Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/e75eab59-98aa-36fe-9341-5359baa34cf5.roa
File:                     e75eab59-98aa-36fe-9341-5359baa34cf5.roa (raw, json)
Hash identifier:          0cO3AnlYzslBkIAlV4c3RpXGd4LClI3dhGhMGAuc/UE=
Subject key identifier:   67:2D:7A:E9:D5:F7:C7:B3:12:0A:9E:CB:F9:10:2C:C5:DD:12:30:D6
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F4328584C8476D2A56123FBC3D1941D00
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/e75eab59-98aa-36fe-9341-5359baa34cf5.roa
Signing time:             Wed 14 Jan 2026 02:00:31 +0000
ROA not before:           Wed 14 Jan 2026 02:00:31 +0000
ROA not after:            Tue 14 Apr 2026 01:00:31 +0000
asID:                     1273
IP address blocks:        208.173.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:84:76:d2:a5:61:23:fb:c3:d1:94:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: Jan 14 02:00:31 2026 GMT
            Not After : Apr 14 01:00:31 2026 GMT
        Subject: CN=e8d246a9-c113-4a3d-b2bb-7d5ea01a0e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e1:d5:02:c9:9b:38:b9:69:4c:d0:bf:f8:26:
                    44:98:82:b3:be:f2:c6:c7:a4:00:0f:e8:b7:23:8a:
                    05:55:3c:7c:a0:d0:ec:05:e1:57:8a:f0:4b:c1:54:
                    97:c3:76:8b:5a:ca:05:3d:b0:e0:03:24:da:a8:41:
                    96:5a:3a:30:87:cd:7e:3c:d1:74:b3:f2:8b:5d:c2:
                    c3:eb:70:c1:fb:f4:b3:e5:0b:39:3c:b9:7c:37:7e:
                    d9:00:12:2b:36:25:84:12:78:16:0c:1f:03:fd:40:
                    5a:39:19:75:71:79:21:5c:26:5c:af:89:e2:0b:f1:
                    ab:2c:ac:e7:5a:29:e2:cc:14:cf:b9:a9:19:a6:0e:
                    9d:2e:15:4e:f4:50:25:a6:7b:99:23:ff:db:a7:9b:
                    08:dd:d5:c4:d6:1a:50:13:83:3a:60:f8:83:88:06:
                    ed:93:d8:70:2b:5a:98:14:0b:fd:79:bb:03:95:c3:
                    5a:8e:81:1c:6d:7b:4b:b2:2d:1f:86:72:07:3a:f2:
                    c7:ca:b0:07:91:5d:26:cb:66:17:c2:37:13:6c:1b:
                    43:ff:0a:4a:fd:a7:5f:f7:0c:36:40:84:7e:5e:b6:
                    b2:c9:61:ec:7a:f0:76:eb:2a:44:92:96:70:bc:80:
                    78:06:49:2c:5c:0f:16:21:93:4d:48:96:7d:f9:f4:
                    b9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2D:7A:E9:D5:F7:C7:B3:12:0A:9E:CB:F9:10:2C:C5:DD:12:30:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/e75eab59-98aa-36fe-9341-5359baa34cf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.173.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:64:06:d2:9b:fa:13:8a:35:c8:6d:8d:aa:44:3d:26:3e:81:
         8d:64:c3:0d:87:c9:7e:43:eb:59:ba:89:52:d6:8a:d0:ef:a9:
         1b:3d:4f:23:f2:7e:c7:ec:72:79:bc:9c:7b:f9:1c:76:55:b9:
         1d:63:c8:d0:1a:c5:93:6a:23:3f:9a:97:8c:b2:10:85:a7:36:
         a3:ac:81:c8:f5:dd:62:27:c2:c1:c5:57:fc:1d:88:0d:a7:09:
         59:34:f9:18:11:b2:df:4c:f8:4c:12:5a:ea:cf:fc:0e:12:1f:
         6f:24:06:53:62:59:9e:1f:ae:f7:48:5f:de:49:0d:bf:9a:ed:
         97:e1:95:3f:68:65:71:90:f9:73:a2:07:dd:a8:69:51:25:d1:
         69:ab:5f:25:87:4a:e0:7f:7f:f4:2f:ba:4d:5e:da:63:ca:4e:
         8a:0b:f1:a6:45:c1:6a:ee:75:c7:70:19:81:fa:7d:02:a1:e9:
         c6:40:18:d0:ab:01:f4:90:73:18:bc:b6:ba:21:60:c9:83:4e:
         b2:1a:51:04:e0:55:cb:cd:af:c1:61:38:83:22:6f:98:3e:21:
         48:2c:b8:04:ff:59:c8:74:2d:ae:2c:d6:40:82:f9:da:d2:e9:
         53:fa:dc:7d:50:f7:a4:ef:58:e4:8a:d8:53:d0:ef:cc:70:76:
         0c:19:bb:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdtKlYSP7w9GUHQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWMyZDM4NzYtMjllNi00MmY1LWI3NmYtMjNiYjQ4YmE4
NTgyMB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk
ZThkMjQ2YTktYzExMy00YTNkLWIyYmItN2Q1ZWEwMWEwZTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+HVAsmbOLlpTNC/+CZEmIKzvvLGx6QAD+i3
I4oFVTx8oNDsBeFXivBLwVSXw3aLWsoFPbDgAyTaqEGWWjowh81+PNF0s/KLXcLD
63DB+/Sz5Qs5PLl8N37ZABIrNiWEEngWDB8D/UBaORl1cXkhXCZcr4niC/GrLKzn
WinizBTPuakZpg6dLhVO9FAlpnuZI//bp5sI3dXE1hpQE4M6YPiDiAbtk9hwK1qY
FAv9ebsDlcNajoEcbXtLsi0fhnIHOvLHyrAHkV0my2YXwjcTbBtD/wpK/adf9ww2
QIR+XrayyWHsevB26ypEkpZwvIB4BkksXA8WIZNNSJZ9+fS5QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGcteunV98ezEgqey/kQLMXdEjDWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJk
Mzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2JiNDhiYTg1ODIvZTc1ZWFiNTktOThhYS0z
NmZlLTkzNDEtNTM1OWJhYTM0Y2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWMyZDM4NzYtMjllNi00MmY1LWI3
NmYtMjNiYjQ4YmE4NTgyL2FjMmQzODc2LTI5ZTYtNDJmNS1iNzZmLTIzYmI0OGJh
ODU4Mi5jcmwwHwYDVR0jBBgwFoAUDEkkReUZkCywPx/BY7zBtY7YpJ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJkMzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2Ji
NDhiYTg1ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0K3AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC5kBtKb+hOKNchtjapEPSY+gY1kww2HyX5D61m6iVLWitDvqRs9TyPy
fsfscnm8nHv5HHZVuR1jyNAaxZNqIz+al4yyEIWnNqOsgcj13WInwsHFV/wdiA2n
CVk0+RgRst9M+EwSWurP/A4SH28kBlNiWZ4frvdIX95JDb+a7ZfhlT9oZXGQ+XOi
B92oaVEl0WmrXyWHSuB/f/Qvuk1e2mPKTooL8aZFwWrudcdwGYH6fQKh6cZAGNCr
AfSQcxi8trohYMmDTrIaUQTgVcvNr8FhOIMib5g+IUgsuAT/Wch0La4s1kCC+drS
6VP63H1Q96TvWOSK2FPQ78xwdgwZu0Y=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:52 2026 by rpki-client