Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/17ca897d-f383-3f1b-bf22-e3cd1afc8618.roa
File:                     17ca897d-f383-3f1b-bf22-e3cd1afc8618.roa (raw, json)
Hash identifier:          lW/5apjev8UTQg9em3S2/+wgMxjxZ08gNuYuacHdCh4=
Subject key identifier:   FF:5E:87:72:29:A0:05:64:AB:27:B4:04:1C:50:87:69:0C:A5:64:9C
Certificate issuer:       /CN=9e36a683-142b-41cd-932c-e115603de431
Certificate serial:       010D0C9F4328584E253F00B988CCF4A27D800880
Authority key identifier: 5B:80:E2:B1:A5:A1:53:32:EC:8B:61:F2:F9:99:5D:66:E3:D0:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/17ca897d-f383-3f1b-bf22-e3cd1afc8618.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     16509
IP address blocks:        209.163.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:00:b9:88:cc:f4:a2:7d:80:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e36a683-142b-41cd-932c-e115603de431
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=87f55426-f194-42b9-a308-0df27a1d17a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6d:91:35:21:2a:f3:66:aa:96:87:43:b3:1a:
                    44:95:b2:43:ab:d6:40:ff:49:eb:fe:5e:83:ba:81:
                    98:d1:d2:f1:8c:da:59:87:e2:68:ae:62:0e:33:35:
                    53:ab:5c:29:06:7c:58:34:ee:bd:07:0c:ed:56:fd:
                    84:c8:f8:37:7f:76:ac:e0:bb:c1:08:7d:9a:f5:6f:
                    28:cd:18:40:9f:30:6e:38:81:7e:74:ff:c1:b7:29:
                    89:f2:52:e3:9c:7d:c8:c6:70:fb:5e:77:6c:98:21:
                    36:fd:f3:2b:75:f1:48:39:1e:bc:22:48:5c:61:48:
                    18:10:b3:be:11:57:26:27:ff:7a:8b:ed:e6:b4:9c:
                    db:f3:22:d0:b7:a5:52:ba:ad:37:a8:82:e6:76:3d:
                    d5:f7:a4:9d:42:1a:52:18:78:e8:de:3b:83:06:45:
                    ce:05:b3:81:e6:c3:be:8b:39:5d:35:5c:76:83:63:
                    5f:0d:e2:01:62:ca:69:af:92:1a:da:dc:17:74:22:
                    da:54:0c:a3:ac:ea:98:ad:60:a9:81:2c:35:c9:71:
                    bb:c6:31:f2:1f:e2:64:63:09:47:af:e3:2c:f7:30:
                    0f:9d:77:9a:0d:c4:bb:08:37:39:fe:0c:54:16:6e:
                    27:90:61:14:c7:59:bb:41:42:f6:35:61:c0:ec:73:
                    64:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5E:87:72:29:A0:05:64:AB:27:B4:04:1C:50:87:69:0C:A5:64:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/17ca897d-f383-3f1b-bf22-e3cd1afc8618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.crl

            X509v3 Authority Key Identifier:
                keyid:5B:80:E2:B1:A5:A1:53:32:EC:8B:61:F2:F9:99:5D:66:E3:D0:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.163.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:9d:97:25:b3:33:b5:f6:81:a3:51:c1:8f:ba:a7:59:f7:69:
         89:95:34:12:e5:94:20:fe:dc:a2:6c:f0:fa:ff:55:35:6a:66:
         12:20:57:d2:b6:6d:1d:b5:ea:97:14:cb:40:69:74:aa:35:31:
         6b:94:ba:4c:77:ad:2c:d7:b8:e9:73:8e:80:67:0a:cd:59:da:
         ab:1d:c8:45:b2:da:c7:67:fb:df:a0:56:cb:79:1a:fd:a1:74:
         9e:a5:37:09:90:be:08:7c:e3:a6:4c:2f:c9:47:7e:9d:63:06:
         1f:b6:15:8f:47:8e:0e:ee:d4:08:12:c1:84:31:19:75:8b:14:
         d9:f1:2e:8c:d9:70:8f:50:86:50:3f:3c:03:bc:79:81:e0:a3:
         b9:a9:31:38:a3:8d:c9:a2:58:53:e9:1f:c7:c9:1c:e9:b9:ae:
         16:61:f9:5e:e9:79:45:72:a4:8f:18:21:71:2d:dc:e8:69:9e:
         c8:85:bf:e2:d9:25:23:c0:27:54:39:67:45:32:1b:65:00:3a:
         29:ec:87:ee:1b:58:9e:ef:3f:4d:ab:73:09:4a:e8:3a:ae:ed:
         53:cf:b0:02:29:a3:18:55:10:01:34:f3:e4:4b:5d:90:b5:dd:
         c9:23:d9:10:ce:79:ee:35:32:2b:78:91:73:bc:91:41:0a:f2:
         96:6d:b4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:55:16 2026 by rpki-client