Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/efac39e6-7c8c-3202-8590-cf9dcc302c63.roa
File:                     efac39e6-7c8c-3202-8590-cf9dcc302c63.roa (raw, json)
Hash identifier:          4BWVqc6P8ChN8Z6L2KzJTs1BeIOmv82rO+lsw2Rm23c=
Subject key identifier:   7A:D0:32:86:F1:00:12:AE:01:E6:A6:1B:1A:C7:92:E4:A4:AE:44:E7
Certificate issuer:       /CN=628f1b90-aa4f-4bf4-9b08-6c2ba4a51659
Certificate serial:       010D0C9F4328584CF58797845B99776D5EDD4880
Authority key identifier: 82:8D:F8:35:71:30:E9:BC:84:5B:0B:50:59:E3:B8:25:D7:CA:0F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/efac39e6-7c8c-3202-8590-cf9dcc302c63.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     63023
IP address blocks:        23.157.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:97:84:5b:99:77:6d:5e:dd:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=628f1b90-aa4f-4bf4-9b08-6c2ba4a51659
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=ec8d5a93-ae4d-4a19-865f-b8c3b8cc4bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fc:27:a2:d5:12:ad:00:dd:a1:9a:7e:d9:f4:
                    24:17:6d:f0:37:72:ef:f4:d8:73:ba:85:41:51:d4:
                    07:2c:b9:a5:39:06:43:c9:28:a5:97:2b:7d:7e:4a:
                    d2:e3:8d:95:3b:6d:23:89:86:e6:e6:01:6e:2f:f7:
                    94:60:ff:11:c7:ee:94:3b:4c:2d:e9:a2:58:6a:96:
                    ad:8a:f8:b7:5e:b2:dc:82:c0:ad:0a:93:76:14:37:
                    65:03:53:47:f7:e2:ed:bc:1d:e6:36:77:4e:5f:58:
                    ba:4c:72:8a:24:dd:d3:c7:41:45:8a:9c:54:2f:f6:
                    5c:2e:3e:89:4e:bb:e3:f8:b6:b7:9e:8e:36:aa:b4:
                    dc:7d:9e:d8:5d:cf:03:d9:78:e9:24:77:ae:00:93:
                    8c:33:a0:a3:df:83:55:23:af:d5:19:7e:29:2c:03:
                    16:80:9c:9d:79:d4:28:e7:7d:33:5d:71:f4:10:9b:
                    a2:d4:7c:f0:da:03:a8:a4:f7:e2:2d:7d:9c:86:73:
                    56:5c:71:58:01:7f:13:04:25:c8:86:67:5f:64:97:
                    a0:6b:4b:f5:11:1a:9b:70:20:f1:8c:a1:aa:f6:a3:
                    e5:84:61:a5:9c:f7:18:5d:55:c8:7c:e0:e4:4b:2b:
                    ac:9c:8f:c6:4a:28:80:14:4a:d7:38:55:98:27:f9:
                    b7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D0:32:86:F1:00:12:AE:01:E6:A6:1B:1A:C7:92:E4:A4:AE:44:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/efac39e6-7c8c-3202-8590-cf9dcc302c63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659.crl

            X509v3 Authority Key Identifier:
                keyid:82:8D:F8:35:71:30:E9:BC:84:5B:0B:50:59:E3:B8:25:D7:CA:0F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:8e:a3:b3:09:85:c2:2a:a5:e0:fe:20:63:03:fe:b1:5a:9d:
         44:7c:4f:4f:57:59:6a:55:dd:04:02:07:c2:4a:fb:e8:51:fc:
         b9:b5:b6:c2:59:ba:fc:c6:93:d5:22:f3:a1:65:51:d5:6a:64:
         51:81:d5:c5:aa:d3:24:aa:04:f0:dc:59:b7:d7:bd:59:86:27:
         02:3e:5f:c1:98:f2:9d:51:c2:0c:a7:0b:47:99:2f:b4:c0:20:
         53:d6:e9:5a:4e:1f:f7:10:8c:b4:70:00:d9:a8:5d:40:2a:d7:
         a6:ed:66:dd:66:aa:46:c1:32:eb:ec:5b:ca:76:e7:8d:f7:01:
         8e:9b:80:d4:f3:61:3a:cf:3a:88:ea:ad:fa:bd:1a:e3:25:bc:
         24:4b:5a:b8:db:00:13:3e:b4:e9:b2:5e:33:fc:ce:38:98:d1:
         73:51:15:12:55:7b:19:8f:38:20:4e:5a:d0:d6:2c:1f:e8:52:
         f9:81:5b:8c:7f:d4:59:60:62:c9:0f:f0:e6:27:62:c8:d1:68:
         01:db:ae:fd:88:65:c8:54:15:aa:eb:8c:85:9d:88:ef:34:da:
         25:94:86:56:af:c1:48:55:ca:12:c9:2d:60:5b:a9:85:5e:ed:
         23:46:92:01:6b:db:3b:a7:4a:89:97:34:70:bf:a7:af:ee:8d:
         4d:17:19:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:35:34 2026 by rpki-client