Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/23efa9ca-27b1-3dec-8ab8-434288fce699.roa
File:                     23efa9ca-27b1-3dec-8ab8-434288fce699.roa (raw, json)
Hash identifier:          teZm8O3UhMxO85wK4aX9NsG14IOauKZLOS4fqjXkswg=
Subject key identifier:   1C:69:01:04:EC:F3:F7:2B:52:68:2F:D1:B1:36:CA:D0:E3:E5:01:9E
Certificate issuer:       /CN=459d6e61-8613-4289-be34-cb0fe0aeea6e
Certificate serial:       010D0C9F4328584B5B073E1CF0AC114F7EE94360
Authority key identifier: E1:C0:D0:3E:00:4B:61:63:4A:47:1D:5B:23:44:2D:84:7A:F9:6B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/23efa9ca-27b1-3dec-8ab8-434288fce699.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     31919
IP address blocks:        162.250.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:3e:1c:f0:ac:11:4f:7e:e9:43:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459d6e61-8613-4289-be34-cb0fe0aeea6e
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=e83c91df-fd29-4298-b94f-4cf9d6f218e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f6:c5:40:61:72:99:fd:9e:84:fd:da:bd:ca:
                    fe:d8:55:fa:6d:cb:26:24:f1:cc:09:95:1a:6b:17:
                    df:4e:ec:a9:28:89:04:ee:3f:49:21:3f:be:f5:4d:
                    6b:b8:34:a2:2f:94:06:4e:bc:fa:e6:c7:68:26:d4:
                    d4:94:f1:11:9e:ca:cd:6f:8c:10:ff:ea:76:35:03:
                    42:ec:7f:7f:d3:98:3d:43:29:5d:85:b6:ae:ba:4a:
                    bf:6a:e9:6e:84:b3:1f:d1:28:ab:ff:bd:7f:cc:2a:
                    41:4a:2c:db:81:21:90:4e:56:9c:50:3c:d7:ea:8e:
                    1c:ae:3b:59:5b:1e:8d:52:93:69:67:b0:6b:b1:84:
                    77:ec:0d:48:fc:31:6f:6c:23:48:bb:62:62:f6:2b:
                    1c:28:fb:e5:28:54:61:89:ed:39:1b:4a:74:9f:63:
                    b9:c0:e8:ae:63:0c:a6:db:d4:c8:ef:23:0d:7d:ab:
                    e8:d4:17:80:0d:34:6c:59:b5:c6:2f:68:42:c3:56:
                    06:89:c9:a5:f6:46:64:c9:2b:e3:e7:e4:b2:9f:9a:
                    44:db:a7:7a:e8:8f:77:47:61:7d:01:c7:b1:a0:80:
                    5d:d1:91:99:e4:60:72:bc:cc:09:51:9c:b7:cc:27:
                    6b:fd:17:81:5e:bd:f0:b7:aa:b5:b7:57:00:39:1a:
                    76:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:69:01:04:EC:F3:F7:2B:52:68:2F:D1:B1:36:CA:D0:E3:E5:01:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/23efa9ca-27b1-3dec-8ab8-434288fce699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C0:D0:3E:00:4B:61:63:4A:47:1D:5B:23:44:2D:84:7A:F9:6B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:04:13:0b:09:7d:ce:3a:2d:23:32:c8:ad:69:8b:f0:61:50:
         a2:9a:d5:b6:39:df:2a:c5:c7:96:6e:29:e6:e0:b3:e2:0e:ea:
         e1:d1:8a:d4:78:40:b5:30:98:d2:6b:3d:cc:a1:1e:24:50:84:
         43:82:71:c7:8e:72:ea:c7:9c:84:34:b5:35:d4:76:07:a1:7a:
         f3:bd:c7:57:a9:eb:66:20:9b:01:d3:cf:b3:70:d7:ab:07:81:
         cd:5c:95:1d:0c:7e:ca:48:c5:f1:07:c1:f0:28:f1:fa:d6:f1:
         e5:81:bb:d8:18:06:04:92:87:ae:82:de:e0:c5:39:36:e2:ae:
         52:fd:a3:bc:b6:77:db:64:06:6b:90:cc:c7:e7:86:0d:16:aa:
         2b:51:c6:a3:99:b7:37:92:41:7f:92:a0:bb:e1:16:0e:ad:94:
         de:7f:5e:8e:00:e6:45:03:24:c2:df:9f:12:8e:8d:46:2a:fb:
         62:da:b2:3c:5a:f0:df:bb:cd:73:8e:f7:70:95:7c:5e:bd:f3:
         5e:fc:06:db:3d:47:cb:08:b2:cd:d8:5e:b4:92:5d:97:83:34:
         c9:64:0f:a5:ed:19:3a:b4:9a:a8:3a:b9:1a:02:39:52:72:95:
         00:2e:b8:c1:4f:f7:90:63:74:d5:a5:a9:8c:d0:38:b8:9d:f7:
         b9:66:f6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:50:58 2025 by rpki-client