Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/943fa06d-3c24-318b-af34-ccecdf6e499a.roa
File:                     943fa06d-3c24-318b-af34-ccecdf6e499a.roa (raw, json)
Hash identifier:          BF2Gg3TuT3vZj/cTJiW4EobREUQbaBEltLDRooFzVdY=
Subject key identifier:   C3:E9:0F:6C:F5:85:DB:D3:47:2E:B7:0E:50:34:98:CF:C2:2E:9D:13
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F62931FDD8B02F50457C9AD40
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/943fa06d-3c24-318b-af34-ccecdf6e499a.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     23473
IP address blocks:        76.10.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:93:1f:dd:8b:02:f5:04:57:c9:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=96cac00b-a8d1-482c-b557-aa46308e0ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f3:c8:ce:48:82:74:f8:7a:b0:76:6a:32:e7:
                    92:af:aa:df:15:63:b6:c9:96:b7:dc:66:76:8d:fd:
                    1d:9f:17:b5:84:19:57:e9:da:65:8e:85:03:cc:5c:
                    d1:49:1c:a9:c8:5b:8e:2c:27:c0:61:af:06:c7:e3:
                    ae:37:80:3d:93:7e:58:ec:63:b4:ea:42:ff:b1:f1:
                    b7:09:33:11:fd:f8:4f:5c:52:55:b9:12:f2:5f:62:
                    58:4e:06:18:84:19:80:20:1c:6c:85:9a:21:dd:94:
                    16:0f:d5:f3:2c:d1:1d:15:99:90:b7:a9:27:cb:54:
                    e7:9e:9b:18:a8:4a:70:8f:2e:3e:7a:28:77:92:d0:
                    2f:63:d9:b1:f2:f9:cb:d0:fd:fe:67:d6:7d:3b:3f:
                    bb:f6:8c:9a:4b:12:11:fe:10:64:64:b9:c8:99:bf:
                    92:56:a3:da:c3:b2:ab:c4:93:e8:e6:28:74:c9:1f:
                    70:34:e1:09:ef:38:a6:2c:d0:50:80:70:a5:45:ac:
                    29:2e:01:9e:f5:80:7a:84:c4:62:c1:64:68:a2:1f:
                    5b:ca:b8:2a:50:8a:ce:54:52:f2:de:85:08:7a:2d:
                    5f:1d:8b:09:4f:19:87:6b:5f:54:67:ab:06:70:d9:
                    d6:1b:64:32:d6:4e:22:4a:30:60:2d:a1:4a:24:25:
                    98:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E9:0F:6C:F5:85:DB:D3:47:2E:B7:0E:50:34:98:CF:C2:2E:9D:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/943fa06d-3c24-318b-af34-ccecdf6e499a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.10.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:c9:8e:b0:85:ea:46:be:8f:6f:87:aa:58:69:48:70:a7:23:
         64:d4:01:c9:16:c3:cf:d2:83:1e:b7:5f:5d:54:10:4a:23:2d:
         97:8a:e5:7b:bf:96:69:45:7a:01:4f:dc:8c:a5:c8:23:16:bd:
         38:d7:0d:1d:2e:06:7b:5c:15:27:37:01:0d:f4:e9:94:93:97:
         dc:ac:75:a0:cd:40:b7:8e:d5:5a:26:29:35:84:b6:40:31:ec:
         95:6d:66:7d:4b:82:97:60:ae:40:6d:4d:2d:27:39:42:06:7e:
         70:6b:0d:8c:db:9c:ad:5f:15:88:53:19:b1:5e:49:93:a8:58:
         5d:a9:25:f0:71:4d:2f:9d:c3:f0:63:c4:ae:9c:c0:ef:6f:0b:
         f9:ce:68:ba:64:b0:4e:a6:61:7e:ec:29:3f:2d:95:0e:be:b4:
         46:0c:4b:66:8f:d2:2e:8e:19:19:c0:76:48:8e:1b:a5:67:7b:
         9e:37:4f:70:53:e1:83:65:fe:24:19:50:52:61:b6:61:e9:90:
         e6:05:19:44:28:91:d8:4e:fb:8a:bb:d8:cb:1d:a9:cc:e2:42:
         0b:0c:a1:9f:e2:cc:d4:60:6c:ae:fe:a3:da:c6:b6:fc:d6:7e:
         45:9b:1d:b5:89:0d:45:da:ac:2b:94:74:13:de:7f:31:9a:1c:
         aa:15:0b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:17:41 2026 by rpki-client