Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/921fd0ed-93df-36db-807d-72ec839c9541.roa
File:                     921fd0ed-93df-36db-807d-72ec839c9541.roa (raw, json)
Hash identifier:          b3v91yje/Zx0p4nsEIYDbB1MeWDLOm+824nzWTUc0G4=
Subject key identifier:   AA:68:B5:03:71:18:20:50:80:CC:EB:02:B6:7F:4F:25:98:01:E7:0C
Certificate issuer:       /CN=dba6a643-b5d0-4f09-8e60-e82ba1eb7848
Certificate serial:       010D0C9F4328584E0006280AFB3AF3B19F5702A0
Authority key identifier: 35:7F:A0:24:D8:87:21:3B:59:64:E8:FB:42:28:35:80:AE:5D:53:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/921fd0ed-93df-36db-807d-72ec839c9541.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     14537
IP address blocks:        162.250.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:28:0a:fb:3a:f3:b1:9f:57:02:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dba6a643-b5d0-4f09-8e60-e82ba1eb7848
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=39c60988-9867-4127-b4e6-63fa713edbdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d0:9d:1d:46:d7:6d:2b:a4:64:9a:d4:7a:77:
                    2a:89:4a:01:9d:55:93:1a:30:3c:f6:86:f9:e8:95:
                    8c:28:d6:6d:1f:e8:ce:c0:70:47:da:77:df:22:e2:
                    c3:96:48:59:a8:d0:fe:b2:de:2b:5e:70:d8:bb:23:
                    57:05:14:f8:48:e8:9e:e0:ef:71:01:ee:fd:b6:20:
                    a0:27:c9:f7:fd:fe:af:94:79:ac:49:0b:e7:ce:c4:
                    25:63:b1:e9:04:0a:41:3a:b6:4d:44:aa:e4:c9:b3:
                    98:f9:31:4a:45:24:49:ff:08:c6:86:d6:c9:6b:7d:
                    78:52:03:ac:18:b2:54:7d:a3:e8:06:38:f8:e6:bd:
                    83:d0:6b:14:82:2e:36:56:e8:17:7d:10:77:a6:b0:
                    a3:f4:ca:96:07:06:7d:7b:b9:e9:1d:d7:6a:66:5e:
                    d0:4c:ab:26:47:c5:75:58:fc:18:a9:f8:ec:bd:2b:
                    5a:28:ef:e3:5c:df:2e:24:b6:ff:5a:57:41:87:ad:
                    0d:ba:64:80:2e:0f:76:c0:e2:ef:c0:49:bd:f5:c2:
                    28:c1:40:b6:e3:dd:b1:fa:55:db:83:2d:38:4d:c1:
                    02:b5:89:dd:85:15:0e:e6:8d:77:4a:68:fd:0e:ef:
                    6a:db:46:48:4c:77:ec:5d:51:30:04:b2:0d:2a:e0:
                    16:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:68:B5:03:71:18:20:50:80:CC:EB:02:B6:7F:4F:25:98:01:E7:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/921fd0ed-93df-36db-807d-72ec839c9541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.crl

            X509v3 Authority Key Identifier:
                keyid:35:7F:A0:24:D8:87:21:3B:59:64:E8:FB:42:28:35:80:AE:5D:53:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:0b:b5:da:bd:cf:14:22:20:ab:35:49:78:84:6d:3b:d2:db:
         7e:0b:5f:4b:80:49:98:51:69:a2:c9:70:c8:89:6c:44:30:ae:
         83:7e:1d:be:ed:bc:5f:e0:32:0b:ab:d2:69:f9:bf:be:4a:0a:
         7c:e5:4d:a6:1d:e3:06:c7:65:ba:8d:3f:19:70:d7:c3:82:3b:
         f9:06:ef:87:d9:04:c0:87:b0:3f:b6:03:1d:2a:fb:6b:05:12:
         39:b5:d9:39:83:90:60:6e:7f:82:53:15:86:3b:ca:ab:74:04:
         a1:07:00:ed:8d:fd:21:25:61:14:74:29:78:ed:59:20:d7:4b:
         60:d4:b0:df:d9:36:4b:5a:90:44:ab:91:84:54:62:f5:35:36:
         3c:0a:f0:e4:6d:0c:cd:c4:cb:ea:aa:d4:39:2a:27:0e:3d:f5:
         db:2e:04:0f:ae:be:b8:26:74:ed:6a:68:00:5a:a6:ee:a0:0c:
         e8:36:6f:34:32:7b:7e:f8:82:29:72:52:a5:b2:b3:20:98:1a:
         7f:09:92:80:34:51:73:06:d6:6f:43:1f:99:b1:30:6c:88:3d:
         a9:b8:4b:f9:74:84:97:51:77:82:c8:94:17:38:a6:0e:91:aa:
         3a:50:c5:3c:fa:18:a1:c7:a6:6a:3d:24:f1:33:cd:64:56:cc:
         eb:22:81:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:09:37 2026 by rpki-client