Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b97b95ce-cd8e-3afe-9013-9c40f91ab565.roa
File:                     b97b95ce-cd8e-3afe-9013-9c40f91ab565.roa (raw, json)
Hash identifier:          h0Tu5eqZEqfZDzqB5WMn3TQgcU+meupWutDv3ADZxVc=
Subject key identifier:   80:FA:39:53:80:0B:0C:90:D2:8B:0B:1E:83:81:6F:9A:A3:FE:D8:D7
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584F5E62E4440AA94622C7677DC0
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b97b95ce-cd8e-3afe-9013-9c40f91ab565.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     209
IP address blocks:        209.3.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:e4:44:0a:a9:46:22:c7:67:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=abb113c3-4b0c-4ca4-881b-5c2b33c6e749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:52:ab:8d:d7:3a:78:5b:b6:2c:06:3d:fc:5f:
                    1c:c8:55:d2:59:f4:76:e5:37:59:9e:15:9a:18:ef:
                    24:f5:64:c4:22:e6:80:2c:e5:6e:6b:c8:ea:5f:eb:
                    23:ca:8d:dc:ea:f9:2e:cf:d8:ba:92:63:7e:31:92:
                    73:0c:d8:81:b8:ab:56:e0:3a:4f:aa:d2:b0:db:b1:
                    ca:63:99:ff:ef:6b:25:84:c0:4e:34:d1:c9:77:2f:
                    8c:3a:04:09:a4:8c:3d:7e:6a:53:a4:3a:8d:d8:5e:
                    ac:ba:0d:08:fc:b9:3a:0a:a0:82:49:dc:70:c9:ca:
                    25:13:7f:c0:75:6b:88:bf:14:ee:fe:e1:c2:3d:a7:
                    15:a3:1b:76:e5:d0:f4:13:f7:db:9b:0d:f3:14:6a:
                    92:a6:c8:d4:3f:16:72:11:59:57:e4:97:3c:0f:3b:
                    24:39:51:16:f7:d2:c0:f9:a7:b0:2f:d5:37:38:60:
                    51:41:e1:c4:80:84:8a:dc:92:27:57:50:2d:29:78:
                    96:65:54:c6:3e:53:41:95:23:34:61:29:1a:95:2a:
                    78:28:04:71:10:6a:a2:e7:f8:f1:82:f0:f3:9c:5d:
                    17:e7:fe:72:45:d8:ec:d4:21:6b:ee:fd:e4:91:33:
                    d5:ef:df:17:71:79:aa:f2:ce:f8:62:d6:22:61:ba:
                    df:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FA:39:53:80:0B:0C:90:D2:8B:0B:1E:83:81:6F:9A:A3:FE:D8:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b97b95ce-cd8e-3afe-9013-9c40f91ab565.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.3.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:8e:23:d5:8c:7f:dc:7f:42:09:99:e4:56:5d:3e:c3:b9:49:
         31:37:aa:ef:9c:87:d7:9c:75:9f:a3:ba:2f:e7:a5:de:32:d2:
         4e:2c:26:76:d3:fb:34:dc:7e:c1:f5:91:51:d5:8b:05:0d:9d:
         58:e8:69:cd:0d:04:69:ca:8c:ca:5f:a9:96:74:32:a3:51:b6:
         8f:a4:15:03:1c:b8:01:ff:bf:94:32:e6:a2:03:0b:3f:26:8e:
         c8:2e:b0:04:b5:df:15:3b:c0:86:3f:a5:e9:8d:54:e8:32:b3:
         0b:47:38:cb:db:50:07:34:fe:77:39:3d:15:85:f4:21:3a:10:
         2d:75:2b:d2:7a:0f:4f:72:c9:a4:35:9b:01:35:b2:5a:7c:f2:
         1b:cf:2a:85:a9:93:d4:75:21:a4:51:75:5e:1c:63:b5:12:85:
         0e:14:5b:c3:5b:74:7a:c6:b1:c9:b0:eb:61:cf:f2:ea:c0:31:
         29:19:89:0a:6f:fa:7a:31:3e:c0:ea:84:08:1c:5c:73:9f:f7:
         3a:22:be:84:86:ea:6d:29:2c:d2:59:1f:a5:40:d4:03:1a:97:
         a4:eb:5d:d3:49:56:9c:e9:6a:43:bf:44:c3:f8:29:84:51:30:
         4f:65:c0:f5:8e:bf:58:3c:56:87:9d:fc:15:2c:0b:a7:a3:49:
         c9:fc:a3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:52:46 2026 by rpki-client