Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/9db13b21-cb81-3034-bcdd-5cdac21f2b8a.roa
File:                     9db13b21-cb81-3034-bcdd-5cdac21f2b8a.roa (raw, json)
Hash identifier:          EUypVaNOIplXJoktgEGao45i4WXVqwk+8sFnOL/PaC4=
Subject key identifier:   70:5D:FF:34:A5:5F:27:17:62:E8:E5:52:A9:C1:C2:53:2D:8F:89:E1
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584F6F22F8B17338DBAB772AD500
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/9db13b21-cb81-3034-bcdd-5cdac21f2b8a.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     212238
IP address blocks:        173.239.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:f8:b1:73:38:db:ab:77:2a:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=02638e28-a958-4ca5-82aa-007dcf01adfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:da:4c:9f:9a:e2:25:c5:16:95:ec:fb:db:36:
                    2f:11:c6:be:38:b7:59:51:ab:38:63:d1:24:60:9f:
                    fb:4f:31:7a:55:01:27:fb:dd:ea:b2:79:f9:34:da:
                    cc:d0:aa:14:b4:6b:c8:c8:2c:5f:34:bf:b1:6d:28:
                    bd:d5:e9:48:4a:be:5a:f6:9a:97:f7:28:21:72:c3:
                    a5:4a:ee:51:f8:dc:15:6b:1a:11:5a:2a:fd:f4:97:
                    77:61:25:4b:1b:03:11:ff:cd:15:40:a5:92:d3:22:
                    24:9e:1c:09:2d:f3:13:3c:34:9c:ee:78:4a:a5:ea:
                    ce:71:08:e3:5a:d6:d9:26:66:c5:2f:61:72:f7:51:
                    43:7f:7f:81:d8:d8:eb:40:bf:fd:a0:3d:49:71:f2:
                    d8:0f:be:26:b2:ad:3e:55:82:94:6a:35:16:5f:e4:
                    76:1d:0b:3d:fc:10:90:be:97:c1:aa:52:1e:21:9b:
                    7e:5d:88:70:20:d9:ea:42:10:f9:ca:1c:f2:df:24:
                    96:ab:af:8d:b0:34:1b:ff:b2:b3:2c:4f:24:9b:f6:
                    86:fd:ca:4a:43:0a:39:57:52:81:04:94:97:83:c5:
                    d2:55:e3:b0:32:f5:44:c8:ca:c0:ca:04:16:db:b2:
                    bf:c4:c7:cf:58:6a:86:c1:1e:c2:40:9b:51:ff:77:
                    bd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:5D:FF:34:A5:5F:27:17:62:E8:E5:52:A9:C1:C2:53:2D:8F:89:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/9db13b21-cb81-3034-bcdd-5cdac21f2b8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.239.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:f0:ec:20:b0:09:ef:7f:99:5e:49:0a:f1:27:40:5a:cb:32:
         63:16:d0:d8:d4:32:30:4d:64:aa:bd:6f:87:d9:44:02:89:11:
         48:06:66:5c:b4:e3:79:9d:f3:25:90:c4:4f:fa:e3:f6:fb:90:
         a1:8a:53:51:20:fe:5b:25:1e:23:8a:45:02:c3:94:d6:a4:23:
         24:af:cf:82:92:cd:32:75:03:43:7f:97:ba:c0:4c:24:7f:4d:
         d2:20:48:26:f8:84:d5:b4:3d:1f:49:b5:1d:88:aa:00:ae:20:
         ef:96:3f:4b:38:00:8b:a3:5b:71:8a:63:07:08:7c:18:43:7b:
         39:e3:69:91:79:0c:28:d5:08:a6:3d:23:1e:53:b3:9e:bc:e0:
         9c:78:5b:1e:d5:68:78:c0:8e:7d:14:b0:69:06:c1:95:e0:53:
         8e:50:d0:05:97:cc:c0:d8:ad:8b:a5:c6:26:b0:0a:6c:65:1b:
         de:03:9e:b5:71:89:cd:31:6d:97:06:47:6a:f3:e9:f7:99:33:
         3d:d0:65:ba:2e:d0:a0:db:bc:f1:b9:81:af:ff:ce:2c:98:da:
         82:c7:c4:09:a9:c8:9d:3d:0f:75:27:8a:a0:5f:3f:3a:a3:7e:
         e5:ac:62:b8:8c:97:74:8e:0c:64:36:c3:39:11:24:62:b0:cd:
         14:75:32:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:45:42 2026 by rpki-client