Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/6331f559-a143-32d7-9d66-5921c1becf96.roa
File:                     6331f559-a143-32d7-9d66-5921c1becf96.roa (raw, json)
Hash identifier:          Ig07KiAmY+RYYfdLdD3C9mJhYWF/uqqLhXnCnXUbpck=
Subject key identifier:   75:A8:60:60:1C:9D:7E:74:32:4F:90:27:AD:7B:C8:77:56:4E:67:87
Certificate issuer:       /CN=9ff9bceb-e14b-4417-b9b7-c51352d95416
Certificate serial:       010D0C9F4328584D100CFA5DB3CAD3E04AEDD300
Authority key identifier: 00:0E:4F:51:41:59:6D:38:BB:FA:00:EB:A5:24:C6:68:8C:5F:A0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/6331f559-a143-32d7-9d66-5921c1becf96.roa
Signing time:             Thu 05 Mar 2026 02:00:32 +0000
ROA not before:           Thu 05 Mar 2026 02:00:32 +0000
ROA not after:            Wed 03 Jun 2026 01:00:32 +0000
asID:                     19782
IP address blocks:        192.206.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/9ff9bceb-e14b-4417-b9b7-c51352d95416.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/9ff9bceb-e14b-4417-b9b7-c51352d95416.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:10:0c:fa:5d:b3:ca:d3:e0:4a:ed:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff9bceb-e14b-4417-b9b7-c51352d95416
        Validity
            Not Before: Mar  5 02:00:32 2026 GMT
            Not After : Jun  3 01:00:32 2026 GMT
        Subject: CN=fe415925-9046-4c65-b9b0-baaab0fd8b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fe:5b:78:2f:b4:6b:71:b8:be:fa:b5:eb:3e:
                    09:7a:35:29:81:cd:4e:35:57:64:32:73:ad:62:96:
                    1e:b4:31:62:c5:67:f1:03:b8:d1:72:4a:08:cc:a0:
                    50:6d:fb:b3:08:fd:8d:01:af:ba:40:79:94:e4:a1:
                    8e:57:21:6a:8a:b8:87:0e:df:36:d3:a1:e5:78:10:
                    cc:97:c8:a0:f2:eb:ee:f5:e8:3d:d3:08:7a:fb:36:
                    03:3c:78:15:54:3f:ed:9c:32:f9:74:57:1b:2a:4b:
                    44:1b:82:9a:68:f5:72:74:86:68:09:d0:5a:20:cf:
                    c9:83:5d:d4:1a:56:7e:69:1f:97:a8:61:8d:24:8b:
                    20:9c:f7:bb:c4:a4:3f:a2:ea:f4:32:a8:5e:97:37:
                    65:ae:0a:94:d9:dc:f9:44:34:1f:f2:86:de:0b:91:
                    09:db:d4:7b:8e:d0:c6:f4:e0:9d:d1:d8:f5:54:80:
                    9f:23:40:86:bb:47:61:f3:70:47:d9:31:61:be:6c:
                    2a:81:de:2d:51:4f:63:d5:41:62:4a:db:31:36:55:
                    2d:03:90:fb:40:e1:8e:27:09:40:37:01:57:63:a3:
                    2a:2e:ab:c3:ec:79:7a:61:8b:9b:b5:0a:b8:ea:d8:
                    a8:0f:71:c8:1a:ff:ba:37:40:c6:63:2f:bc:1e:04:
                    aa:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A8:60:60:1C:9D:7E:74:32:4F:90:27:AD:7B:C8:77:56:4E:67:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/6331f559-a143-32d7-9d66-5921c1becf96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/9ff9bceb-e14b-4417-b9b7-c51352d95416.crl

            X509v3 Authority Key Identifier:
                keyid:00:0E:4F:51:41:59:6D:38:BB:FA:00:EB:A5:24:C6:68:8C:5F:A0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:e1:60:93:d4:37:33:24:37:64:ec:b1:ec:d1:b4:09:e2:ff:
         db:c7:21:6c:30:e2:bc:7c:e7:a7:3a:b0:c4:41:82:4b:71:42:
         1c:34:8a:97:fe:5a:3c:25:24:56:af:52:ba:38:0e:04:bd:32:
         e2:09:50:44:d1:a7:08:b3:d2:12:55:ce:38:0c:65:7c:83:66:
         78:4d:15:78:fe:1b:72:fa:25:43:5a:a0:41:7e:fc:3c:9a:c3:
         16:75:0f:85:56:02:0a:87:1e:52:7a:63:22:7d:66:f7:16:65:
         ec:35:60:79:05:9f:73:a2:e6:60:47:41:ea:ce:df:cb:c6:87:
         99:88:41:77:ba:f9:c2:0a:3c:fc:40:6d:fb:31:cd:e7:99:93:
         79:ac:52:df:16:84:e9:ec:3e:7d:fa:aa:ad:4f:18:2a:98:b9:
         c5:b9:94:10:84:85:b9:0b:17:a8:ed:13:f8:fb:d8:c6:c1:70:
         08:51:53:c4:13:df:76:57:1e:2a:70:81:cd:be:c6:19:e8:b3:
         21:02:29:b1:f4:13:78:2d:6a:ac:d1:17:86:48:d8:97:67:b2:
         71:ff:bd:19:47:7b:94:7a:70:c5:75:3d:0b:a6:54:c2:87:9f:
         07:2e:28:09:a0:aa:b5:e2:46:a6:76:b7:02:34:db:e0:63:0e:
         07:d0:41:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 12:07:23 2026 by rpki-client