Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6d13a83f-cc80-38e9-9d50-98caad7d7886.roa
File:                     6d13a83f-cc80-38e9-9d50-98caad7d7886.roa (raw, json)
Hash identifier:          q05/k8EqOMwikc/ZniefFiD7woGT3C5vjbRd6xOygeM=
Subject key identifier:   61:B3:8D:C5:84:5F:7D:BC:29:D1:6F:CC:18:EF:07:0B:6B:96:36:27
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584AFEE6A0E64863F07DA4349580
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6d13a83f-cc80-38e9-9d50-98caad7d7886.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     63018
IP address blocks:        173.239.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:a0:e6:48:63:f0:7d:a4:34:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=a416d40d-61d7-4a9a-9a6b-8ecaf33d0853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b0:49:f7:0f:f1:d5:55:69:19:66:29:ea:6e:
                    e0:a3:b0:73:f0:42:66:40:4c:6c:da:10:5a:0b:b5:
                    f9:64:11:92:8d:d0:66:0e:2c:ef:4d:c1:fc:a0:dc:
                    f3:e2:3c:c7:04:41:74:20:91:aa:51:a1:af:3d:80:
                    06:d7:be:cd:8e:7a:3b:92:ca:3f:64:14:4a:27:22:
                    18:14:cf:b6:38:ce:20:d1:90:c4:da:1a:68:e9:ae:
                    e1:13:f2:86:79:0c:d7:83:a3:05:14:91:fb:d7:0a:
                    3c:36:17:2d:81:eb:1b:54:53:c2:ed:d2:6e:de:df:
                    6d:38:c2:69:97:5a:73:30:ba:13:22:7b:c2:e3:96:
                    e3:f1:77:e8:7c:c1:d8:7b:0d:1d:3b:5e:fe:f6:f3:
                    51:71:ee:d2:90:38:a5:81:42:13:2b:fe:91:63:2f:
                    42:2e:95:50:de:de:19:a1:dc:3b:19:a5:5d:a7:42:
                    17:1b:10:ce:02:ae:b7:d7:d7:48:95:23:e6:e2:00:
                    3b:04:05:ed:18:64:98:16:32:2b:37:88:9d:40:3a:
                    c8:8f:f6:95:05:03:ea:94:51:19:a5:af:96:24:ac:
                    0a:53:2c:52:97:72:e9:37:c4:4f:a2:a7:43:2e:e9:
                    5f:04:91:da:31:85:9d:1a:92:34:8b:7f:3f:ff:9d:
                    dd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B3:8D:C5:84:5F:7D:BC:29:D1:6F:CC:18:EF:07:0B:6B:96:36:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6d13a83f-cc80-38e9-9d50-98caad7d7886.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.239.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:91:2c:74:93:c4:25:42:5c:3d:d3:cc:77:2b:2c:a5:da:f7:
         b9:11:04:01:73:9f:5a:41:5c:7a:19:83:cc:e1:58:3a:4e:51:
         1d:2a:9a:2c:9f:cc:de:f2:55:3f:68:76:a5:6a:fe:88:ef:28:
         e5:3b:cb:5f:2f:29:31:a2:4c:32:d8:fb:45:97:23:da:51:de:
         85:89:66:b9:6e:cc:2a:3c:1c:5c:3c:74:d5:45:ea:82:97:2b:
         03:13:b7:9a:a8:69:f7:df:9f:25:42:11:aa:47:d6:26:79:63:
         33:d6:51:28:fc:2a:9c:b4:3e:d7:b2:0b:b2:46:74:7d:45:c2:
         07:00:00:28:f9:6b:d5:b9:ad:f1:1e:dc:75:ee:ad:45:01:ae:
         7c:80:ab:6b:2c:fb:94:4b:20:66:a4:f2:29:d2:5e:80:de:e7:
         08:f1:07:d3:30:74:c2:72:c3:86:66:87:d9:00:48:b7:11:7f:
         e0:a8:28:47:54:91:f6:30:24:f8:3e:bb:c2:db:4b:05:fa:bd:
         b9:e9:d2:ea:d3:ca:ff:10:a1:cb:47:c6:cd:1e:aa:68:69:b0:
         64:8e:42:0e:bc:f8:5e:db:53:68:40:61:03:17:7e:dd:0a:4d:
         ed:bf:0d:7b:f9:66:eb:be:04:05:62:db:dc:27:20:7c:d4:24:
         9d:06:c7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:14:35 2025 by rpki-client