Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/d4c1ab5e-022b-3fd0-a92b-89b25e5f072c.roa
File:                     d4c1ab5e-022b-3fd0-a92b-89b25e5f072c.roa (raw, json)
Hash identifier:          uZxpN08ll/Weqq1wUso7bV1JLzx6CZZ3zMZZ6baPmE8=
Subject key identifier:   E3:8C:47:6F:C2:0F:8F:F3:33:EC:53:FA:B2:49:3E:59:16:77:E3:CB
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F4328584C8476D2808BF801545B74E100
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/d4c1ab5e-022b-3fd0-a92b-89b25e5f072c.roa
Signing time:             Wed 14 Jan 2026 02:00:31 +0000
ROA not before:           Wed 14 Jan 2026 02:00:31 +0000
ROA not after:            Tue 14 Apr 2026 01:00:31 +0000
asID:                     1273
IP address blocks:        204.188.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:84:76:d2:80:8b:f8:01:54:5b:74:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: Jan 14 02:00:31 2026 GMT
            Not After : Apr 14 01:00:31 2026 GMT
        Subject: CN=6c0990af-343d-4ba2-b2c9-3a2742ef5fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a5:e8:6f:07:e4:15:a6:06:0a:58:37:0d:42:
                    7a:45:89:39:d0:99:22:22:53:ff:31:ea:b7:76:77:
                    31:31:a1:29:fc:81:88:f5:af:78:46:fa:00:74:d5:
                    87:f8:bd:ba:ff:b6:9b:d8:2a:45:ff:33:ec:3a:ac:
                    a8:77:75:f4:ff:cd:09:7c:7a:9f:2f:90:1d:48:ea:
                    02:d8:88:3a:24:6d:6c:e1:46:43:20:e1:0e:41:72:
                    81:56:a4:d7:74:e8:8a:bc:5b:dd:ba:7a:74:95:dc:
                    b1:18:08:7b:4e:9f:26:b8:e1:a8:88:3e:8b:e5:b3:
                    73:17:2a:e8:67:76:ce:31:25:3b:f9:75:c8:b9:54:
                    7c:39:44:ab:c5:e2:57:6f:06:ee:ce:5e:77:12:3e:
                    71:24:61:24:22:82:84:94:ad:c1:75:95:d5:1f:8a:
                    ea:35:8d:2e:2a:be:d1:b1:10:76:06:2a:2a:81:2e:
                    98:8b:c2:7b:4c:91:5e:52:33:a4:9c:c1:3f:a6:c4:
                    eb:59:59:22:6b:cd:18:b4:a3:7e:3b:a4:9c:03:4f:
                    97:da:49:c1:06:6e:95:22:b4:0e:59:ae:97:5d:aa:
                    41:fe:d1:45:56:4a:af:fc:b7:cc:61:e7:0b:c0:bd:
                    51:89:a9:fd:ab:3e:9b:61:d8:f6:6c:dc:d0:0a:5c:
                    c3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8C:47:6F:C2:0F:8F:F3:33:EC:53:FA:B2:49:3E:59:16:77:E3:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/d4c1ab5e-022b-3fd0-a92b-89b25e5f072c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.188.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:71:f2:d4:14:b6:45:14:63:c9:32:00:bc:a1:5c:0f:da:89:
         d5:a9:97:37:5f:12:46:fd:f8:f1:76:f6:15:4c:fc:5b:b8:09:
         df:5c:31:88:c9:ae:3d:e3:9d:12:c8:4d:0e:15:97:01:c8:14:
         7c:23:28:b3:a2:9a:90:8b:44:da:de:c1:e3:1b:6e:aa:b1:f2:
         ba:6a:57:da:3e:c1:35:55:7e:6a:0b:04:c1:41:90:71:c7:4e:
         df:c5:59:c1:61:8a:db:d2:bf:0f:8c:54:26:ef:79:0c:e9:3f:
         b7:db:58:ae:0d:b9:19:71:bd:78:68:f1:14:b2:8b:52:65:15:
         cd:0f:2d:1c:c8:0d:c9:32:76:ef:dc:d9:f2:ec:c9:b8:c4:5e:
         3f:62:56:1e:3c:b0:0e:12:c2:df:ff:9c:4e:5e:3c:38:da:7d:
         99:10:c9:a6:5c:0f:96:63:f9:b7:65:18:87:15:27:cd:73:49:
         1e:43:60:24:78:66:6e:f2:09:b6:d2:e5:1a:18:46:29:52:d7:
         b9:24:50:5a:fa:64:c7:46:21:36:5f:09:f0:20:5a:22:3a:a8:
         73:19:9d:1d:fb:e8:0c:2b:4d:a1:c3:90:97:12:ac:d7:3c:c1:
         93:ce:db:74:f6:bc:98:07:0d:dd:9f:dc:48:4f:cf:fb:f4:ec:
         7a:20:73:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:21:58 2026 by rpki-client