Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/96270d45-d8c3-3dee-9f24-6c293e9296fe.roa
File:                     96270d45-d8c3-3dee-9f24-6c293e9296fe.roa (raw, json)
Hash identifier:          NYvaMIi2RR8WsxrzgvrLtJMO1VONq2c8DbWLNPyJBIQ=
Subject key identifier:   E1:A4:28:BF:EC:4C:D8:32:F8:DD:C7:40:82:E7:64:09:FB:C6:D6:8F
Certificate issuer:       /CN=f9694678-237c-4d99-9589-b106509825b7
Certificate serial:       010D0C9F4328584F49743386307FEC8D1BC88480
Authority key identifier: 8B:CF:88:DA:27:11:AD:8D:37:6D:86:0D:0B:C4:6F:2C:8B:93:74:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/96270d45-d8c3-3dee-9f24-6c293e9296fe.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6762
IP address blocks:        64.255.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/f9694678-237c-4d99-9589-b106509825b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/f9694678-237c-4d99-9589-b106509825b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:33:86:30:7f:ec:8d:1b:c8:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9694678-237c-4d99-9589-b106509825b7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f364e437-4172-4545-973f-d6231bfb8702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:65:9e:2e:09:0e:1a:d2:13:07:eb:87:17:51:
                    01:04:d9:a3:78:72:f3:71:03:ed:93:11:da:a3:df:
                    a4:d5:8f:3e:c1:0b:94:db:f6:73:f9:99:0d:75:56:
                    bf:57:23:90:23:92:5b:ec:9b:62:b8:76:11:a9:73:
                    e4:61:83:90:e5:4d:26:61:06:81:08:2c:64:b9:7a:
                    c5:0a:b6:97:a0:3c:42:1e:f9:5d:d9:93:da:06:c9:
                    a5:4e:bb:d3:a9:88:bf:b5:11:df:53:4c:3d:c0:5a:
                    78:6c:f9:6c:8a:94:b6:6c:53:d0:1c:0d:6f:93:e2:
                    fa:1e:12:1b:d3:2a:03:18:38:f7:f9:a9:87:f1:92:
                    a8:12:9f:93:ff:76:a5:f5:ad:57:3c:39:94:a7:89:
                    e8:1a:e0:42:f2:bb:30:e0:86:14:55:bb:ee:c5:46:
                    fe:22:70:81:ce:04:07:8f:28:d3:dd:66:d2:77:0f:
                    f3:e4:1b:64:9d:81:c8:1a:11:62:c1:9f:df:42:0c:
                    cf:50:c8:67:3d:88:3b:5a:fb:d7:04:be:66:7f:b0:
                    64:39:25:76:c2:49:f1:59:2c:2e:c2:c6:41:dd:3a:
                    db:58:6b:12:73:d0:59:9f:92:b7:ea:ee:0e:b5:86:
                    a8:b0:78:e6:fa:8d:d2:3a:85:72:0f:35:90:b8:3b:
                    59:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A4:28:BF:EC:4C:D8:32:F8:DD:C7:40:82:E7:64:09:FB:C6:D6:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/96270d45-d8c3-3dee-9f24-6c293e9296fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/f9694678-237c-4d99-9589-b106509825b7.crl

            X509v3 Authority Key Identifier:
                keyid:8B:CF:88:DA:27:11:AD:8D:37:6D:86:0D:0B:C4:6F:2C:8B:93:74:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.255.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:9a:26:49:b9:d6:b4:cb:19:f0:75:8c:c2:c4:1b:14:e7:51:
         65:13:19:b9:c8:37:8e:aa:ac:50:0a:93:04:73:97:79:06:27:
         ba:e5:8d:44:ed:3f:9e:ce:65:1a:2e:8d:e8:37:07:41:62:e4:
         72:61:15:1d:81:09:a9:89:f7:d1:89:9e:ca:aa:7f:96:75:90:
         32:1f:3b:2a:f8:96:4e:75:c3:e2:c0:1d:df:21:fe:98:c3:9f:
         d4:68:19:45:ba:b0:46:ac:54:84:a5:9f:e6:84:8d:cf:30:a3:
         52:e7:20:6d:3b:e9:bf:ed:24:3d:75:d5:3b:5b:f2:33:be:62:
         b1:73:c5:30:ba:e9:e7:ad:21:d2:b1:01:5a:3b:d4:9e:ab:62:
         a1:e5:ee:ca:84:72:9d:ce:ad:45:cc:85:02:60:1c:87:9b:02:
         53:db:be:40:23:64:18:21:cd:35:7b:d2:44:f8:05:66:c3:52:
         c1:ee:9b:52:bf:55:1c:fd:59:63:30:9c:11:b0:b6:39:cc:86:
         1d:6b:16:0a:d2:14:87:bc:95:92:30:03:37:6f:60:39:1c:96:
         d4:3a:83:73:d7:5e:07:7f:bb:d7:2e:8d:37:23:f1:63:39:1d:
         24:43:b5:b9:a5:c7:60:8f:92:db:78:1a:ff:25:60:d0:6f:82:
         75:74:f7:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdDOGMH/sjRvIhIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk2OTQ2NzgtMjM3Yy00ZDk5LTk1ODktYjEwNjUwOTgy
NWI3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZjM2NGU0MzctNDE3Mi00NTQ1LTk3M2YtZDYyMzFiZmI4NzAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmWeLgkOGtITB+uHF1EBBNmjeHLzcQPtkxHa
o9+k1Y8+wQuU2/Zz+ZkNdVa/VyOQI5Jb7JtiuHYRqXPkYYOQ5U0mYQaBCCxkuXrF
CraXoDxCHvld2ZPaBsmlTrvTqYi/tRHfU0w9wFp4bPlsipS2bFPQHA1vk+L6HhIb
0yoDGDj3+amH8ZKoEp+T/3al9a1XPDmUp4noGuBC8rsw4IYUVbvuxUb+InCBzgQH
jyjT3WbSdw/z5BtknYHIGhFiwZ/fQgzPUMhnPYg7WvvXBL5mf7BkOSV2wknxWSwu
wsZB3TrbWGsSc9BZn5K36u4OtYaosHjm+o3SOoVyDzWQuDtZDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOGkKL/sTNgy+N3HQILnZAn7xtaPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTY5
NDY3OC0yMzdjLTRkOTktOTU4OS1iMTA2NTA5ODI1YjcvOTYyNzBkNDUtZDhjMy0z
ZGVlLTlmMjQtNmMyOTNlOTI5NmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjk2OTQ2NzgtMjM3Yy00ZDk5LTk1
ODktYjEwNjUwOTgyNWI3L2Y5Njk0Njc4LTIzN2MtNGQ5OS05NTg5LWIxMDY1MDk4
MjViNy5jcmwwHwYDVR0jBBgwFoAUi8+I2icRrY03bYYNC8RvLIuTdIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTY5NDY3OC0yMzdjLTRkOTktOTU4OS1iMTA2
NTA5ODI1YjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQP8MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANiaJkm51rTLGfB1jMLEGxTnUWUTGbnIN46qrFAKkwRzl3kGJ7rljUTt
P57OZRoujeg3B0Fi5HJhFR2BCamJ99GJnsqqf5Z1kDIfOyr4lk51w+LAHd8h/pjD
n9RoGUW6sEasVISln+aEjc8wo1LnIG076b/tJD111Ttb8jO+YrFzxTC66eetIdKx
AVo71J6rYqHl7sqEcp3OrUXMhQJgHIebAlPbvkAjZBghzTV70kT4BWbDUsHum1K/
VRz9WWMwnBGwtjnMhh1rFgrSFIe8lZIwAzdvYDkcltQ6g3PXXgd/u9cujTcj8WM5
HSRDtbmlx2CPktt4Gv8lYNBvgnV090E=
-----END CERTIFICATE-----
Generated at Sun Sep 27 03:14:37 2026 by rpki-client