Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6daf06e3-2cad-3170-8e85-a55219de6927.roa
File:                     6daf06e3-2cad-3170-8e85-a55219de6927.roa (raw, json)
Hash identifier:          fMO/FUInhWc0ne81tbdi34WGWfWvQ6te6M9FtgUvu5g=
Subject key identifier:   2E:48:A0:21:CD:EA:07:D3:B8:B1:E7:1B:DA:17:58:B0:FD:87:21:EE
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584EAD1C45D22E56B2C81C597BC0
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6daf06e3-2cad-3170-8e85-a55219de6927.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     64286
IP address blocks:        173.239.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:45:d2:2e:56:b2:c8:1c:59:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=7d6e0be9-129c-47e2-b61e-b738435a8c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:33:2e:c8:dc:85:ce:dd:b0:8c:6a:74:6e:f2:
                    44:3b:53:09:3b:fb:92:df:fd:cc:a1:aa:12:e9:51:
                    c7:05:ae:17:15:20:fe:95:f8:c3:3b:57:ec:ad:06:
                    ae:35:6c:f7:ac:d1:48:64:72:97:8b:15:ec:60:33:
                    28:b3:aa:3d:bf:78:b6:1a:0c:8b:80:01:52:d8:b1:
                    d0:32:f9:4f:8e:37:61:4c:2f:03:67:47:bd:4c:01:
                    18:e4:5a:fd:98:ec:0b:6a:b7:17:82:ec:18:8e:9b:
                    ee:e4:1d:d3:42:ea:ee:d7:cb:57:84:1e:a2:ac:aa:
                    cd:ad:98:d2:8a:03:f0:01:f7:37:fb:74:1e:d7:86:
                    dd:89:3e:4a:53:b4:26:e2:08:66:b8:4c:3b:9b:f4:
                    69:8f:a8:7e:32:d7:13:81:7f:87:24:cb:8a:a0:c2:
                    6b:7f:9c:32:7e:c6:3e:54:25:c1:66:98:b9:7d:08:
                    8d:83:6f:3c:fc:45:42:e4:ca:e0:34:ce:5c:66:d1:
                    1e:36:7b:be:93:40:49:64:a2:ec:b9:89:89:a3:48:
                    6d:a6:13:cc:09:a8:fa:02:7f:4a:fe:75:28:71:f5:
                    b3:bf:c9:be:6e:d9:47:de:17:6f:8e:f7:18:14:8e:
                    55:6b:bb:dc:b7:38:78:99:19:f2:3c:2b:c6:1f:ca:
                    e5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:48:A0:21:CD:EA:07:D3:B8:B1:E7:1B:DA:17:58:B0:FD:87:21:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6daf06e3-2cad-3170-8e85-a55219de6927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.239.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:7f:7b:50:4f:2f:35:88:00:e3:3c:95:f8:ff:16:0b:2d:33:
         68:36:fc:20:51:b4:d6:47:ae:ef:b7:ce:6a:8f:42:cc:e5:2d:
         4f:c0:5f:21:41:a4:61:b7:6e:52:1c:4d:52:f9:91:58:e7:10:
         b0:c0:6d:3f:51:1e:20:20:b0:49:3a:6e:85:9e:66:f2:ca:45:
         9c:4f:8b:09:67:7f:2d:d9:2c:c9:f1:3a:d0:40:c9:d5:05:86:
         5a:8e:99:4e:ff:58:3e:fc:33:73:67:35:b7:0c:a2:64:43:f5:
         c9:3b:22:2b:0a:2a:e8:46:55:82:75:b3:fa:81:9f:70:02:0f:
         aa:5c:f6:c7:4b:9d:ed:ec:4b:e5:29:57:a0:b4:c1:7c:ba:4c:
         5c:ff:87:18:30:2f:94:bf:9d:e6:db:4f:36:ae:ff:97:05:b9:
         8b:40:03:f2:44:f3:89:e7:a4:fb:25:91:f0:fc:50:02:4a:4d:
         40:bb:75:0b:b1:0f:36:49:16:ad:ef:36:00:6d:20:c6:9e:94:
         7b:1c:1b:25:7a:3f:da:df:02:39:ab:43:09:81:44:4d:37:5f:
         a9:1d:22:2c:ea:b6:3f:88:c5:af:fa:90:5a:63:65:2b:22:6c:
         92:dd:ff:0e:53:25:e5:29:d2:90:ce:1c:f7:7d:e5:ed:ba:3a:
         c1:41:72:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:26:35 2026 by rpki-client