Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/4881b69d-ecc8-33b7-bd25-494a524dc547.roa
File:                     4881b69d-ecc8-33b7-bd25-494a524dc547.roa (raw, json)
Hash identifier:          pfBvVJLVenVI04cpKK57v4fT8f/InFGuQZMdig9gwJs=
Subject key identifier:   25:5E:25:38:63:70:14:09:81:C1:9B:8F:E8:B4:C5:F1:91:18:50:BC
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584EC4D70F23D9412D1D30190980
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/4881b69d-ecc8-33b7-bd25-494a524dc547.roa
Signing time:             Sat 08 Aug 2026 13:00:11 +0000
ROA not before:           Sat 08 Aug 2026 13:00:11 +0000
ROA not after:            Fri 06 Nov 2026 14:00:11 +0000
asID:                     400530
IP address blocks:        63.234.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c4:d7:0f:23:d9:41:2d:1d:30:19:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Aug  8 13:00:11 2026 GMT
            Not After : Nov  6 14:00:11 2026 GMT
        Subject: CN=eb5e7055-8ade-440a-860b-0b68b9a491b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a2:72:a6:59:c0:17:e6:3d:91:f2:12:21:ee:
                    fb:af:1b:06:1b:8b:df:a1:37:a6:87:06:8e:ec:41:
                    fa:f6:c5:ed:52:fb:8e:7c:46:e5:9f:f3:ef:26:ea:
                    46:36:5c:f4:d8:85:da:d3:af:2b:d2:de:ff:95:c5:
                    dc:c8:ee:3f:28:48:9a:89:4c:46:e1:ed:ac:7a:4e:
                    e1:9e:44:66:9a:66:1c:ec:8f:5e:ff:cb:11:cb:68:
                    f1:b6:cd:b3:b8:9f:f0:78:ee:8d:2d:72:76:5c:a9:
                    39:b5:3d:01:39:40:be:79:24:06:c5:66:14:d7:12:
                    3a:e0:8e:79:e4:6d:40:06:bc:66:d8:cb:01:db:8c:
                    8f:99:0f:bf:7b:5f:a4:10:fc:e2:74:79:f5:d4:7f:
                    ec:bd:26:84:d3:55:8c:30:4e:34:8f:ce:71:b4:df:
                    5b:7f:92:ac:88:26:68:ec:52:2f:62:50:35:54:51:
                    1f:1a:2c:96:0b:58:a0:a1:6b:99:b5:93:17:b5:c8:
                    96:66:af:d4:38:01:31:ae:0e:25:3b:c0:65:38:b1:
                    53:21:2b:9a:c5:b8:29:5f:78:35:58:27:92:69:87:
                    e0:cc:30:22:e8:94:4e:11:d4:d6:32:6e:46:e8:aa:
                    3e:24:41:76:50:3f:d5:f3:69:36:a7:f2:10:bf:ee:
                    a2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5E:25:38:63:70:14:09:81:C1:9B:8F:E8:B4:C5:F1:91:18:50:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/4881b69d-ecc8-33b7-bd25-494a524dc547.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.234.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:cd:06:a8:25:01:a9:0b:8e:b4:d4:e6:ab:55:95:34:a0:40:
         4e:61:05:4a:e7:48:05:8e:6c:bb:81:85:d2:ff:f8:40:44:39:
         bf:ab:9c:60:c7:29:df:cd:6b:d2:30:f1:34:0a:95:b6:b7:85:
         95:ce:81:a9:28:9c:c0:20:04:95:43:16:a6:49:e4:c5:50:58:
         11:62:00:e6:2a:c8:21:ea:e9:70:82:4f:57:0d:48:02:93:ab:
         4f:e8:f3:8b:74:f4:04:9e:57:7c:7d:2c:ea:95:ce:91:21:32:
         55:4f:bc:e9:6d:92:12:54:7d:fa:b9:08:1b:37:04:f4:9c:21:
         36:14:57:28:6f:08:5b:4c:38:1c:03:e7:bb:ac:d6:a0:86:f9:
         53:30:c0:86:fc:ef:c5:bf:49:a5:16:0d:8b:5a:35:89:4a:70:
         10:73:6e:d4:e1:73:ee:21:3c:86:d4:ff:15:69:1e:3b:dd:1f:
         78:0f:41:5a:e6:71:98:83:1b:e7:bf:ae:64:b4:a2:7a:bc:fc:
         52:72:1a:52:50:17:f0:29:36:c1:7a:c2:6b:d2:76:89:07:fa:
         29:05:e4:79:88:71:a7:0a:43:7f:f8:f8:7b:61:73:a2:60:8a:
         98:2f:a0:88:8d:cc:64:4b:96:3b:20:d0:d0:5c:2e:d7:97:12:
         82:26:27:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:39:51 2026 by rpki-client