Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/6ef4f7b1-9dcb-39b5-9659-b2039a08fdc2.roa
File:                     6ef4f7b1-9dcb-39b5-9659-b2039a08fdc2.roa (raw, json)
Hash identifier:          8fcKQu6UNig2Iki1EhBIwaJUtNsYvwR5XkEltNUvFz8=
Subject key identifier:   F0:59:BE:0F:67:62:76:D4:22:7C:9E:1C:9D:8C:FF:27:11:C1:23:8E
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584F067244319743A3DE1D9B8E80
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/6ef4f7b1-9dcb-39b5-9659-b2039a08fdc2.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     3561
IP address blocks:        209.176.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:44:31:97:43:a3:de:1d:9b:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=afb0c9cc-a0a0-4940-b907-fb08a880c6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d2:b8:e8:96:49:93:96:67:b4:c7:ef:39:4b:
                    f3:b1:61:0e:8b:f3:fe:48:28:0a:cc:0b:bc:c6:19:
                    ff:24:26:47:59:93:ad:f1:e2:3e:19:f0:96:95:ef:
                    a1:a4:18:18:5c:92:0b:33:80:71:32:49:0e:8f:74:
                    da:bb:41:0f:7a:78:fb:8f:b1:05:22:49:d4:e9:6c:
                    81:d9:a0:5d:63:d5:c3:e7:9d:89:d1:c0:73:0f:33:
                    36:32:e7:23:8a:d9:d1:95:cc:be:11:d0:27:8e:b9:
                    23:aa:03:e8:13:96:55:fe:3b:34:2a:3c:a0:54:da:
                    d7:31:af:ff:0f:c3:cf:2b:e1:38:47:f4:d4:cb:b8:
                    c9:49:13:b0:36:11:76:89:de:64:ce:2a:f2:0a:fb:
                    25:f4:d0:e3:67:ec:52:e5:58:ec:2d:dc:88:d3:2d:
                    51:91:dc:3d:ed:3c:eb:d3:8e:8e:c0:a9:c7:f6:a0:
                    27:fa:30:4a:56:93:17:00:d0:c3:96:c1:a6:b8:a6:
                    0a:e2:06:cf:48:f5:64:13:46:30:0d:ef:59:73:75:
                    79:99:a6:25:f5:c6:17:88:1a:d7:b8:e3:9b:64:c9:
                    24:ae:b3:38:f0:e6:0f:59:f4:47:e7:7d:bd:51:ed:
                    c7:43:06:3e:8e:7d:27:59:d2:38:57:e0:8d:ef:9c:
                    13:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:59:BE:0F:67:62:76:D4:22:7C:9E:1C:9D:8C:FF:27:11:C1:23:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/6ef4f7b1-9dcb-39b5-9659-b2039a08fdc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.176.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:20:e4:63:8a:d1:42:fe:4b:35:d9:c2:b5:8e:16:6b:a6:ce:
         0c:1c:e5:c1:b2:c1:33:9b:16:a8:fd:26:4c:ff:d0:69:8c:24:
         1c:0c:03:ea:12:3f:e1:e3:21:b1:56:6e:a1:a7:d8:9c:f9:dd:
         9b:04:c8:a4:73:14:b9:c9:c6:77:1b:db:0d:a1:52:a1:b2:88:
         ec:ed:bc:19:ca:e1:92:bd:9c:3e:0f:85:c7:f8:d3:37:c0:cd:
         28:b6:c0:c1:d8:51:7c:e6:9e:1e:47:b6:0d:1e:8e:f3:6b:1c:
         e0:df:16:93:3f:d7:c6:f4:73:61:53:58:a1:2a:74:e9:c8:93:
         76:64:c6:a9:fc:13:71:34:0f:c0:ae:cc:58:58:4a:57:87:69:
         6e:4d:71:f4:30:be:2e:d7:64:47:46:32:d0:36:1d:fb:2f:da:
         96:7f:1e:ff:49:02:6b:2d:d8:32:cb:09:63:e4:31:34:b3:37:
         49:55:70:f8:76:ff:cc:2d:fe:b3:3e:93:b2:ca:7a:c3:c1:0a:
         85:33:4f:89:d2:61:28:c8:ea:ce:05:a9:cf:c6:0a:37:7c:72:
         80:84:d9:39:20:d6:3e:aa:7d:4a:a3:ec:60:08:22:ee:65:5d:
         c6:5e:e1:fc:48:e5:59:62:9b:74:17:f9:bb:a9:2a:ed:a2:d8:
         32:c5:ef:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:12:13 2026 by rpki-client