Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b295a13e-713d-3235-9238-effc242ad75e.roa
File:                     b295a13e-713d-3235-9238-effc242ad75e.roa (raw, json)
Hash identifier:          lTbH3ONxu3SeUQiKCk0IO+7MkBvYwCKHgBahQSNKJ3s=
Subject key identifier:   90:73:EE:A1:10:72:52:14:BA:6C:67:9D:75:75:04:75:0C:28:8D:B6
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584EA9D9B1F852737DE0EAD7BF80
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b295a13e-713d-3235-9238-effc242ad75e.roa
Signing time:             Wed 29 Jul 2026 20:58:45 +0000
ROA not before:           Wed 29 Jul 2026 20:58:45 +0000
ROA not after:            Tue 27 Oct 2026 20:58:45 +0000
asID:                     54778
IP address blocks:        67.128.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a9:d9:b1:f8:52:73:7d:e0:ea:d7:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Jul 29 20:58:45 2026 GMT
            Not After : Oct 27 20:58:45 2026 GMT
        Subject: CN=1d9dd84e-4bd6-4fb1-a27c-aef8a0b66597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:88:08:10:b1:b4:fb:f7:c8:c9:03:ae:8d:38:
                    bf:bb:2d:1b:89:63:6b:a6:42:3d:dd:86:4c:5e:01:
                    34:31:62:29:a1:f1:b4:7a:13:2f:2d:96:ac:f7:4a:
                    c9:30:20:6f:cf:81:38:00:c6:4e:df:9a:e6:84:1c:
                    3f:04:5c:55:28:b4:3f:af:e0:25:13:5d:5e:f0:98:
                    2c:fe:e8:a6:f8:2e:dd:c1:b0:a7:da:b7:54:19:56:
                    e6:05:c7:c6:f3:f9:f8:e7:d6:86:e1:03:2d:9b:bb:
                    67:1b:7d:3c:cb:d3:29:04:d1:d4:d9:03:ba:62:b1:
                    67:88:cf:6a:87:85:a4:b9:3e:49:9a:e8:e7:11:76:
                    d1:a4:3a:30:df:18:e7:17:79:21:cb:62:30:13:0e:
                    2a:7b:f1:71:39:ac:1e:0d:0c:ba:8e:94:06:c7:fa:
                    3b:77:d8:fe:ac:64:bb:91:3e:bc:e6:51:19:44:03:
                    27:86:0e:0b:3a:d7:73:35:52:92:d4:8e:70:79:fa:
                    11:3e:70:27:cd:eb:91:51:b8:93:13:cd:a8:3a:ab:
                    ab:61:e2:c9:66:3d:61:a9:16:6f:72:1a:92:05:77:
                    67:9f:ad:71:cc:8b:a1:e2:e6:9e:41:ce:b7:a6:d4:
                    99:64:cc:cf:76:da:f2:87:47:4d:a6:99:ff:8e:a6:
                    88:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:73:EE:A1:10:72:52:14:BA:6C:67:9D:75:75:04:75:0C:28:8D:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b295a13e-713d-3235-9238-effc242ad75e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.128.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:c2:f5:72:db:54:2a:e2:73:33:5a:80:4c:49:98:83:35:8d:
         9c:d9:70:03:e4:19:25:95:20:e6:86:78:e0:7c:81:59:fa:c5:
         d8:01:13:d9:19:95:19:26:9a:08:dd:14:30:a5:f2:3d:d4:52:
         56:b4:a0:5b:e0:c0:46:e7:10:c7:48:bc:b6:a2:a3:60:12:1b:
         34:f0:1d:90:97:c3:a9:e0:1f:b0:b5:65:a0:49:33:d8:a5:a4:
         6d:88:8a:0e:18:38:25:90:3f:99:ac:99:38:61:30:47:0d:a9:
         dc:56:5a:30:75:01:ff:8b:cb:7e:42:b2:4c:ce:a6:f6:a0:04:
         82:4f:f6:3c:f3:30:ff:b7:cd:c1:a9:cf:00:30:50:da:0d:40:
         30:06:d6:38:a9:80:f8:35:32:f3:52:71:b8:2d:26:6a:fa:6e:
         b7:75:5f:2a:3c:98:2d:c6:c6:8a:28:40:c0:f4:51:6e:f3:9f:
         81:5c:79:0e:94:80:bd:10:51:ee:5e:e3:82:dc:40:e4:e7:0c:
         e4:6c:89:7e:34:42:55:91:59:ee:e9:94:c6:01:2b:da:a1:39:
         18:a1:f9:23:a4:74:80:9b:28:15:5a:14:e9:72:c9:bf:b2:2c:
         9a:7f:40:28:b5:e4:02:85:71:de:34:f4:1d:3a:e0:39:79:29:
         ec:ef:ae:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:40:01 2026 by rpki-client