Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2dce97fc-82a8-3ee7-a64e-819e70bebb20.roa
File:                     2dce97fc-82a8-3ee7-a64e-819e70bebb20.roa (raw, json)
Hash identifier:          iP4yfnO2/IeuKy1jhyf5pfk9ILzSzz7jwZqi/FiAQwg=
Subject key identifier:   86:47:21:4D:3F:6C:61:E8:14:1C:A3:C7:09:94:BF:F4:60:A4:71:E1
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584DBBA04C688DF4FA4A4D07CEAC
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2dce97fc-82a8-3ee7-a64e-819e70bebb20.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     55044
IP address blocks:        63.238.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:4c:68:8d:f4:fa:4a:4d:07:ce:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=98d89272-34f2-43cc-89af-6e115e258cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ed:36:d6:38:3b:0c:a0:10:93:95:e0:16:d8:
                    d4:28:3b:54:12:a3:16:42:39:a1:55:f2:19:13:46:
                    51:0e:d1:9c:38:a1:02:c7:13:30:22:ad:7f:0a:f6:
                    29:c4:4a:e9:12:29:38:33:8d:b1:11:5f:fb:8b:f2:
                    0e:ce:36:46:26:fa:9f:0b:f2:31:5a:08:ac:ac:1c:
                    65:4f:77:ac:f2:ce:6a:bc:6f:95:41:37:f3:66:da:
                    9b:97:a5:46:68:9e:22:e1:98:b5:d3:85:43:28:6d:
                    a9:eb:55:b2:83:bc:b3:64:e0:80:3c:e0:59:6e:8f:
                    25:9b:48:98:c5:1f:c7:63:89:0a:8e:4a:db:50:4f:
                    cd:5d:d5:4e:99:7f:8a:e0:76:05:93:4a:61:73:41:
                    43:e2:17:42:fa:16:06:77:15:a9:6a:53:75:a2:44:
                    51:5d:63:1d:aa:16:f8:b4:6b:a6:7e:27:6a:ec:cb:
                    38:b0:34:f6:3a:b3:5b:4d:ee:78:69:64:77:a6:70:
                    27:b3:9b:ae:43:b6:94:65:7f:54:7f:9e:04:eb:64:
                    d8:04:5c:20:24:3b:50:eb:92:de:a0:99:68:01:41:
                    fd:b0:7d:9b:eb:4a:b5:5e:15:5f:5f:4f:36:06:fa:
                    ae:36:3b:57:1d:9a:ea:e3:9d:4b:72:7f:ea:7a:c3:
                    5a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:47:21:4D:3F:6C:61:E8:14:1C:A3:C7:09:94:BF:F4:60:A4:71:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2dce97fc-82a8-3ee7-a64e-819e70bebb20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.238.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:2a:f3:b1:55:f9:95:84:1b:92:61:05:b8:61:ff:99:54:91:
         98:5d:a1:ce:ed:04:9d:25:3b:0c:7e:0c:60:22:05:40:46:bf:
         b9:83:60:d3:84:0b:1f:e9:4f:10:54:d3:13:5b:53:8d:bd:92:
         68:88:74:c8:a0:2c:e6:e0:08:50:83:96:b8:ff:e5:75:ec:b1:
         6b:bb:e9:92:84:8a:b8:fd:36:93:b0:13:2a:6e:09:e8:41:30:
         e7:32:af:bd:21:54:73:cd:57:47:d5:13:88:31:ed:52:62:0e:
         7b:05:61:83:50:66:df:47:ba:4d:9d:7f:97:c9:27:0d:76:97:
         e9:01:94:f6:0b:8b:31:c0:99:93:23:dd:bc:db:cb:1c:11:76:
         66:52:02:df:cd:e7:b3:a8:9b:1e:77:9e:e4:bd:58:91:79:00:
         5f:eb:01:c4:37:01:2a:07:b9:44:20:83:06:00:a3:5d:8f:de:
         e1:8d:22:1b:ec:72:f4:5f:c2:d4:1e:2a:37:da:d4:18:66:98:
         50:63:59:b6:ff:af:3e:83:cf:55:c3:31:3b:06:7c:6a:ff:e4:
         85:84:69:92:5c:37:53:3e:3b:7a:73:7e:82:28:08:c2:5e:08:
         16:f9:05:ac:7c:c7:31:74:ed:d2:62:03:27:b6:e1:77:06:1f:
         ac:14:5e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:24:44 2026 by rpki-client