Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS9267.roa
File:                     AS9267.roa (raw, json)
Hash identifier:          DM42tev4pX7iuDkxg39tH7cZxU/oo8+o8iPISE8bmdo=
Subject key identifier:   7B:36:35:5B:40:7C:3F:2C:82:22:11:5D:A4:62:35:98:97:FB:2C:FD
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       69FC37E7947D1CCEC819A9150A93FCB0BCDD7ADD
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS9267.roa
Signing time:             Thu 04 Jun 2026 15:58:48 +0000
ROA not before:           Thu 04 Jun 2026 15:53:48 +0000
ROA not after:            Thu 03 Jun 2027 15:58:48 +0000
asID:                     9267
IP address blocks:        2a06:a005:200::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:fc:37:e7:94:7d:1c:ce:c8:19:a9:15:0a:93:fc:b0:bc:dd:7a:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jun  4 15:53:48 2026 GMT
            Not After : Jun  3 15:58:48 2027 GMT
        Subject: CN=7B36355B407C3F2C8222115DA462359897FB2CFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:84:f6:41:02:95:02:5a:08:12:de:73:ac:51:
                    54:d1:0a:ef:59:cf:4b:20:1f:4a:b7:72:aa:1b:6d:
                    32:f0:de:bf:ae:02:42:c1:56:5d:fd:ec:b9:df:b4:
                    58:f3:ee:54:da:27:0f:29:a4:3d:5e:7d:7a:7f:1c:
                    de:c0:48:00:15:9e:4d:0a:22:92:41:53:7b:ca:e5:
                    19:c0:1e:39:0c:58:61:a5:65:e2:7f:22:e4:47:68:
                    3e:20:e0:8e:08:27:f1:d1:cb:6d:aa:72:10:bd:49:
                    7b:33:31:dc:14:03:33:b2:d7:6c:17:25:88:d8:7b:
                    c1:ed:fb:72:0f:38:ab:53:7a:f4:4e:90:4a:f8:bb:
                    55:a5:d3:d0:df:ee:dc:d8:15:5e:44:23:4f:46:b4:
                    50:48:2c:0d:a7:6f:6e:67:37:57:42:86:c9:57:b2:
                    6f:af:d5:81:31:d6:f6:94:27:51:52:52:d9:c1:2b:
                    59:42:c2:28:25:f6:31:c6:cf:a3:24:e7:2f:69:b3:
                    49:4d:82:c5:04:29:cd:6d:4a:c3:15:01:08:a8:5e:
                    b7:6f:4f:60:9f:50:26:c6:c0:0a:e6:4e:2d:54:80:
                    5d:7f:38:69:e5:07:21:e2:17:7a:2c:27:7b:e5:53:
                    41:45:db:46:ca:70:57:81:25:07:61:6f:f8:93:98:
                    c7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:36:35:5B:40:7C:3F:2C:82:22:11:5D:A4:62:35:98:97:FB:2C:FD
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS9267.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:200::/44

    Signature Algorithm: sha256WithRSAEncryption
         15:ae:21:2f:b8:c2:4b:ec:4d:0b:30:93:d3:5b:63:01:da:db:
         45:ef:cd:37:e6:ca:b8:17:0f:99:58:c5:d9:3b:ad:6e:2a:e3:
         d7:c6:9c:6d:89:9e:41:f0:69:af:42:4d:a8:05:0a:f6:3d:96:
         e2:63:05:d0:78:6f:38:d1:69:72:f2:e1:6c:b4:4e:17:39:fd:
         9f:65:8c:33:c7:8e:68:d1:b7:54:90:c5:e0:2d:c3:b5:74:15:
         53:cd:c0:19:86:68:fb:81:05:40:68:8a:8a:10:1f:4d:ba:e6:
         e0:7a:09:9c:a8:f3:f1:e6:5c:65:b3:1a:02:91:13:34:ae:b8:
         60:6b:e5:14:5e:fd:a0:95:37:70:98:a1:ee:f0:f3:7d:e8:34:
         ad:d1:c0:98:4b:07:14:41:6e:05:4d:67:09:b6:52:f9:f0:55:
         09:03:a3:49:9e:f3:b3:e5:10:19:69:6f:01:7d:b2:de:75:29:
         cf:39:34:f0:37:0a:13:8e:f7:df:76:34:a9:f8:5a:da:e1:90:
         16:c1:96:a2:68:46:b3:48:7e:7c:dd:2b:a1:0e:85:b2:c0:5e:
         d1:47:12:eb:35:89:e0:f8:1f:2f:5b:fe:a8:43:a7:f6:a7:82:
         a2:c3:29:5c:d3:ad:92:04:46:6e:c0:99:9d:93:16:66:94:c1:
         1e:2c:6d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:58:08 2026 by rpki-client