Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/55616105-3776-339f-b267-5bb33e8a329a.roa
File:                     55616105-3776-339f-b267-5bb33e8a329a.roa (raw, json)
Hash identifier:          YtmrSoKKQnWtQbi1P81dlPk5NgVbkmirPFPuzfmgAGc=
Subject key identifier:   31:63:12:A8:6A:60:6B:E9:4E:64:BC:03:C1:E9:FB:0C:9E:AB:D7:35
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584A549B173FD652387BECD2E273
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/55616105-3776-339f-b267-5bb33e8a329a.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     29802
IP address blocks:        173.239.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:17:3f:d6:52:38:7b:ec:d2:e2:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=a033875e-864b-4f75-b8d5-04b945c49168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9f:0b:61:e4:6a:f0:13:f8:59:53:20:ca:c2:
                    b9:1f:f1:77:65:e0:c0:08:5f:bd:f4:0e:a8:88:ed:
                    bb:34:fe:27:dd:9d:8d:13:17:fa:42:1a:be:ea:2f:
                    19:17:ac:4b:55:9f:32:c6:14:9b:ff:11:4e:93:54:
                    81:db:11:70:52:d1:98:7d:35:df:0c:12:45:0f:76:
                    66:13:85:f8:58:3f:dd:e7:c9:7a:5d:7b:27:d5:8e:
                    af:05:6a:97:73:47:1f:45:5e:84:c1:c7:39:3d:fb:
                    32:82:07:a0:cd:ed:d1:23:89:20:7f:e3:53:b7:0c:
                    0d:55:17:6b:2e:26:aa:a5:e5:5d:8b:61:cf:1f:45:
                    57:ea:c8:d8:e9:8e:90:4d:74:19:18:2f:05:10:fb:
                    32:cc:1f:bc:0d:88:58:c3:fe:66:a0:05:fd:0f:75:
                    2a:7c:2d:a3:b4:7f:dc:b4:54:42:38:3b:8f:f8:11:
                    0d:48:36:33:95:3a:a6:3b:0f:14:81:56:df:eb:ac:
                    87:4b:48:56:8f:de:c6:a3:40:6f:eb:df:00:d2:20:
                    72:73:9d:ec:ec:f0:0e:43:35:40:5c:23:76:24:5a:
                    df:25:6a:1a:c3:09:7e:b4:e2:26:4f:a5:e5:61:84:
                    ee:f7:96:a2:b8:64:b0:07:e4:15:1f:64:5e:95:65:
                    66:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:63:12:A8:6A:60:6B:E9:4E:64:BC:03:C1:E9:FB:0C:9E:AB:D7:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/55616105-3776-339f-b267-5bb33e8a329a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.239.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:1b:7a:d1:e5:d4:cf:df:7a:06:dc:45:8d:0a:e5:f1:c0:58:
         bd:9b:98:53:9a:4e:72:7c:8c:d1:fe:ec:3a:6d:95:93:ef:bd:
         3a:3a:be:c4:57:8d:3f:18:5d:83:ca:48:1b:64:1e:12:51:c7:
         e2:c8:ac:c8:da:3e:ec:2c:05:c8:48:3b:18:fd:c8:fd:a9:1d:
         bc:ed:fd:b0:95:e6:08:3e:a0:5e:64:72:9e:fc:5d:6d:ec:b4:
         98:3d:c3:93:62:30:da:7f:9c:fa:08:9f:c1:d3:c1:7f:24:74:
         44:df:62:52:f2:d9:a2:22:37:a3:7c:16:eb:95:a5:ad:a0:4a:
         4d:c8:55:67:95:28:83:12:0c:41:bd:84:64:84:98:8f:1e:80:
         8c:0e:40:2e:dc:8b:5c:3f:8f:d9:c4:dd:af:cb:9c:9c:70:f3:
         3b:a3:96:6f:74:e4:8f:55:38:b1:b4:f0:d7:fe:3c:92:a8:c6:
         7e:38:03:b3:81:7b:e9:b3:a1:56:36:f8:1c:8b:48:07:56:96:
         38:8d:b4:d8:b7:ca:8e:ed:37:31:3b:62:38:ce:ee:a4:e8:29:
         b2:53:b7:bb:d0:2c:25:9e:a4:b5:26:0b:d0:1c:72:0c:2a:e1:
         8f:bb:69:ad:ea:35:fc:8b:5d:35:cd:ed:31:87:95:fc:40:19:
         77:61:37:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmxc/1lI4e+zS4nMwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx
NzNhMB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk
YTAzMzg3NWUtODY0Yi00Zjc1LWI4ZDUtMDRiOTQ1YzQ5MTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp8LYeRq8BP4WVMgysK5H/F3ZeDACF+99A6o
iO27NP4n3Z2NExf6Qhq+6i8ZF6xLVZ8yxhSb/xFOk1SB2xFwUtGYfTXfDBJFD3Zm
E4X4WD/d58l6XXsn1Y6vBWqXc0cfRV6Ewcc5Pfsyggegze3RI4kgf+NTtwwNVRdr
LiaqpeVdi2HPH0VX6sjY6Y6QTXQZGC8FEPsyzB+8DYhYw/5moAX9D3UqfC2jtH/c
tFRCODuP+BENSDYzlTqmOw8UgVbf66yHS0hWj97Go0Bv698A0iByc53s7PAOQzVA
XCN2JFrfJWoawwl+tOImT6XlYYTu95aiuGSwB+QVH2RelWVmCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDFjEqhqYGvpTmS8A8Hp+wyeq9c1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx
ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvNTU2MTYxMDUtMzc3Ni0z
MzlmLWIyNjctNWJiMzNlOGEzMjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh
M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm
MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk
MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADYbetHl1M/fegbcRY0K5fHAWL2bmFOaTnJ8jNH+7DptlZPvvTo6vsRX
jT8YXYPKSBtkHhJRx+LIrMjaPuwsBchIOxj9yP2pHbzt/bCV5gg+oF5kcp78XW3s
tJg9w5NiMNp/nPoIn8HTwX8kdETfYlLy2aIiN6N8FuuVpa2gSk3IVWeVKIMSDEG9
hGSEmI8egIwOQC7ci1w/j9nE3a/LnJxw8zujlm905I9VOLG08Nf+PJKoxn44A7OB
e+mzoVY2+ByLSAdWljiNtNi3yo7tNzE7YjjO7qToKbJTt7vQLCWepLUmC9Accgwq
4Y+7aa3qNfyLXTXN7TGHlfxAGXdhN7s=
-----END CERTIFICATE-----
Generated at Thu Jul 10 15:40:07 2025 by rpki-client