Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/23627e2c-ff5c-34f6-a890-385eb1a12f89.roa
File:                     23627e2c-ff5c-34f6-a890-385eb1a12f89.roa (raw, json)
Hash identifier:          zaEqJ5U0gDLroocm3uF46Wvr7hbqyookdVZ0BhdST80=
Subject key identifier:   30:40:DE:88:64:40:A3:28:28:38:7A:55:8B:8B:22:EA:D5:0C:BE:C8
Certificate issuer:       /CN=a773147e-548c-4c30-a3fe-91c723e2cad9
Certificate serial:       010D0C9F4328584DD3C5136FD36F419B5B558900
Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/23627e2c-ff5c-34f6-a890-385eb1a12f89.roa
Signing time:             Thu 14 May 2026 04:34:13 +0000
ROA not before:           Thu 14 May 2026 04:34:13 +0000
ROA not after:            Wed 12 Aug 2026 04:34:13 +0000
asID:                     55256
IP address blocks:        162.10.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d3:c5:13:6f:d3:6f:41:9b:5b:55:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9
        Validity
            Not Before: May 14 04:34:13 2026 GMT
            Not After : Aug 12 04:34:13 2026 GMT
        Subject: CN=095ad3a4-853b-4554-9a30-ebcc22ac526e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4e:61:60:bf:c0:94:37:45:13:1f:9c:78:df:
                    84:a8:c4:0e:5d:32:fc:7c:68:be:9e:6c:aa:07:96:
                    04:11:9f:7d:e8:82:8c:01:5c:1f:29:d6:58:7b:83:
                    44:de:ab:14:a3:66:e0:30:e3:31:4d:9d:76:59:21:
                    62:ae:e4:3e:6c:bf:69:1f:4f:ca:14:ab:41:f3:b5:
                    2c:7f:14:b1:57:68:d7:be:f8:f4:01:2d:18:7a:c5:
                    7a:a9:b9:5d:aa:92:87:4f:28:27:e1:89:5e:31:82:
                    da:ae:a3:96:b8:8c:59:bf:fa:11:7c:b7:79:22:34:
                    40:5c:9e:96:15:f9:66:d9:a4:da:1c:b1:7f:82:2a:
                    88:e4:e0:90:67:69:72:0c:64:b5:48:7b:1d:90:19:
                    40:49:64:26:41:01:b8:50:62:27:89:26:ed:ff:49:
                    20:9a:8a:2b:e9:da:fe:5e:3a:d9:10:bb:d7:d2:fb:
                    fe:ae:d3:9f:70:24:be:8c:a1:c5:11:72:6c:45:73:
                    fd:9f:be:04:45:db:11:51:d9:6d:33:21:46:93:37:
                    21:f8:13:17:70:78:22:9c:f7:e1:77:3a:82:ab:c3:
                    f5:11:1e:23:d0:ca:d1:0e:1a:f3:78:4f:96:da:9b:
                    9b:29:24:ca:66:78:bb:6d:c3:22:34:2e:22:de:69:
                    ae:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:40:DE:88:64:40:A3:28:28:38:7A:55:8B:8B:22:EA:D5:0C:BE:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/23627e2c-ff5c-34f6-a890-385eb1a12f89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl

            X509v3 Authority Key Identifier:
                keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.10.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:30:c5:83:6f:98:63:7a:5e:b5:8e:4e:3f:fa:89:e4:9a:19:
         01:df:6d:79:d4:47:c2:6c:04:e1:c9:8b:62:26:c0:d0:c8:bf:
         52:3d:50:ec:95:c6:50:ca:c9:fc:56:79:ce:32:d6:dc:7b:d9:
         a5:de:79:e5:6b:6d:86:64:46:a7:b7:c8:04:12:88:44:67:c9:
         0a:cd:9a:89:0d:9a:62:69:67:d5:4e:0a:d0:9e:75:38:8a:cb:
         0a:6a:8c:30:a5:3e:02:67:70:d2:70:79:75:46:92:48:e0:ee:
         2a:25:e7:2a:4e:98:d9:7e:0b:69:15:e1:9e:2e:00:9b:8e:8e:
         c0:7c:08:b8:df:cd:4e:10:8f:dc:cf:2a:68:3f:6e:8b:a7:48:
         bd:c5:f3:6c:c1:db:53:be:e8:21:78:99:ad:3b:e7:4e:84:2d:
         87:01:8a:07:15:48:59:45:cb:83:79:51:f3:c0:34:3d:9d:72:
         6f:91:22:85:38:e9:84:e2:84:f5:9e:7d:77:d2:69:3d:5a:1f:
         4b:9a:60:0f:16:c4:28:88:2d:1f:65:6f:af:e1:1f:f0:3e:68:
         5f:32:1b:56:d8:0c:61:23:8e:76:d5:bc:79:4d:a8:e0:5d:c2:
         e6:40:a0:78:ec:8c:5d:9b:3a:f7:e7:cb:b8:9c:67:5f:d3:5b:
         57:de:19:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 13:37:07 2026 by rpki-client