ba:6c:d0:08:96:59:c6:54:ee:b5:06:a6:24:
                    d7:39:7d:02:f9:df:3c:26:a5:ee:41:65:d6:2a:b0:
                    1d:47:cd:a3:9a:25:9b:41:01:c3:80:9e:35:bf:55:
                    ea:9f:f0:a2:9a:4c:c0:65:30:10:6d:a9:19:18:db:
                    a0:eb:d6:6b:73:af:4f:35:9a:3f:9e:e8:21:b0:53:
                    35:14:9e:7c:41:17:34:2f:ef:0e:de:64:16:99:14:
                    b0:ed:f0:b9:4a:5e:c8:f8:07:52:dc:2f:cd:b1:62:
                    40:70:95:23:06:32:18:d4:3b:0a:27:14:f8:70:10:
                    a4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7D:BD:94:BA:25:76:99:20:33:12:EB:D2:3D:47:EE:00:AC:7C:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/5e09b4be-660c-32d7-905a-93080ed41e33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.128.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:1e:79:ed:01:3a:fb:81:b1:88:6b:ed:83:e3:ee:51:4a:3b:
         1c:f2:43:68:ca:1b:db:8f:23:0f:79:08:96:0a:0d:a8:12:a1:
         03:7e:ed:ff:f3:55:ed:c4:bc:bb:1d:f8:ce:42:aa:19:f5:41:
         88:23:46:b3:fe:2e:bb:8c:92:e4:f9:6a:78:c5:f7:48:59:17:
         99:00:0a:07:43:c9:e7:94:30:06:bc:a5:8c:da:04:bd:4f:47:
         a6:b9:4c:f8:b1:89:ad:b9:b8:8d:1f:fc:f9:b6:4b:0e:1b:9b:
         be:e4:75:e1:e2:e6:eb:10:b5:4d:22:79:ee:ab:28:fb:0b:1a:
         34:0c:66:c6:c7:4d:19:27:3c:67:5b:7b:eb:c2:a9:36:1a:47:
         15:fe:56:db:a7:dd:14:f3:01:69:fa:4d:ee:ed:cb:bb:d0:cc:
         09:ff:52:7a:b3:d5:d2:5e:ce:f9:9f:37:aa:4b:61:52:43:49:
         11:58:85:b0:e0:ac:7e:36:30:46:1d:02:0d:0a:83:19:bf:d8:
         76:53:0f:a7:13:79:5f:5d:9c:5a:37:13:53:3a:2d:b3:22:9f:
         54:28:b6:07:43:57:d0:ba:86:6d:9e:e4:a8:1c:2e:b1:ad:4d:
         19:be:e9:78:4d:b7:db:df:bf:47:a1:7b:61:02:5f:dd:04:14:
         6e:f6:db:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdtJvLlsJ7rYm/wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWMyZDM4NzYtMjllNi00MmY1LWI3NmYtMjNiYjQ4YmE4
NTgyMB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk
MzliZDA4YzYtZmVlZS00YjlmLTliYTMtNWM5YWFiNzkxYmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4n/C3WgFnyKNLkbRcbAX4AriVKsSK5Gc5X3x
/+JQo57Iv9ouhnEWIXThRutQcfP23v1yUjvZ75FS24+E4P0ij0w9F7zi8KGOjmYU
lgo20ZO5fSUZ00gNL/DOL99SCOt5wxhwBS7yVndanJr/QhtGmS0O97ktINXqB8Ro
sFWXCc99bH/KvMPlmrps0AiWWcZU7rUGpiTXOX0C+d88JqXuQWXWKrAdR82jmiWb
QQHDgJ41v1Xqn/CimkzAZTAQbakZGNug69Zrc69PNZo/nughsFM1FJ58QRc0L+8O
3mQWmRSw7fC5Sl7I+AdS3C/NsWJAcJUjBjIY1DsKJxT4cBCkkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGx9vZS6JXaZIDMS69I9R+4ArHzcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJk
Mzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2JiNDhiYTg1ODIvNWUwOWI0YmUtNjYwYy0z
MmQ3LTkwNWEtOTMwODBlZDQxZTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWMyZDM4NzYtMjllNi00MmY1LWI3
NmYtMjNiYjQ4YmE4NTgyL2FjMmQzODc2LTI5ZTYtNDJmNS1iNzZmLTIzYmI0OGJh
ODU4Mi5jcmwwHwYDVR0jBBgwFoAUDEkkReUZkCywPx/BY7zBtY7YpJ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJkMzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2Ji
NDhiYTg1ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzoDAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADEeee0BOvuBsYhr7YPj7lFKOxzyQ2jKG9uPIw95CJYKDagSoQN+7f/z
Ve3EvLsd+M5Cqhn1QYgjRrP+LruMkuT5anjF90hZF5kACgdDyeeUMAa8pYzaBL1P
R6a5TPixia25uI0f/Pm2Sw4bm77kdeHi5usQtU0iee6rKPsLGjQMZsbHTRknPGdb
e+vCqTYaRxX+Vtun3RTzAWn6Te7ty7vQzAn/Unqz1dJezvmfN6pLYVJDSRFYhbDg
rH42MEYdAg0Kgxm/2HZTD6cTeV9dnFo3E1M6LbMin1QotgdDV9C6hm2e5KgcLrGt
TRm+6XhNt9vfv0ehe2ECX90EFG722/M=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:32:46 2026 by rpki-client