Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/21bfcd35-f6ee-39f9-8f47-121bc3d94370.roa
File:                     21bfcd35-f6ee-39f9-8f47-121bc3d94370.roa (raw, json)
Hash identifier:          kpkm2DQwOypD+JVe9akk7E9VrwWb6Gp/Bay+g23hFKs=
Subject key identifier:   2F:09:35:2F:5D:C5:EE:7C:4F:75:15:3D:57:DE:01:43:F0:D8:D9:F8
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584D6C0FB03A25D3784549EADF80
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/21bfcd35-f6ee-39f9-8f47-121bc3d94370.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     262287
IP address blocks:        173.244.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:b0:3a:25:d3:78:45:49:ea:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=e41d1dc5-6bb3-4cc1-8e88-a3e0136b8ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e2:ee:f6:ae:17:17:56:2e:20:11:b6:af:c5:
                    12:e8:a6:62:b9:03:5b:81:32:2c:07:48:2f:99:22:
                    ea:13:ff:9a:31:3c:1c:8d:bc:be:4d:6c:14:26:bf:
                    b3:66:22:33:2a:02:fa:45:96:57:9f:37:6e:45:d6:
                    bc:9e:84:26:99:2a:0d:a1:4e:1a:c5:f3:d8:03:cf:
                    4c:55:d5:17:b5:82:c7:11:86:e3:3a:73:33:5f:05:
                    94:62:f4:e2:dd:f2:62:7a:af:2e:1e:6b:c7:51:80:
                    94:0b:5a:96:33:8a:73:8d:cd:bf:4b:04:00:01:cf:
                    1d:94:b1:74:a6:9d:f4:e6:c7:8a:4b:bb:88:37:e3:
                    16:c8:07:9b:26:d5:2d:56:21:74:c7:d5:b4:98:32:
                    ec:a3:82:1c:71:9c:03:5f:30:c0:54:f9:d9:3f:31:
                    40:cf:4b:3d:86:17:7c:d4:1e:c6:f2:aa:76:ac:20:
                    83:42:9e:14:cd:8d:18:46:6a:db:ce:ba:20:66:16:
                    3b:cb:9a:ed:f5:95:7e:43:c5:01:d0:93:8e:21:a9:
                    46:4a:ca:72:c7:20:9c:37:dd:a3:9c:39:f7:86:f3:
                    62:56:92:89:a4:9a:c8:99:a5:26:a5:a1:1a:61:fd:
                    98:d8:c9:f0:29:68:89:3c:b7:6c:12:da:b7:2a:bb:
                    9d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:09:35:2F:5D:C5:EE:7C:4F:75:15:3D:57:DE:01:43:F0:D8:D9:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/21bfcd35-f6ee-39f9-8f47-121bc3d94370.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:6e:9a:3b:3f:bb:26:f7:da:91:e4:56:01:c5:81:36:63:f5:
         4f:59:a1:0a:40:ea:bd:9f:89:a7:24:fe:5c:76:b0:ed:c0:ab:
         ae:f1:83:98:12:5f:9c:e9:94:31:5a:f9:69:57:b9:e9:0e:1f:
         05:f3:f7:cb:d7:92:a8:e1:1d:e0:5d:9f:76:27:67:22:db:a6:
         96:cb:4b:0e:95:4d:76:0b:a1:ad:6c:87:64:9f:97:97:68:33:
         6a:34:9b:39:b7:5c:96:37:35:41:a1:f7:a1:d3:f6:02:ed:96:
         07:be:05:81:41:94:87:80:2e:45:f6:2e:57:e7:bb:71:8c:ff:
         00:8c:ff:53:b9:4b:e3:22:c4:f7:bf:df:2b:5f:76:6c:17:37:
         ba:f3:5c:00:35:e6:50:02:db:e2:d8:1a:9e:4a:06:43:4e:3b:
         74:61:ef:12:4c:6c:c5:96:ce:eb:ad:2f:ff:ee:77:e4:eb:3c:
         a3:e5:96:a3:6a:6a:9c:a3:a3:77:ab:7e:5e:f9:f3:17:9d:88:
         c9:ea:7c:a9:19:7a:34:47:43:45:7e:c6:47:dc:15:5e:d3:7e:
         0c:76:83:81:39:68:a5:ed:a3:49:f0:ec:e5:10:54:d2:97:a2:
         96:3f:cf:85:39:2b:e0:3b:ed:6e:11:4f:01:7c:e7:d5:63:fe:
         24:aa:7b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 23:17:00 2026 by rpki-client