Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/23efa9ca-27b1-3dec-8ab8-434288fce699.roa
File:                     23efa9ca-27b1-3dec-8ab8-434288fce699.roa (raw, json)
Hash identifier:          N9ZYy1voo2cu+TER1dbf0OMZGqhn3wHdh03CnFBTxzE=
Subject key identifier:   78:74:1B:A6:A8:C1:4F:EE:85:72:B8:30:99:90:21:B4:EE:A6:FD:D0
Certificate issuer:       /CN=459d6e61-8613-4289-be34-cb0fe0aeea6e
Certificate serial:       010D0C9F432858499AF4830EB236E84B62F13140
Authority key identifier: E1:C0:D0:3E:00:4B:61:63:4A:47:1D:5B:23:44:2D:84:7A:F9:6B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/23efa9ca-27b1-3dec-8ab8-434288fce699.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     31919
IP address blocks:        162.250.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:83:0e:b2:36:e8:4b:62:f1:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459d6e61-8613-4289-be34-cb0fe0aeea6e
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=856c0930-f6ef-4116-8713-26d56fa31d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d0:bc:84:89:7a:53:84:89:81:6f:2b:81:66:
                    45:76:25:65:50:d3:b2:2a:6c:5c:fe:0a:27:d1:f1:
                    ae:2a:88:ef:fb:d0:70:f2:07:fe:21:d6:11:09:32:
                    30:d4:80:d4:c3:db:5b:96:51:e9:51:df:af:64:a6:
                    55:f0:e5:6c:42:bf:59:87:5e:dc:fe:f3:cb:74:d7:
                    33:32:3f:72:8d:5a:bd:0d:a2:22:a2:7d:0b:23:b3:
                    2f:36:71:23:3a:e6:1e:0d:7f:5d:50:e2:96:d2:56:
                    6c:86:c7:53:2c:34:42:c5:1c:6f:87:2a:4c:82:e0:
                    68:b0:90:b1:8f:b2:be:d8:c1:a1:bf:59:b0:c4:e6:
                    13:04:f9:38:c2:b9:8d:be:73:13:f9:14:ff:fd:64:
                    16:c0:31:bc:27:6c:b2:80:9e:d2:74:b2:a4:56:81:
                    8b:45:af:9b:f8:d0:17:34:e6:d3:3e:8c:65:02:68:
                    8e:a2:12:ad:9a:b1:fe:8c:43:e6:f7:74:c6:29:2f:
                    df:99:f6:35:d4:a0:2b:6f:b2:18:e3:86:34:40:70:
                    af:e6:bc:44:eb:c6:d9:65:4c:f8:88:c1:c6:bc:89:
                    f7:f9:87:3f:4f:e7:32:1c:21:26:6a:b4:dc:29:83:
                    3d:a3:a4:9b:4c:1d:e3:13:d5:3d:56:f7:cb:08:3f:
                    c4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:74:1B:A6:A8:C1:4F:EE:85:72:B8:30:99:90:21:B4:EE:A6:FD:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/23efa9ca-27b1-3dec-8ab8-434288fce699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C0:D0:3E:00:4B:61:63:4A:47:1D:5B:23:44:2D:84:7A:F9:6B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:78:86:10:dc:a1:a7:b5:af:d1:15:11:45:6f:25:03:dd:0b:
         ce:fe:b6:1b:b2:3f:62:81:a7:33:c0:6d:49:ef:25:19:ff:17:
         73:37:1c:d4:85:c6:9b:81:e5:3f:6d:3a:3e:0f:d6:ab:05:41:
         8a:68:a0:58:85:1c:63:0c:70:40:a1:1d:7e:92:2d:6c:95:82:
         d6:5b:b3:aa:ba:11:6a:64:55:7e:c5:64:e8:5f:d7:10:3e:e3:
         e2:2b:57:f4:09:04:45:fd:a1:78:b3:9a:85:72:31:cc:2d:8f:
         c0:a2:fe:57:74:9c:34:b8:66:91:13:ca:f7:be:2f:47:a1:95:
         1d:9d:40:2a:17:29:90:b0:5b:e2:e0:70:34:a8:bd:70:3f:60:
         a2:38:53:e1:1f:69:64:b3:d5:e5:a2:14:d3:f3:3e:51:5c:cf:
         11:b9:6c:61:82:75:64:db:98:d2:80:5a:ef:90:79:6b:ec:f1:
         cf:fe:54:70:2b:96:1b:0b:0e:bf:e9:c0:c1:3b:df:5b:08:9a:
         e4:67:fd:5e:53:34:73:44:a8:e8:ba:b8:93:8e:13:63:ab:c6:
         26:8a:5f:b2:05:8f:0b:92:c3:b8:a0:a3:2b:f3:05:67:92:36:
         bd:e7:ef:9d:d0:55:34:ea:ce:c0:19:00:10:47:5d:92:33:31:
         b3:50:46:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:47:22 2025 by rpki-client