Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/6bc9518c-92df-3fa7-8157-1b414d300f26.roa
File:                     6bc9518c-92df-3fa7-8157-1b414d300f26.roa (raw, json)
Hash identifier:          bUL/pa0WaSUEfWFg2sOF9qzdvnTaEaGZpdOu8+D45S0=
Subject key identifier:   13:8A:D2:A5:C6:B8:F5:EE:B6:67:D8:E6:66:0C:6E:46:E4:A5:FD:BB
Certificate issuer:       /CN=32262fda-73b9-4875-8f83-9733217ce893
Certificate serial:       010D0C9F4328584B80B752D615CE8D7193521A40
Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/6bc9518c-92df-3fa7-8157-1b414d300f26.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     16509
IP address blocks:        96.9.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:52:d6:15:ce:8d:71:93:52:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=f863ee2b-e333-41c3-82f1-68071c557a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c5:db:a4:54:f4:ce:30:5e:94:14:92:86:94:
                    99:67:50:ca:c3:ee:43:f1:aa:f7:99:8e:1a:f2:f6:
                    64:7b:79:89:02:3e:c9:c6:c2:c0:44:97:09:c1:41:
                    5f:3f:7b:7b:8e:31:c1:5a:26:86:ad:bf:0b:77:73:
                    80:9d:6b:35:ff:05:11:ab:fe:20:a4:88:f9:6e:cb:
                    f0:e6:ce:b3:f0:4e:bb:2c:60:1c:b1:79:da:1d:33:
                    a7:04:03:5b:8c:74:2f:5b:ba:8f:5a:2a:8d:f7:98:
                    b1:95:44:42:8d:fb:11:63:5e:7d:e7:69:51:8a:ff:
                    a6:f4:e4:8b:d6:96:04:4c:b3:be:d8:5d:1e:02:5b:
                    31:37:58:31:41:e6:ed:26:f3:94:85:66:d5:e6:f6:
                    c0:01:ee:a4:eb:3f:07:cd:52:df:5f:26:b3:ff:9e:
                    7d:e7:3d:5f:9a:ce:39:47:23:3d:96:bb:4b:80:0b:
                    a2:7c:9a:4b:f2:ad:4e:be:54:7b:06:42:bb:b2:81:
                    b7:9a:ae:40:73:bd:a1:d6:9a:d1:f6:d2:b1:21:bb:
                    f5:76:d0:5a:0b:41:e8:fa:6f:49:ce:51:69:01:02:
                    81:fe:11:e7:9b:47:6d:56:a2:d1:24:3d:cc:77:fa:
                    98:b1:3b:49:39:83:05:07:f8:e9:56:e3:73:37:21:
                    2f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:8A:D2:A5:C6:B8:F5:EE:B6:67:D8:E6:66:0C:6E:46:E4:A5:FD:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/6bc9518c-92df-3fa7-8157-1b414d300f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl

            X509v3 Authority Key Identifier:
                keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.9.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:4b:af:15:1a:14:74:e7:3a:58:c3:4d:f0:3d:82:12:95:a2:
         7e:07:95:32:70:b5:2f:2c:8d:cf:35:f9:28:e1:d2:48:a5:4f:
         fa:f6:5b:0c:b0:dc:60:46:40:c5:80:07:2b:3d:a7:de:de:e5:
         73:28:44:c3:d2:c7:fc:52:67:ee:dd:5a:62:da:bb:0a:4f:e3:
         ff:86:8f:ac:a2:d3:46:54:a6:a3:d2:50:6f:5c:61:0e:14:0a:
         a7:6f:f5:63:84:1c:98:80:50:d8:8f:67:36:f6:5c:b4:30:8a:
         9e:65:7d:2d:59:49:e9:a8:fe:73:d4:1f:2d:02:bc:dd:9f:d8:
         b6:62:95:c8:55:52:28:85:12:cf:72:b8:64:a8:29:22:3a:0b:
         b5:17:96:03:10:e4:c9:ee:d0:d5:6a:0c:72:02:a5:5e:87:c0:
         69:7b:1f:fa:33:2f:ac:09:e4:0f:52:33:d0:55:d9:ea:8b:03:
         36:e1:26:7f:cc:58:d0:c2:01:05:66:c3:26:30:f1:c3:90:96:
         a9:72:da:c7:fd:6d:c1:71:35:4c:80:33:cc:48:3c:f0:e8:48:
         65:6f:b1:88:f5:18:fe:f3:7a:52:53:5c:c7:0e:da:dd:ef:67:
         0a:f4:da:fa:83:76:e1:1e:5c:34:51:61:63:7b:6a:57:f8:b4:
         b1:7f:a0:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt1LWFc6NcZNSGkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl
ODkzMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk
Zjg2M2VlMmItZTMzMy00MWMzLTgyZjEtNjgwNzFjNTU3YTg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcXbpFT0zjBelBSShpSZZ1DKw+5D8ar3mY4a
8vZke3mJAj7JxsLARJcJwUFfP3t7jjHBWiaGrb8Ld3OAnWs1/wURq/4gpIj5bsvw
5s6z8E67LGAcsXnaHTOnBANbjHQvW7qPWiqN95ixlURCjfsRY15952lRiv+m9OSL
1pYETLO+2F0eAlsxN1gxQebtJvOUhWbV5vbAAe6k6z8HzVLfXyaz/5595z1fms45
RyM9lrtLgAuifJpL8q1OvlR7BkK7soG3mq5Ac72h1prR9tKxIbv1dtBaC0Ho+m9J
zlFpAQKB/hHnm0dtVqLRJD3Md/qYsTtJOYMFB/jpVuNzNyEvBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBOK0qXGuPXutmfY5mYMbkbkpf27MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2
MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvNmJjOTUxOGMtOTJkZi0z
ZmE3LTgxNTctMWI0MTRkMzAwZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm
ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj
ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz
MjE3Y2U4OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYAndMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAClLrxUaFHTnOljDTfA9ghKVon4HlTJwtS8sjc81+Sjh0kilT/r2Wwyw
3GBGQMWABys9p97e5XMoRMPSx/xSZ+7dWmLauwpP4/+Gj6yi00ZUpqPSUG9cYQ4U
Cqdv9WOEHJiAUNiPZzb2XLQwip5lfS1ZSemo/nPUHy0CvN2f2LZilchVUiiFEs9y
uGSoKSI6C7UXlgMQ5Mnu0NVqDHICpV6HwGl7H/ozL6wJ5A9SM9BV2eqLAzbhJn/M
WNDCAQVmwyYw8cOQlqly2sf9bcFxNUyAM8xIPPDoSGVvsYj1GP7zelJTXMcO2t3v
Zwr02vqDduEeXDRRYWN7alf4tLF/oBU=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:32:01 2025 by rpki-client