Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/6ef4f7b1-9dcb-39b5-9659-b2039a08fdc2.roa
File:                     6ef4f7b1-9dcb-39b5-9659-b2039a08fdc2.roa (raw, json)
Hash identifier:          Czx/7tNRwsynE6fcBm/GPbxanVOlXKyTb/g+nGfBkLw=
Subject key identifier:   9B:A7:8A:5D:D5:EE:2B:5D:EF:FE:A7:BB:5D:31:A7:20:C6:BA:B1:83
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584FA85DF56EF844689301096AC0
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/6ef4f7b1-9dcb-39b5-9659-b2039a08fdc2.roa
Signing time:             Thu 29 Oct 2026 01:00:12 +0000
ROA not before:           Thu 29 Oct 2026 01:00:12 +0000
ROA not after:            Wed 27 Jan 2027 02:00:12 +0000
asID:                     3561
IP address blocks:        209.176.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a8:5d:f5:6e:f8:44:68:93:01:09:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Oct 29 01:00:12 2026 GMT
            Not After : Jan 27 02:00:12 2027 GMT
        Subject: CN=d80c7ce8-575f-4c06-9c05-742eaa8462b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c3:bf:e1:79:53:e4:2e:96:1b:50:47:4c:15:
                    d7:b7:f6:ca:38:e6:e5:0f:c7:3f:b2:47:81:26:1c:
                    9d:20:5b:13:9d:ef:f1:8a:e4:7d:0b:89:c4:26:1a:
                    36:9b:bf:a2:fb:e9:fd:94:fe:fc:9a:8e:f8:fe:6a:
                    92:2f:30:63:8f:69:a0:96:a6:78:59:94:20:e3:de:
                    96:db:5b:35:fa:48:16:9d:8a:d7:b8:79:d8:6a:12:
                    81:18:ea:c3:11:dc:c5:22:d1:9e:5a:6f:a3:57:7b:
                    26:35:7b:4b:2e:5e:65:a9:ae:fb:1f:e2:7e:a4:c7:
                    f5:de:13:b0:2e:1a:3d:84:a9:92:5f:eb:04:d6:a4:
                    5b:74:61:86:9e:83:45:2f:66:68:c1:37:4d:24:3e:
                    c2:42:18:8b:32:e6:04:b0:0e:2b:0f:3d:ac:fd:b6:
                    78:50:56:29:3f:23:25:cf:90:fd:62:3f:2c:88:66:
                    9e:58:a7:66:1e:0b:90:bc:65:16:b1:c0:04:12:db:
                    05:5a:d5:82:76:38:df:ef:fa:b6:f5:02:19:a7:d4:
                    6b:e6:0e:92:a3:c0:18:39:da:1a:5e:56:2d:8d:15:
                    c5:1a:1e:a9:8a:24:86:e7:92:61:77:b7:94:12:ec:
                    9d:22:31:68:0d:24:bb:35:61:66:c3:14:80:5c:52:
                    0b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A7:8A:5D:D5:EE:2B:5D:EF:FE:A7:BB:5D:31:A7:20:C6:BA:B1:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/6ef4f7b1-9dcb-39b5-9659-b2039a08fdc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.176.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:bd:2e:61:bf:1e:87:c3:0d:a7:2b:f8:98:f4:18:14:55:91:
         9a:fc:66:94:47:ac:d0:92:e1:25:93:f9:dc:0d:ec:87:f9:05:
         98:f3:50:d1:35:cf:33:e7:cb:c6:cb:5e:3f:a5:dd:40:87:ab:
         2a:d6:19:ba:7b:d5:d7:ae:7c:94:bc:85:87:f3:f0:cd:29:ab:
         bf:b7:5b:e1:c2:ca:5f:90:eb:58:40:51:58:6c:64:5a:19:37:
         b9:22:cd:e5:fb:a7:6b:a4:db:74:3b:15:24:45:0e:8e:84:5c:
         8e:58:e3:4c:b2:a6:6e:7e:d4:52:c3:9a:94:bd:46:f4:2c:33:
         e1:f8:46:46:57:6b:f5:a9:26:ed:9f:4b:b2:15:0b:64:8a:cd:
         c3:b7:66:fe:7b:65:f7:a6:ed:75:c8:70:35:59:1c:a4:c3:90:
         9f:cf:51:52:eb:95:fd:6f:0c:e0:b5:29:bf:7c:00:02:ab:0e:
         24:fd:3f:5f:5a:77:05:63:96:44:9c:f6:b7:fa:6e:4c:37:7d:
         90:a0:3b:ca:bd:5e:a6:4f:56:3a:bc:28:a3:1c:4d:76:0c:fc:
         5f:e2:63:bd:4a:63:6f:a8:49:50:37:80:3c:8b:88:46:26:26:
         05:ae:f4:ee:c3:23:8c:af:20:71:af:14:88:c3:ad:97:96:2e:
         4e:0f:9b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:11:21 2026 by rpki-client