Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/97218bd4-61a3-3800-a05a-ff333aa24078.roa
File:                     97218bd4-61a3-3800-a05a-ff333aa24078.roa (raw, json)
Hash identifier:          3qxf6kJ9Z+wVoNg9OJQJAU3A5Bgw3cBrmP7jlyjkNSU=
Subject key identifier:   9C:C9:2C:59:48:89:BF:52:ED:D1:30:C7:A3:A6:43:E5:1E:D4:21:92
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F4974B72254ACC15F84A1BC00
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/97218bd4-61a3-3800-a05a-ff333aa24078.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        76.10.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:b7:22:54:ac:c1:5f:84:a1:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8a382227-a331-4e72-a103-9dabe137577c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d1:9c:72:c8:f0:d2:2b:58:24:81:f0:49:0b:
                    96:f1:11:2b:a9:0b:69:c3:ce:e8:89:ac:b8:8d:f0:
                    e0:53:46:6b:d9:d0:29:6e:73:21:a9:8b:4b:f0:6b:
                    d9:6c:14:60:05:9b:ea:74:eb:f9:26:4f:a3:fa:28:
                    9c:99:ca:6d:0a:ba:b8:8e:e8:93:64:cc:17:ef:1c:
                    b3:b3:18:bc:ad:17:cd:32:cf:95:f2:d9:c7:f9:d4:
                    5b:c7:f0:46:b7:99:13:2f:62:0e:00:5c:55:23:84:
                    08:61:85:3d:54:77:f6:c4:e5:8e:5d:a8:16:2d:93:
                    77:a1:d9:c7:8f:84:a7:4f:f9:15:ba:4c:94:56:25:
                    22:81:1a:a5:73:24:57:d7:3c:5a:90:c6:05:91:87:
                    c1:3f:61:07:c9:21:31:13:8f:bc:49:8a:47:22:fc:
                    37:4a:30:43:e3:da:c4:0a:71:1d:1e:ab:a1:81:7b:
                    93:9d:72:98:35:3e:96:1d:1a:ff:eb:ca:76:eb:a3:
                    3b:87:5e:fe:a8:1b:85:9a:9a:33:3b:20:dd:0d:bc:
                    95:79:97:11:2a:75:51:69:14:26:23:fe:6b:21:01:
                    0f:13:93:77:21:83:9f:0d:d2:bf:bc:d0:e4:62:ea:
                    30:c2:b7:37:f8:0e:53:8a:0c:06:0b:33:47:83:0a:
                    25:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C9:2C:59:48:89:BF:52:ED:D1:30:C7:A3:A6:43:E5:1E:D4:21:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/97218bd4-61a3-3800-a05a-ff333aa24078.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.10.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:3c:4f:e9:3e:8b:43:63:3a:d7:95:ae:64:a5:14:2b:26:3e:
         9e:9f:db:2b:5a:5d:ba:dd:0d:a9:fb:71:eb:91:3e:46:c1:16:
         73:21:82:a5:7c:a7:65:c7:18:22:3b:9a:18:1a:0b:f5:a6:52:
         0f:57:5d:95:e3:e5:47:af:a5:2e:ce:67:a2:9d:cc:9f:81:ea:
         99:da:5e:a5:76:f3:e7:78:7d:7a:68:a2:7d:61:3d:cf:fc:fd:
         ef:8f:6c:96:dd:c9:9f:57:1c:0c:d4:97:f4:61:45:b8:47:6f:
         42:f4:41:94:fc:9e:34:9b:87:88:69:80:10:24:66:3d:27:19:
         82:88:1c:db:6c:2e:2d:0d:c8:bb:79:0f:12:c7:f9:5e:8f:70:
         1e:a0:07:32:3b:da:b4:e4:fc:fa:b4:bd:71:48:ee:a4:fe:65:
         09:38:78:42:80:e5:3d:bd:4b:ab:b3:c7:92:b3:48:d8:90:35:
         00:c8:56:ff:e7:a2:1a:73:e8:c8:d3:4e:64:4b:3c:8e:67:9d:
         7d:35:74:44:cc:9c:1b:fa:12:d1:38:ad:3b:91:fe:a9:21:f6:
         34:f2:32:6c:87:44:e8:5b:c5:39:0c:52:8f:61:ca:84:0a:7d:
         ea:8c:3d:25:c7:c5:88:e3:10:e2:fb:25:76:17:50:be:28:ff:
         de:05:d6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:30:53 2026 by rpki-client