Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/6331f559-a143-32d7-9d66-5921c1becf96.roa
File:                     6331f559-a143-32d7-9d66-5921c1becf96.roa (raw, json)
Hash identifier:          qxKu54Z6i6vc/nUxh8oE8zTtaM9bTH+uOuA7LDzLIbU=
Subject key identifier:   81:58:19:BA:93:19:44:B1:E0:19:C7:12:0F:48:BF:57:D0:7F:70:30
Certificate issuer:       /CN=9ff9bceb-e14b-4417-b9b7-c51352d95416
Certificate serial:       010D0C9F4328584F497605295F1D0330E179BD00
Authority key identifier: 00:0E:4F:51:41:59:6D:38:BB:FA:00:EB:A5:24:C6:68:8C:5F:A0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/6331f559-a143-32d7-9d66-5921c1becf96.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19782
IP address blocks:        192.206.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/9ff9bceb-e14b-4417-b9b7-c51352d95416.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/9ff9bceb-e14b-4417-b9b7-c51352d95416.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:05:29:5f:1d:03:30:e1:79:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff9bceb-e14b-4417-b9b7-c51352d95416
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0b5793f4-bd0a-4848-b37a-3c76f39b36ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:22:c6:a9:47:3f:e6:5e:fe:8c:6e:ab:95:1f:
                    07:54:30:8b:39:3f:02:d9:1a:b2:08:38:f0:06:b9:
                    fa:81:fc:64:f9:d1:ce:10:09:7d:12:81:6d:b5:21:
                    d0:75:8c:3f:0b:80:3d:16:6b:7b:66:c3:9d:04:7c:
                    f5:8d:d5:2f:7c:6f:8d:48:fa:e2:68:d6:bb:51:96:
                    fe:cd:f1:f1:a9:70:89:3d:f4:af:95:c3:c4:ba:8c:
                    59:c2:f0:4e:82:fe:04:be:c4:c9:dd:8b:29:38:b0:
                    fa:68:b0:57:64:d3:a4:82:a5:d6:1a:23:e0:33:f4:
                    da:f9:e4:e1:78:27:cc:22:d6:ec:73:20:30:15:b9:
                    ea:8e:91:5f:2d:da:17:43:62:8d:8e:07:8f:38:57:
                    75:ca:b6:dd:46:3f:8a:bc:42:ab:40:ed:81:6d:6f:
                    d2:13:57:ac:c1:72:19:91:3b:4c:65:62:25:e3:c2:
                    b8:df:8c:7f:3a:fb:da:60:46:8d:39:ea:35:1b:4e:
                    3b:e6:c1:34:8e:99:1a:bc:6f:48:58:91:6e:79:b9:
                    a0:09:6f:b7:ba:fe:92:3d:e1:07:fc:cb:fb:64:96:
                    05:ea:7e:53:e1:ec:c4:3d:b8:46:8b:81:0c:f2:88:
                    e8:59:8f:1c:a7:6a:ad:9f:33:71:7e:98:db:31:e7:
                    3e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:58:19:BA:93:19:44:B1:E0:19:C7:12:0F:48:BF:57:D0:7F:70:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/6331f559-a143-32d7-9d66-5921c1becf96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/9ff9bceb-e14b-4417-b9b7-c51352d95416.crl

            X509v3 Authority Key Identifier:
                keyid:00:0E:4F:51:41:59:6D:38:BB:FA:00:EB:A5:24:C6:68:8C:5F:A0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:ac:ed:23:45:ae:e9:e4:c1:30:9d:e1:eb:fc:2f:09:5c:5a:
         c2:54:5d:50:08:30:15:d5:eb:4e:65:72:14:31:b3:71:63:65:
         c0:1b:04:9c:ff:48:cd:f9:02:bb:ad:cc:84:4c:9c:85:d8:d5:
         44:09:c3:e1:ab:13:0a:23:20:cd:15:be:09:39:40:56:62:d6:
         16:5b:c5:7e:b3:44:e1:14:fd:24:5a:e1:f6:b1:9a:a5:db:26:
         b5:cd:7b:ac:62:86:4f:e2:e9:c2:38:f3:ec:69:11:cf:e9:83:
         fb:ec:ff:eb:e6:a7:22:5b:b3:f8:be:b8:58:29:fc:29:5f:84:
         14:8c:a7:ec:f0:f4:61:0d:17:6e:ea:13:92:99:d2:4d:b2:c9:
         85:32:99:da:84:79:1a:b7:dc:3f:ee:ba:2f:4a:e8:5c:2b:f6:
         33:9e:b7:2d:52:87:ac:a9:61:09:29:47:8f:ab:b3:50:1e:dd:
         5a:bf:69:5f:a5:b8:41:5a:1d:14:26:f1:af:04:07:d1:b3:75:
         e9:cc:40:21:97:6f:0c:98:9f:0a:b1:9a:da:a7:0f:0c:b1:bc:
         2e:4d:a7:a3:07:52:4d:0a:77:09:57:70:70:be:e1:d5:65:b3:
         60:e4:92:14:2b:55:6c:41:2f:20:6f:72:de:5f:34:c5:bf:14:
         ec:2b:8f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:06:18 2026 by rpki-client