Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/c424ffca-8608-3f6f-8ce3-25f13376cd72.roa
File:                     c424ffca-8608-3f6f-8ce3-25f13376cd72.roa (raw, json)
Hash identifier:          Iq2ih0e22slELmONWT4nQXmRmbpupp4uYyKpTGEIPE0=
Subject key identifier:   BB:86:69:0F:F7:1E:42:1A:5F:80:34:EB:6D:21:0E:FD:07:ED:76:F4
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F4328584C8476C31F4042AF5A28B88840
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/c424ffca-8608-3f6f-8ce3-25f13376cd72.roa
Signing time:             Wed 14 Jan 2026 02:00:31 +0000
ROA not before:           Wed 14 Jan 2026 02:00:31 +0000
ROA not after:            Tue 14 Apr 2026 01:00:31 +0000
asID:                     1273
IP address blocks:        208.175.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:84:76:c3:1f:40:42:af:5a:28:b8:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: Jan 14 02:00:31 2026 GMT
            Not After : Apr 14 01:00:31 2026 GMT
        Subject: CN=7c9e7341-7e16-4fed-9f9d-c3fd1adc7ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3e:9d:7f:61:d9:a5:35:84:5d:04:e4:a5:d0:
                    f0:4a:09:e8:54:51:21:d3:f8:a6:8e:b3:0a:1e:aa:
                    c6:72:bc:8f:f3:e6:a4:9d:0c:0b:03:78:98:35:1f:
                    8f:0a:ef:bc:fb:18:83:58:bf:e2:52:c1:48:9f:c0:
                    57:d9:e3:24:f1:c4:42:0f:0c:a3:a8:ba:0c:a2:4f:
                    b1:b6:a4:51:87:b1:3e:bf:9d:18:a1:63:88:7c:68:
                    f3:55:d1:0a:05:84:d1:71:8a:eb:1a:a7:bc:bb:60:
                    cd:b2:a2:68:a6:37:9a:30:5b:37:02:b2:cf:33:7c:
                    47:0e:47:d5:6b:61:1f:20:35:f3:63:9a:17:35:5d:
                    98:f8:58:ec:1c:1c:e4:86:e6:86:31:73:c9:91:dc:
                    c1:06:02:9b:dd:41:a8:ae:be:42:49:f4:53:6c:5b:
                    12:ad:62:38:8d:ef:c7:9e:9a:14:79:21:0b:12:53:
                    22:ab:d1:b2:ab:99:a6:25:8b:76:ae:c4:be:fb:d2:
                    12:56:89:75:e1:84:c0:c9:8a:38:7b:b2:0e:6c:40:
                    ab:9b:d9:d3:80:93:40:4d:e0:30:3b:11:ba:a0:73:
                    5c:08:7a:b1:3e:bd:eb:83:66:11:43:a1:1e:69:67:
                    ee:ad:e1:21:b3:6b:5d:6f:8d:7a:22:a7:8f:ab:0c:
                    b2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:86:69:0F:F7:1E:42:1A:5F:80:34:EB:6D:21:0E:FD:07:ED:76:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/c424ffca-8608-3f6f-8ce3-25f13376cd72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.175.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:47:9f:e4:3e:18:4d:d7:5c:63:0e:db:02:7d:a8:61:6d:d7:
         66:b9:37:3c:1c:ea:09:87:cc:23:f1:16:fc:ce:33:23:a0:86:
         d0:08:f8:ef:24:95:af:a4:44:1d:98:cc:ec:85:d8:2e:ea:7c:
         40:83:b5:8f:41:9e:17:32:37:8f:51:0d:c7:3d:7a:e7:2d:4e:
         70:d4:db:2c:e6:82:5d:15:d1:4c:ba:16:21:05:32:54:bd:29:
         ba:00:b1:1f:5f:62:96:20:e4:5b:54:0f:1a:21:e7:f3:a2:8a:
         25:f1:da:1c:42:0e:57:d5:e9:73:95:ab:58:d1:ab:a6:d3:ae:
         3e:21:d6:62:53:b9:a6:40:78:d6:12:56:56:4b:66:b5:05:0e:
         98:02:ff:99:e8:c9:85:ca:1b:0b:e8:25:2d:d2:32:c1:6a:a0:
         42:bc:09:dd:e9:1b:58:5f:83:50:6e:fc:43:6c:3d:28:eb:d6:
         7c:a1:b7:6a:3b:75:67:bc:42:24:42:0d:1e:68:77:3a:7c:15:
         b4:86:0c:4f:4d:4d:ac:04:36:d5:b3:db:80:58:66:d2:b5:d2:
         1a:28:77:0a:f1:e6:c2:64:80:0f:03:26:25:e7:7c:16:86:17:
         7b:cb:ea:85:a4:66:ea:ed:16:3a:1d:e0:83:95:17:9c:cd:35:
         af:73:b2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:16 2026 by rpki-client