Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/bc2f0603-1b45-3199-8a8c-8ff2bde08f43.roa
File:                     bc2f0603-1b45-3199-8a8c-8ff2bde08f43.roa (raw, json)
Hash identifier:          abEBBrBh2AUdBirsWbGoXeq8tqHOO9PK13RoSYr8/t4=
Subject key identifier:   82:3E:9C:F8:C4:A9:55:3E:3C:BC:E4:21:B9:8B:A1:8B:78:13:B5:43
Certificate issuer:       /CN=32262fda-73b9-4875-8f83-9733217ce893
Certificate serial:       010D0C9F4328584F24CA7B7956177FB278CE1000
Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/bc2f0603-1b45-3199-8a8c-8ff2bde08f43.roa
Signing time:             Fri 11 Sep 2026 21:52:32 +0000
ROA not before:           Fri 11 Sep 2026 21:52:32 +0000
ROA not after:            Thu 10 Dec 2026 22:52:32 +0000
asID:                     199741
IP address blocks:        96.9.214.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:24:ca:7b:79:56:17:7f:b2:78:ce:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893
        Validity
            Not Before: Sep 11 21:52:32 2026 GMT
            Not After : Dec 10 22:52:32 2026 GMT
        Subject: CN=2529460f-8293-4d38-83e7-e61743afaba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a2:a1:3b:44:7c:ef:db:ed:15:b9:3b:ae:a1:
                    74:a5:e9:f4:f7:02:fd:37:dd:18:3f:7a:76:d8:1a:
                    91:12:65:42:6f:98:9e:f2:ab:fd:ea:bf:a0:f4:6f:
                    69:76:9c:71:6d:5f:7b:1a:4b:5c:4a:e1:57:e5:8f:
                    17:b5:b5:7e:b1:5e:63:02:9c:03:e1:1f:20:8d:34:
                    bf:69:13:99:77:dc:25:8a:cf:54:41:81:af:e2:26:
                    6b:2b:7e:19:76:da:10:02:29:30:37:e4:74:0c:26:
                    ea:83:aa:99:ae:9d:e9:66:46:41:61:f1:17:49:5b:
                    db:6b:f8:17:9b:be:ad:2b:de:aa:23:88:d1:9e:4d:
                    c5:7e:0e:31:b8:59:67:38:7c:0e:b0:38:23:73:5f:
                    75:5a:12:fd:b6:6a:dc:5f:46:6a:89:de:30:a9:50:
                    e2:3c:df:7a:bc:45:c2:e9:47:40:2a:14:4c:c2:43:
                    75:aa:0f:7c:24:4d:f2:f8:5d:44:d7:42:7b:a2:b1:
                    e6:6d:9d:0f:04:1c:34:fb:1f:08:53:9a:af:ec:8b:
                    76:08:c5:5a:07:51:09:36:28:9c:17:38:1a:ad:67:
                    62:28:b2:95:1a:aa:c6:aa:14:93:40:45:f4:03:3e:
                    e4:a3:04:dc:0a:64:97:79:44:7d:68:1a:1d:61:16:
                    b9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3E:9C:F8:C4:A9:55:3E:3C:BC:E4:21:B9:8B:A1:8B:78:13:B5:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/bc2f0603-1b45-3199-8a8c-8ff2bde08f43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl

            X509v3 Authority Key Identifier:
                keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.9.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:d3:24:08:9e:ea:c1:31:d7:7f:fd:17:f5:10:61:ea:2d:55:
         1a:9a:50:f7:0b:f2:b5:92:3b:34:0f:c7:8f:af:a4:91:fc:07:
         d3:1a:b0:16:0e:16:b7:d2:70:03:2a:5c:0c:89:67:7d:26:40:
         df:e4:ca:8f:2e:35:fe:88:d3:04:79:7f:36:33:0b:9c:eb:dd:
         d8:06:b8:79:4b:75:d2:36:a8:ca:b0:e8:c5:52:12:c3:0c:d4:
         f6:37:e3:ad:58:16:31:9d:77:f0:d3:6e:78:66:b4:81:1e:be:
         d6:84:ea:7a:74:b1:43:b0:a0:d0:56:a9:c1:3e:28:d0:f1:ab:
         ba:a6:52:0c:10:bf:28:6f:ea:40:d7:f2:fb:eb:0b:9a:3f:94:
         17:e0:06:34:08:d4:23:1a:d3:bf:ad:df:2c:7e:79:cb:27:86:
         22:c4:76:56:04:a4:44:68:53:d7:f8:5a:de:e5:c0:ca:50:8e:
         28:a6:df:76:72:a3:99:71:3c:88:ff:c3:e3:3f:a5:dd:ed:9d:
         16:46:72:5a:30:0b:7e:2a:fb:9a:91:0f:69:ba:f8:51:0b:ba:
         81:1a:1b:34:6f:4c:73:f2:5c:23:32:5c:1b:c5:d1:29:4b:6d:
         4f:30:c3:f8:ac:c6:39:29:11:81:4b:cc:a2:9d:15:1e:fd:96:
         2f:d6:81:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8kynt5Vhd/snjOEAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl
ODkzMB4XDTI2MDkxMTIxNTIzMloXDTI2MTIxMDIyNTIzMlowLzEtMCsGA1UEAxMk
MjUyOTQ2MGYtODI5My00ZDM4LTgzZTctZTYxNzQzYWZhYmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKKhO0R879vtFbk7rqF0pen09wL9N90YP3p2
2BqREmVCb5ie8qv96r+g9G9pdpxxbV97GktcSuFX5Y8XtbV+sV5jApwD4R8gjTS/
aROZd9wlis9UQYGv4iZrK34ZdtoQAikwN+R0DCbqg6qZrp3pZkZBYfEXSVvba/gX
m76tK96qI4jRnk3Ffg4xuFlnOHwOsDgjc191WhL9tmrcX0Zqid4wqVDiPN96vEXC
6UdAKhRMwkN1qg98JE3y+F1E10J7orHmbZ0PBBw0+x8IU5qv7It2CMVaB1EJNiic
FzgarWdiKLKVGqrGqhSTQEX0Az7kowTcCmSXeUR9aBodYRa5mQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFII+nPjEqVU+PLzkIbmLoYt4E7VDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2
MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvYmMyZjA2MDMtMWI0NS0z
MTk5LThhOGMtOGZmMmJkZTA4ZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm
ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj
ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz
MjE3Y2U4OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYAnWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABzTJAie6sEx13/9F/UQYeotVRqaUPcL8rWSOzQPx4+vpJH8B9MasBYO
FrfScAMqXAyJZ30mQN/kyo8uNf6I0wR5fzYzC5zr3dgGuHlLddI2qMqw6MVSEsMM
1PY3461YFjGdd/DTbnhmtIEevtaE6np0sUOwoNBWqcE+KNDxq7qmUgwQvyhv6kDX
8vvrC5o/lBfgBjQI1CMa07+t3yx+ecsnhiLEdlYEpERoU9f4Wt7lwMpQjiim33Zy
o5lxPIj/w+M/pd3tnRZGclowC34q+5qRD2m6+FELuoEaGzRvTHPyXCMyXBvF0SlL
bU8ww/isxjkpEYFLzKKdFR79li/WgXs=
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:06:34 2026 by rpki-client