Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/28eb2d19-5b28-3ffe-9401-645d2f4f9404.roa
File:                     28eb2d19-5b28-3ffe-9401-645d2f4f9404.roa (raw, json)
Hash identifier:          mqkhYZRl2OTXAch5ZHXMPh9LRsZUenqEJoTUmU5i9KY=
Subject key identifier:   E9:3A:66:FB:E1:3C:C9:41:3A:5F:2D:6E:3C:B6:9C:B2:07:6D:29:DD
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F91535EB2920F3D6C8140
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/28eb2d19-5b28-3ffe-9401-645d2f4f9404.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     19157
IP address blocks:        23.86.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:91:53:5e:b2:92:0f:3d:6c:81:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=93466418-f703-4647-98a4-d8902db87aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4d:19:02:1f:28:a8:75:d7:6b:8e:4c:80:cb:
                    61:29:68:3b:b2:ec:71:99:e4:ec:eb:84:49:b7:3f:
                    20:71:a1:18:c6:c9:4d:43:8c:1d:8c:2e:53:42:d0:
                    1e:7f:49:63:f0:40:da:ca:bc:99:27:9f:b7:44:70:
                    8e:87:4f:7e:24:05:a9:76:52:50:62:0b:2a:c6:d7:
                    1e:a5:d0:71:11:60:15:77:d0:5e:94:9d:e4:5c:f4:
                    cb:35:3f:17:28:ed:c1:50:22:8f:cc:c0:18:d0:ff:
                    14:09:3b:47:78:98:5b:05:c8:cf:30:d1:d8:1a:34:
                    94:0e:62:83:8a:e3:72:04:e3:e8:9b:fe:a1:3c:89:
                    32:83:1c:46:fb:cb:59:58:0a:64:f9:8b:5a:b7:0c:
                    6c:ad:4a:92:37:c4:db:a6:60:55:ce:b4:b7:dc:9d:
                    61:59:7b:58:46:e7:a6:d7:44:12:4d:44:b5:8e:52:
                    f0:b7:f7:42:20:a9:9c:1d:45:b5:4c:e1:02:fb:3e:
                    d8:a0:c3:7c:28:2e:3d:e3:12:43:c2:a7:5b:ac:b4:
                    59:75:21:e5:88:66:fb:c8:28:8e:47:53:8f:29:be:
                    1d:54:fa:f9:03:61:64:af:61:8e:0a:fc:06:ac:c4:
                    7d:5b:1f:95:b1:ea:a5:65:af:fb:5f:f0:10:55:bd:
                    47:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3A:66:FB:E1:3C:C9:41:3A:5F:2D:6E:3C:B6:9C:B2:07:6D:29:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/28eb2d19-5b28-3ffe-9401-645d2f4f9404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.86.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:2c:44:59:1f:4b:7c:2c:1f:3e:a6:5f:70:e1:0c:4d:f2:74:
         a2:32:cd:49:49:46:43:ba:6d:03:c1:d5:7a:72:33:ca:50:25:
         d9:4d:05:0c:2a:fd:47:f0:48:bf:f0:e0:5c:07:22:b0:9b:26:
         1f:c8:39:d6:c7:f7:a6:3c:df:36:84:fa:e2:63:99:ac:9c:46:
         8c:74:55:b2:8b:10:17:d2:e7:4e:f2:a7:bb:8a:16:e7:70:e8:
         8b:e9:f5:41:06:e8:7b:b6:fa:be:b8:12:cb:22:b3:ed:7c:43:
         5f:aa:de:85:50:c6:2f:bf:40:2f:51:44:96:63:f8:df:8e:f1:
         29:3e:0f:f2:57:72:8e:de:61:7d:c3:84:a3:fa:0d:c4:d0:07:
         43:2e:61:fa:26:7e:17:02:29:3c:bb:4f:4a:32:9b:02:76:72:
         3d:c2:69:4c:9e:22:dc:3f:59:7e:8a:09:b6:ce:9e:db:5f:29:
         0e:92:ac:97:dc:6a:e6:13:34:e0:d4:46:53:f5:c6:01:8d:30:
         1f:12:5b:c6:7c:92:fb:13:f0:04:ba:d0:98:ec:94:39:c6:4b:
         1f:50:a2:57:14:44:42:90:82:90:12:b8:1e:73:65:39:28:bf:
         04:12:3f:aa:f9:d2:3e:c5:d6:c5:bf:ad:ba:d9:13:13:ae:43:
         75:1b:2c:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P5FTXrKSDz1sgUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk
OTM0NjY0MTgtZjcwMy00NjQ3LTk4YTQtZDg5MDJkYjg3YWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU0ZAh8oqHXXa45MgMthKWg7suxxmeTs64RJ
tz8gcaEYxslNQ4wdjC5TQtAef0lj8EDayryZJ5+3RHCOh09+JAWpdlJQYgsqxtce
pdBxEWAVd9BelJ3kXPTLNT8XKO3BUCKPzMAY0P8UCTtHeJhbBcjPMNHYGjSUDmKD
iuNyBOPom/6hPIkygxxG+8tZWApk+YtatwxsrUqSN8TbpmBVzrS33J1hWXtYRuem
10QSTUS1jlLwt/dCIKmcHUW1TOEC+z7YoMN8KC494xJDwqdbrLRZdSHliGb7yCiO
R1OPKb4dVPr5A2Fkr2GOCvwGrMR9Wx+VseqlZa/7X/AQVb1HtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOk6ZvvhPMlBOl8tbjy2nLIHbSndMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMjhlYjJkMTktNWIyOC0z
ZmZlLTk0MDEtNjQ1ZDJmNGY5NDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF1YaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIIsRFkfS3wsHz6mX3DhDE3ydKIyzUlJRkO6bQPB1XpyM8pQJdlNBQwq
/UfwSL/w4FwHIrCbJh/IOdbH96Y83zaE+uJjmaycRox0VbKLEBfS507yp7uKFudw
6Ivp9UEG6Hu2+r64Essis+18Q1+q3oVQxi+/QC9RRJZj+N+O8Sk+D/JXco7eYX3D
hKP6DcTQB0MuYfomfhcCKTy7T0oymwJ2cj3CaUyeItw/WX6KCbbOnttfKQ6SrJfc
auYTNODURlP1xgGNMB8SW8Z8kvsT8AS60JjslDnGSx9QolcUREKQgpASuB5zZTko
vwQSP6r50j7F1sW/rbrZExOuQ3UbLK4=
-----END CERTIFICATE-----
Generated at Fri Jun 6 04:42:07 2025 by rpki-client