Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6daf06e3-2cad-3170-8e85-a55219de6927.roa
File:                     6daf06e3-2cad-3170-8e85-a55219de6927.roa (raw, json)
Hash identifier:          RnNjtpAmXPBw4Y8Lg/1bqwpLZsxMHyeufObS/TYGTW0=
Subject key identifier:   19:A7:74:0A:51:4C:DF:AF:FD:88:DB:43:F8:E7:B3:50:FC:FA:26:16
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584A89FA3C0AB428B00B1D273580
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6daf06e3-2cad-3170-8e85-a55219de6927.roa
Signing time:             Wed 16 Jul 2025 15:50:42 +0000
ROA not before:           Wed 16 Jul 2025 15:50:42 +0000
ROA not after:            Tue 14 Oct 2025 15:50:42 +0000
asID:                     64286
IP address blocks:        173.239.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:fa:3c:0a:b4:28:b0:0b:1d:27:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jul 16 15:50:42 2025 GMT
            Not After : Oct 14 15:50:42 2025 GMT
        Subject: CN=35a77794-1831-4732-8bab-7ec50c33a8fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d1:d9:1f:52:78:7f:90:95:28:63:39:17:f6:
                    32:8b:1e:0b:cd:c2:d4:65:88:06:47:e8:c8:35:cf:
                    33:f3:d5:f3:5f:c3:d6:e2:2d:3d:39:de:16:7f:c1:
                    e0:ec:98:c7:dd:ae:36:a2:f1:b0:52:4f:69:c0:c2:
                    45:65:53:9c:8c:b6:0f:f2:ba:2e:29:6e:08:d4:fa:
                    08:14:7d:4e:10:74:a2:13:e5:d6:6a:3f:38:39:93:
                    15:8e:d8:3c:78:77:7e:4e:4d:3d:16:70:a1:0a:72:
                    27:ed:4f:65:c8:dd:b2:5a:ee:43:70:6c:7a:63:61:
                    fd:fa:d0:34:4d:e7:3a:fb:c0:fa:88:c9:07:ca:f0:
                    77:b1:2a:3e:0a:ea:d3:ab:6d:30:76:75:30:5b:c5:
                    24:fc:86:50:2c:c9:1d:84:1f:15:27:1a:b5:bb:85:
                    2d:20:16:7e:67:f3:10:ac:a3:89:53:2d:bb:e1:9f:
                    b8:70:7b:9f:7c:35:5c:5d:0c:10:1d:be:3a:a8:c0:
                    35:03:70:fe:db:c5:71:7d:43:8a:c2:15:ef:67:dc:
                    c0:29:2e:23:7f:40:e0:3e:af:de:51:f3:45:1f:9b:
                    22:90:0b:7b:b8:f2:be:51:17:6a:26:ef:96:7f:74:
                    b4:69:bf:27:9c:11:5a:d1:ab:be:21:5e:03:17:32:
                    51:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A7:74:0A:51:4C:DF:AF:FD:88:DB:43:F8:E7:B3:50:FC:FA:26:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6daf06e3-2cad-3170-8e85-a55219de6927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.239.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:f6:91:31:99:66:bc:5c:a6:84:71:7f:0a:8b:e2:91:9d:d0:
         12:c6:e5:3f:26:3b:fc:e0:33:86:24:32:57:26:86:72:74:21:
         c5:22:5b:f3:d7:b7:dc:34:59:70:dc:f2:ba:76:d1:e3:51:63:
         8d:d7:8f:16:73:6f:5e:a9:53:27:a2:bb:51:33:e9:b9:a0:bb:
         73:5c:4f:09:cf:e1:4e:0e:07:7f:e4:8a:98:a4:9a:bd:39:db:
         3b:12:26:3c:19:85:2a:53:ab:1b:10:f7:17:2c:2a:fc:eb:5d:
         c5:80:ea:97:a7:5e:8e:9d:97:bc:07:c6:72:69:b0:ec:64:33:
         32:9c:ae:1b:80:ed:3d:15:37:fa:24:fb:db:1d:60:79:1d:f7:
         8e:12:c4:5f:5c:b6:25:b1:fb:03:52:53:86:14:76:7f:5b:a3:
         cd:79:85:0f:5d:bc:31:7f:2b:8c:27:e5:61:46:f4:b0:9c:d6:
         24:4e:5c:a5:57:d6:c3:01:e3:a0:5d:36:82:0e:f4:fe:6b:7f:
         da:76:43:3c:a1:83:df:85:b6:22:7f:92:db:4f:97:62:ee:2d:
         6b:1e:a8:e7:81:f5:a5:07:cc:6e:8f:8b:4e:3b:2f:c9:18:08:
         39:4c:41:70:3e:ad:2e:b5:31:c1:ed:b8:88:34:1b:ed:08:cb:
         7d:ff:3f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:46:04 2025 by rpki-client