Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/0696b336-b913-37b8-beab-1433b280ea8b.roa
File:                     0696b336-b913-37b8-beab-1433b280ea8b.roa (raw, json)
Hash identifier:          8RNFtuUc8aNCK1waX10l6TEPKEogTlXF1lA5k/LlaAk=
Subject key identifier:   D3:3E:C9:37:8D:FD:C4:79:9F:2E:8E:E2:63:C3:DD:89:97:B1:49:D2
Certificate issuer:       /CN=9f4a0908-708d-490b-9f22-60855d3d69b3
Certificate serial:       010D0C9F4328584F498AA05485C6309F4E2E7DF0
Authority key identifier: 4B:A1:AF:02:F6:57:F1:AC:8C:2A:41:4E:2F:85:84:70:50:DA:81:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/0696b336-b913-37b8-beab-1433b280ea8b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        167.234.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:a0:54:85:c6:30:9f:4e:2e:7d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f4a0908-708d-490b-9f22-60855d3d69b3
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=16b51cc6-3d7c-49fa-8ea9-0f4d0b108dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4f:bb:71:53:c5:9e:d7:77:0e:33:c8:36:f2:
                    71:0b:d5:c1:31:04:35:88:f7:31:00:35:6c:93:90:
                    8c:a0:f2:76:6f:e6:e7:45:33:21:52:42:90:40:98:
                    e8:54:e0:cf:73:94:97:67:86:22:f9:f5:2c:f4:00:
                    eb:88:7a:c0:2d:34:6d:69:ce:bf:6c:1e:4c:be:54:
                    e1:69:13:64:03:85:bf:44:2d:b7:03:5b:f7:3f:63:
                    8c:03:fd:80:04:0f:db:df:6f:3a:18:be:6c:84:f7:
                    86:6a:86:55:aa:ca:a6:e7:9b:57:f3:42:b2:a8:80:
                    eb:b6:98:55:1d:11:f7:63:5d:7f:59:d0:53:01:3f:
                    02:8d:0b:1d:84:00:39:45:e9:16:d8:ca:b0:13:01:
                    01:4b:a1:d0:3d:e5:2a:fa:5e:22:71:7b:66:c0:3e:
                    ad:53:f8:0f:80:49:0e:17:a5:34:00:76:b9:35:fe:
                    97:a2:de:9a:68:3a:76:3c:da:63:07:f7:17:ac:8b:
                    a9:91:e7:6b:33:da:34:6f:2a:ae:fb:0a:e0:8e:93:
                    b9:23:42:e8:58:d1:1f:01:4a:ad:4f:48:61:84:0f:
                    30:2f:f1:66:ca:b0:af:ea:06:7f:21:ff:bd:3f:b5:
                    20:5f:e7:c9:4d:54:38:42:b0:cf:66:5f:ff:7c:f1:
                    8f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3E:C9:37:8D:FD:C4:79:9F:2E:8E:E2:63:C3:DD:89:97:B1:49:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/0696b336-b913-37b8-beab-1433b280ea8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.crl

            X509v3 Authority Key Identifier:
                keyid:4B:A1:AF:02:F6:57:F1:AC:8C:2A:41:4E:2F:85:84:70:50:DA:81:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.234.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:73:e4:39:91:80:8b:6f:54:ab:da:68:6e:f7:83:65:22:4c:
         a0:c0:78:ad:5f:4e:b0:30:64:78:8c:0f:65:97:07:4b:79:d6:
         8c:0c:40:e1:80:46:8f:57:9a:53:09:9b:68:d5:09:60:69:06:
         b6:1a:01:62:c0:26:a8:d0:3c:07:5b:68:2b:56:fb:8f:a0:81:
         a1:2d:66:5f:94:f5:65:01:9d:d7:33:30:c7:33:b1:04:62:c3:
         59:e0:a1:9b:4a:c8:b0:ed:8c:ab:80:4d:9a:66:77:f3:1c:91:
         8d:b3:d2:0a:9a:84:b0:58:48:9d:bb:f8:9c:0c:3d:96:b8:10:
         3b:62:6a:35:d9:ed:a7:2b:0f:ed:f7:62:62:03:00:a3:91:72:
         dd:bc:eb:59:d8:79:86:1b:b0:a9:a6:56:2b:d4:0f:d3:87:5f:
         2e:d7:ba:e2:d3:d1:9d:e9:74:42:f6:fa:12:ca:d1:07:62:40:
         9e:f8:4f:70:eb:02:9d:e3:7b:e1:ca:49:f5:24:3f:6f:4d:ae:
         ca:1f:d4:3e:24:0b:47:f7:2f:4b:00:5c:db:11:ce:b8:bd:c3:
         8e:47:4f:8a:81:7d:51:27:a8:59:ad:73:48:69:55:a3:8b:3b:
         24:ed:d6:1f:1f:17:24:42:85:0a:f5:f5:75:da:1e:70:37:aa:
         38:ba:62:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:17:55 2026 by rpki-client