Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/94a2875f-a39b-3088-a9de-af1c7a12722a.roa
File:                     94a2875f-a39b-3088-a9de-af1c7a12722a.roa (raw, json)
Hash identifier:          w1CmQRMndSKVtLVvf7LMQDb/FsZ8Iv+e+G5Y0tlJqzI=
Subject key identifier:   24:95:3B:84:85:28:2B:48:DA:8A:ED:11:A4:02:7E:32:0E:0D:19:FC
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F4328584CAE57368DEFE797DB10BCD700
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/94a2875f-a39b-3088-a9de-af1c7a12722a.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     1273
IP address blocks:        216.239.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:36:8d:ef:e7:97:db:10:bc:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=a0e30678-5569-420d-b130-a755dffa2bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:63:59:cd:2f:fe:2e:cf:cc:a8:d9:38:62:d7:
                    fc:09:83:4f:40:ab:0e:00:2d:aa:b5:dc:d6:1f:a0:
                    d8:e2:75:99:33:3f:fb:ec:7f:1f:5a:37:55:1e:94:
                    8c:cf:e0:fe:30:b1:d6:15:00:a7:e8:56:ca:f2:c2:
                    75:57:2f:87:fc:93:e2:2b:b9:6b:9d:73:41:d4:e8:
                    91:d3:56:d2:d1:f1:63:3c:a2:f0:c6:af:d4:c0:5e:
                    14:ab:70:ab:da:07:35:f7:b4:e9:fb:bf:dc:88:5d:
                    e2:70:d4:ee:c7:4e:43:56:25:3a:b9:90:84:a3:87:
                    88:8c:ae:0c:7d:7a:b8:96:66:da:b8:ef:16:db:6c:
                    0a:06:35:18:37:b5:b6:14:2c:2d:73:84:43:e1:fd:
                    76:9d:d3:d3:6c:45:f6:06:15:1d:d6:74:c3:d0:54:
                    a7:a2:0b:a6:fb:33:f0:27:a5:12:e2:7e:2f:39:68:
                    1b:93:4c:36:30:c7:74:0c:19:96:1a:9e:39:1c:94:
                    28:3b:6f:2a:28:87:10:5a:26:ae:d0:cc:78:0a:9a:
                    a1:fd:2b:3b:73:81:f6:12:a2:00:8a:27:3e:39:74:
                    46:9a:06:a0:a4:36:bb:a6:65:51:89:8d:93:df:52:
                    ce:ab:c8:41:0a:7f:0c:0d:b0:ed:a1:c9:a4:d0:67:
                    ba:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:95:3B:84:85:28:2B:48:DA:8A:ED:11:A4:02:7E:32:0E:0D:19:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/94a2875f-a39b-3088-a9de-af1c7a12722a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.239.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:60:28:6e:0b:6f:c4:ed:8f:4c:ba:1c:b3:87:f3:ac:5b:d1:
         18:08:9f:7c:b9:9a:3c:2c:7b:39:5f:65:b6:b1:1a:40:34:d5:
         80:42:b1:43:80:5d:28:2c:ca:4e:7f:0e:dc:3f:40:57:da:65:
         8b:93:39:b6:0f:7a:2c:59:3f:e6:75:3a:1e:8a:45:98:9c:94:
         79:59:c4:38:64:5c:52:40:a7:e2:9c:fe:43:b8:4f:17:c1:e2:
         cc:0d:06:ff:25:c7:b7:03:b0:a3:68:ee:c1:cf:14:3f:15:94:
         fd:c1:9c:47:8c:1e:a1:03:47:f5:d1:32:2a:2c:7d:42:9e:ee:
         2e:f8:8b:75:b6:ee:ef:39:43:7b:5b:9d:26:4f:80:37:38:f1:
         14:ac:6a:68:b1:c5:f4:6b:e7:75:79:6b:51:f1:ac:8e:aa:2b:
         37:a8:ee:b1:fc:a3:56:62:63:6c:2a:92:a0:46:7c:95:f2:83:
         e1:bf:5e:17:d1:d9:60:f8:5d:4e:7d:e9:9b:19:68:e0:49:f5:
         bb:32:45:2d:f1:ed:45:cb:0d:af:f5:e0:01:22:b4:9c:3f:24:
         fa:d1:76:de:d3:69:68:16:c7:67:cc:f2:fa:5b:13:c6:15:81:
         ac:6d:a3:04:34:51:e0:35:76:c0:98:0a:32:b4:11:d9:69:81:
         37:bd:e8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:01:23 2026 by rpki-client