Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/23efa9ca-27b1-3dec-8ab8-434288fce699.roa
File:                     23efa9ca-27b1-3dec-8ab8-434288fce699.roa (raw, json)
Hash identifier:          x56XQ92AZeU6NYBJA8jvF+dR59lgmBf2KNNe0/EBYj8=
Subject key identifier:   2C:26:59:39:76:18:10:47:4D:42:19:CA:75:4A:49:D3:F4:E2:5E:DA
Certificate issuer:       /CN=459d6e61-8613-4289-be34-cb0fe0aeea6e
Certificate serial:       010D0C9F4328584DFBD5E4601AB8D64796275280
Authority key identifier: E1:C0:D0:3E:00:4B:61:63:4A:47:1D:5B:23:44:2D:84:7A:F9:6B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/23efa9ca-27b1-3dec-8ab8-434288fce699.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     31919
IP address blocks:        162.250.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:e4:60:1a:b8:d6:47:96:27:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459d6e61-8613-4289-be34-cb0fe0aeea6e
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=57210b96-eb99-4765-98fe-fb9e247d9cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:28:11:96:63:33:91:f1:d7:5a:c2:72:c1:5e:
                    31:65:11:16:f2:1b:0c:22:17:da:92:10:91:d6:52:
                    a8:3d:2a:73:ea:91:68:b2:05:20:47:12:4d:b7:9e:
                    e2:fb:38:87:c0:51:85:e4:dc:4f:06:94:5e:5d:53:
                    da:cf:06:b5:dd:de:4e:14:a6:7f:15:68:18:63:7f:
                    b2:12:f5:1e:03:bb:6d:a0:ec:57:15:15:c5:3a:f8:
                    dc:6d:e2:40:99:ac:2a:15:53:50:0d:20:d4:28:92:
                    3b:69:83:9b:46:33:db:f8:e6:77:15:f8:cd:1f:2a:
                    bf:02:90:e8:e2:4a:0a:3d:f8:68:ed:af:51:ed:90:
                    05:a2:cc:03:b3:c5:3f:ae:43:b5:a2:21:42:64:78:
                    b9:80:8a:f7:00:dd:82:5f:59:7b:cf:5b:45:e3:6d:
                    73:99:f4:87:82:65:a9:a4:a9:bc:fa:5a:c8:4a:bd:
                    10:16:db:c0:fe:6f:a6:83:54:5f:6f:94:35:59:85:
                    a4:54:1f:1c:ed:7a:ce:03:19:2f:8d:83:7b:c1:7a:
                    47:70:93:3e:e2:23:c6:75:18:27:a5:4a:b4:d1:fd:
                    ae:0c:ce:24:e5:65:ab:40:a2:11:7b:d0:69:5a:d4:
                    d4:86:78:0f:12:3c:fc:d1:6c:a4:ef:50:d9:9e:c6:
                    c7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:26:59:39:76:18:10:47:4D:42:19:CA:75:4A:49:D3:F4:E2:5E:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/23efa9ca-27b1-3dec-8ab8-434288fce699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C0:D0:3E:00:4B:61:63:4A:47:1D:5B:23:44:2D:84:7A:F9:6B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:cc:55:a5:01:f5:94:8c:08:61:c3:b7:ac:b6:66:ea:8e:64:
         32:4f:22:59:85:26:3c:8b:1e:60:fe:ae:39:9c:48:c9:bc:fc:
         43:06:3f:e4:33:ca:38:01:0a:d9:02:01:d8:dc:d6:c8:6f:00:
         d6:11:92:e1:e9:57:a9:49:2e:d5:06:95:be:9e:1a:32:5f:da:
         20:b4:f5:dc:39:fb:0e:2b:47:2c:5b:51:ab:fc:47:bc:bf:0e:
         30:f8:60:69:b2:33:43:68:6c:e8:26:b5:30:7c:ba:88:86:ed:
         d0:26:69:ea:02:c2:35:d2:c0:7c:09:2e:d0:b5:c5:fe:e8:eb:
         0e:8c:b2:1e:e5:59:f1:9d:96:84:c6:81:d9:b8:7f:73:f9:1b:
         60:5f:90:80:d1:9e:e4:d9:f0:95:d6:b8:ab:7d:a1:f1:e5:b3:
         e5:da:9c:e2:de:2e:69:45:15:5d:ff:14:a3:5d:d0:84:8c:ee:
         9e:71:12:c7:0f:45:1f:7b:ac:bf:ff:98:16:09:b1:ea:92:58:
         d9:9f:17:5c:9f:37:79:46:cc:d1:f3:13:56:8b:08:47:9a:08:
         44:4b:2c:06:a6:a2:bf:3d:68:a3:3b:9f:c4:df:0e:03:63:58:
         70:04:2a:27:36:e4:49:3a:e0:52:43:43:63:03:a4:75:e1:ee:
         70:f8:88:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:46:02 2026 by rpki-client