Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/417fabdc-4777-363e-8d86-e1024785259b.roa
File:                     417fabdc-4777-363e-8d86-e1024785259b.roa (raw, json)
Hash identifier:          vli4T/AJouR5C9sSlFsPemF+zlb82rqRgDTITeTS+Gc=
Subject key identifier:   27:5B:BD:E3:76:8D:61:C3:74:40:48:6D:50:F0:84:71:9B:B6:8F:AD
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584CE1FCBEA3F8DEA6C93F9BD920
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/417fabdc-4777-363e-8d86-e1024785259b.roa
Signing time:             Mon 16 Feb 2026 14:00:40 +0000
ROA not before:           Mon 16 Feb 2026 14:00:40 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     20166
IP address blocks:        63.239.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:fc:be:a3:f8:de:a6:c9:3f:9b:d9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Feb 16 14:00:40 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=41f37261-2957-4695-9546-1aa143b27284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dc:44:82:b2:21:3b:83:6e:e5:19:ae:85:38:
                    49:ae:9a:67:6e:e1:af:9f:0a:21:e1:3e:06:b2:7b:
                    5d:64:b6:0f:6f:da:7d:62:ac:e5:25:9a:75:23:bf:
                    45:2b:12:4e:f9:e1:a4:ef:3c:25:19:3e:05:c9:80:
                    7e:71:d6:65:93:6c:9c:8d:3b:46:96:6c:02:cd:77:
                    32:fc:f4:8f:e3:6a:55:fa:dc:b5:b2:8b:42:61:90:
                    38:34:72:4d:a7:c9:cc:ea:0a:94:bf:6e:7f:ba:33:
                    50:ed:3e:70:21:35:17:f8:b2:8b:08:74:84:23:eb:
                    01:69:4c:f2:13:ba:a1:ab:92:95:e2:47:ab:4b:fd:
                    a1:39:28:e4:a0:70:a8:00:d9:69:69:01:05:49:40:
                    e6:c6:ac:6c:3a:a4:2e:a7:b9:2e:84:89:a1:47:26:
                    f9:ea:da:95:1e:a6:af:6e:9a:29:07:ae:9c:50:18:
                    3d:27:f9:8a:75:6b:fb:b5:70:d6:c0:c3:f8:20:8c:
                    76:74:3d:2b:0f:3e:e2:cb:5c:cb:a9:9c:15:20:ab:
                    83:e3:c6:b3:41:d2:b9:a7:62:49:f8:1d:79:8d:90:
                    20:4a:8d:e7:5d:c9:54:d8:b7:3a:4c:9f:4a:18:47:
                    04:79:b2:d6:e7:58:7b:5a:30:2a:7c:b5:b6:e0:82:
                    3c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5B:BD:E3:76:8D:61:C3:74:40:48:6D:50:F0:84:71:9B:B6:8F:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/417fabdc-4777-363e-8d86-e1024785259b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.239.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:13:ea:b1:4a:6d:6b:9a:8f:96:cd:b1:03:35:ca:4a:5d:b2:
         42:7a:0a:32:8c:84:81:51:4a:bd:0c:67:d6:f1:01:77:1e:d0:
         34:fe:08:9c:a3:e7:05:49:50:4b:48:a4:b4:fd:f6:10:93:b1:
         28:d1:ef:2b:39:fb:aa:26:84:af:09:ad:2c:64:da:78:67:96:
         fd:dc:0b:32:05:a7:da:65:03:d2:bc:d8:57:cd:b8:28:a2:06:
         52:3d:49:ef:48:1f:3e:ae:eb:32:60:7a:c1:48:9b:4a:c7:7e:
         46:4a:b6:00:b2:71:85:01:21:66:8b:16:89:50:18:f9:55:24:
         b1:da:d5:d9:7a:7e:8d:e1:d8:4e:e8:01:4e:50:42:ec:4e:5e:
         9e:92:f7:8a:db:d6:72:ff:e4:84:bc:03:87:f4:aa:b6:fb:92:
         5d:e2:f0:04:97:dc:0a:28:20:65:ce:dc:65:4b:2c:d8:2d:50:
         59:93:5a:32:77:e7:23:5e:ec:33:e5:16:94:69:f3:3a:90:c8:
         ef:e4:d8:2d:3a:ab:14:c3:f8:99:58:25:dd:22:29:a1:5e:7f:
         ec:6a:f5:68:46:5f:44:9d:a7:ec:7a:0d:38:01:c1:91:d1:aa:
         0b:68:29:54:24:4b:00:72:f5:7b:50:75:13:82:1f:1c:b1:4e:
         fa:85:06:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 18:29:12 2026 by rpki-client