Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/04820b76-4425-3cac-b7e3-17376625637b.roa
File:                     04820b76-4425-3cac-b7e3-17376625637b.roa (raw, json)
Hash identifier:          sFxb5+PMA+Qmctce+Mtbogrn6loDebXtlgmjnbvvtAA=
Subject key identifier:   CA:A2:9C:B2:E8:27:CD:3F:81:1B:57:8E:19:92:1B:A1:FF:87:3E:3C
Certificate issuer:       /CN=260cabab-b89d-4556-b9b1-e5a87b9523b9
Certificate serial:       010D0C9F4328584DD4C071F8CFBEB39A7123B400
Authority key identifier: 80:87:C3:C4:10:0E:F3:6D:64:9B:3F:AC:82:67:48:43:74:E5:EE:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/04820b76-4425-3cac-b7e3-17376625637b.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     12119
IP address blocks:        23.249.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/260cabab-b89d-4556-b9b1-e5a87b9523b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/260cabab-b89d-4556-b9b1-e5a87b9523b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:71:f8:cf:be:b3:9a:71:23:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260cabab-b89d-4556-b9b1-e5a87b9523b9
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=470bb0d3-78e9-4fd8-bd64-8455304ffd30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:44:dd:a1:0d:b8:2c:fd:61:dc:99:4d:b7:80:
                    f5:b6:73:90:4b:0e:0d:cc:7b:2e:95:6e:7c:d3:ea:
                    95:01:d2:d8:42:fd:03:b9:2a:36:8b:55:81:2c:84:
                    63:9e:17:61:82:5a:fa:62:cc:2b:c6:d0:66:89:a4:
                    a3:16:95:01:25:ea:c4:18:7f:59:b2:59:93:ae:a4:
                    b1:02:ea:fc:c3:7f:20:b7:27:e3:f1:c9:b9:2b:e3:
                    eb:3b:52:7f:87:4c:e0:31:18:e9:04:d9:ed:58:26:
                    0d:31:7a:77:6c:1e:b6:4b:6e:f9:85:a1:9f:15:db:
                    3d:f8:f8:14:0d:5e:35:ca:26:2b:e9:e7:20:27:65:
                    e4:dd:69:cf:b0:b4:d5:fd:92:ac:2c:60:6a:81:63:
                    35:0d:89:26:9e:45:d5:2f:d4:3f:59:ce:ad:16:87:
                    2e:33:9b:ff:df:b0:97:c2:50:3e:c4:43:75:a2:af:
                    08:da:4d:6c:73:90:cd:83:3d:78:29:dd:0d:8e:c7:
                    6c:5a:1e:32:7a:dc:7b:cf:67:04:da:56:69:13:53:
                    00:b1:d3:ed:54:06:f5:b4:59:6a:e7:93:1d:aa:bb:
                    b9:ca:b2:f6:04:a6:d3:05:56:b2:b4:da:f4:36:7d:
                    a3:72:77:36:72:f9:b1:71:34:20:26:15:7d:e6:58:
                    50:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A2:9C:B2:E8:27:CD:3F:81:1B:57:8E:19:92:1B:A1:FF:87:3E:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/04820b76-4425-3cac-b7e3-17376625637b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/260cabab-b89d-4556-b9b1-e5a87b9523b9.crl

            X509v3 Authority Key Identifier:
                keyid:80:87:C3:C4:10:0E:F3:6D:64:9B:3F:AC:82:67:48:43:74:E5:EE:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:b2:1c:23:d2:79:2f:50:8a:e5:21:41:47:8c:b5:0d:2e:aa:
         6a:08:ec:4d:a6:60:86:7a:02:f0:f2:44:9a:a3:45:76:8c:db:
         8b:37:5d:42:76:74:54:88:30:b9:76:a6:e0:97:3c:73:70:45:
         5a:28:8c:39:5d:42:b2:46:c4:cc:db:cc:05:b1:b9:cb:87:4d:
         4c:a2:d9:1d:b2:d3:e4:c0:19:e4:f6:2e:c3:2a:ba:b5:08:e2:
         d5:45:1f:e4:64:8c:6a:7c:3a:41:47:70:4d:78:13:7f:62:2a:
         87:a9:35:d5:09:2e:8b:42:5c:ac:b4:42:0d:95:77:a1:08:64:
         7a:41:f6:f2:b3:c8:9a:45:b7:83:4a:ff:e1:62:1d:bd:41:4f:
         f0:99:51:2e:07:aa:32:f8:e9:a0:61:91:a1:89:71:66:9b:24:
         f8:f7:62:48:2c:d1:97:7c:03:0b:dc:5e:ae:e4:60:3c:79:e3:
         13:33:bf:f7:95:a5:6c:68:02:fc:df:cd:d9:be:16:5f:40:60:
         b2:5c:18:61:78:c3:8c:28:50:4c:85:51:81:df:38:59:ea:a4:
         a8:8a:66:44:72:20:2d:41:9d:a1:ba:b9:ab:f0:72:1a:4c:a1:
         5d:f8:98:79:7e:42:29:54:bd:49:34:75:79:07:b2:12:01:21:
         0a:60:bc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:42:58 2026 by rpki-client