Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/227d8994-f85a-3324-94e1-1cebf2b86d70.roa
File:                     227d8994-f85a-3324-94e1-1cebf2b86d70.roa (raw, json)
Hash identifier:          9XxOqX2cvb3IR448R6YYX0WNBW4wRV6m+q/w+tQArLw=
Subject key identifier:   8E:89:02:FE:F3:4D:0F:BA:41:D9:A0:E4:59:2F:84:90:D6:C5:AA:30
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584E66DA0B95664D05CD6EB19040
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/227d8994-f85a-3324-94e1-1cebf2b86d70.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     206092
IP address blocks:        173.239.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:0b:95:66:4d:05:cd:6e:b1:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=4fc3d46e-5f2b-494f-996a-22958efd88fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f4:be:49:0c:ec:b6:8d:89:81:f6:8a:51:90:
                    9e:85:c0:3d:b0:ab:14:96:c3:bc:0b:2f:a9:0f:3c:
                    af:af:33:66:b3:3f:db:d5:45:f0:2c:3f:e5:8c:e5:
                    a1:f3:66:da:5a:0d:91:56:6c:d4:51:ae:b3:13:88:
                    37:70:f5:0b:d3:12:3f:1e:b3:bc:16:28:7a:54:a4:
                    81:e7:54:92:5c:b6:68:64:87:97:7d:52:89:19:67:
                    f8:a3:a9:22:58:ba:61:22:81:31:48:40:ba:e1:74:
                    e6:92:d5:b7:a7:73:65:84:03:97:d9:75:95:1d:66:
                    f9:44:b0:d0:25:c7:b3:fc:47:62:07:23:9a:74:0b:
                    b1:ec:9c:bf:e2:52:24:7a:a9:1b:b0:1b:47:eb:dc:
                    77:6f:0d:45:f8:86:87:5b:07:a0:07:f1:36:51:3f:
                    25:dd:86:f3:1a:c0:5f:88:e4:00:0f:0f:41:5b:06:
                    53:50:0c:a5:9f:44:2d:7d:5d:d9:6f:cf:4a:c3:28:
                    41:57:f7:92:bc:33:3f:46:db:3b:43:08:bd:29:3c:
                    e3:04:c8:f7:73:4b:db:82:80:15:48:82:48:2f:12:
                    21:9f:eb:5f:38:8b:26:1a:b1:97:86:a1:f8:82:c7:
                    c1:a0:47:57:6b:c8:79:b0:e8:a4:96:53:d0:ba:fc:
                    ff:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:89:02:FE:F3:4D:0F:BA:41:D9:A0:E4:59:2F:84:90:D6:C5:AA:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/227d8994-f85a-3324-94e1-1cebf2b86d70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.239.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:58:97:4f:4e:e9:77:9d:2a:12:d9:50:05:8c:b3:f7:7b:cb:
         0b:1b:c5:38:b5:82:86:c4:e4:4c:4d:ca:03:f3:6b:f0:d8:6e:
         65:ad:be:73:cd:cd:25:d2:9b:88:a7:fa:d0:e5:6f:06:e7:e7:
         a7:67:8e:20:be:0f:72:95:e9:e1:5f:21:ca:df:12:45:71:26:
         08:84:40:16:31:d3:3d:b3:da:fb:c8:14:d5:73:8e:0c:84:17:
         c5:75:3d:74:10:91:b3:54:68:ab:50:ef:25:9f:7b:ff:13:97:
         17:2e:60:7e:89:1e:75:bc:4a:dc:c2:bd:5c:ea:92:b3:75:40:
         45:3e:39:b9:86:44:8b:09:f6:c5:f1:2c:5e:8a:a1:49:83:b2:
         e4:48:81:1e:f1:2d:c7:bc:9d:ac:cd:12:bb:b9:49:9f:8e:c6:
         b4:a5:43:05:08:6f:f8:4d:43:e1:41:0b:4b:a8:bc:67:ff:ed:
         c6:f3:ed:9d:c4:49:81:47:64:9e:a2:4e:77:07:7d:57:46:0f:
         59:af:10:c6:09:6a:f0:43:71:57:a6:8c:9e:b7:c5:ba:2f:88:
         2d:ca:ce:5e:06:ae:10:3f:36:c3:9f:8b:a8:fb:9d:64:f3:85:
         05:d6:81:d9:66:a9:c4:87:40:26:ab:08:7a:87:c9:e0:d6:20:
         a9:21:94:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:52:10 2026 by rpki-client