Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/cb3521ee-876b-31da-af7d-3913e552e9f6.roa
File:                     cb3521ee-876b-31da-af7d-3913e552e9f6.roa (raw, json)
Hash identifier:          QhRxS46yh15KJTXA95lIP5lSBipZVMXn0bDyqZ2K1VM=
Subject key identifier:   0E:59:C2:38:B6:07:F6:B2:A3:62:53:E3:11:01:A7:CB:D2:CB:79:54
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584DDA55C0028C989E5B31C4A000
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/cb3521ee-876b-31da-af7d-3913e552e9f6.roa
Signing time:             Sat 16 May 2026 13:00:31 +0000
ROA not before:           Sat 16 May 2026 13:00:31 +0000
ROA not after:            Fri 14 Aug 2026 13:00:31 +0000
asID:                     62240
IP address blocks:        173.239.213.0/24 maxlen: 24
                          173.239.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:da:55:c0:02:8c:98:9e:5b:31:c4:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: May 16 13:00:31 2026 GMT
            Not After : Aug 14 13:00:31 2026 GMT
        Subject: CN=297e1e9d-e715-4f52-b179-497df16121a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ef:24:37:ff:f4:2f:f3:d5:c5:95:10:88:b1:
                    84:00:f2:e8:d2:3f:28:47:0c:ef:f6:a0:9c:44:24:
                    31:2d:82:93:bc:5a:7b:84:5a:c3:71:2e:94:68:f7:
                    5d:86:7e:09:a6:1c:9d:ce:7a:5c:8b:52:e6:e9:80:
                    81:35:51:b8:d0:45:8e:df:34:70:7b:68:50:ff:b4:
                    7c:ab:14:80:96:79:b5:ef:3c:0a:c9:47:5a:07:80:
                    04:d3:30:9f:b1:e1:f6:18:d1:17:0f:e6:44:39:22:
                    f3:9e:e3:1d:70:c0:54:5a:5a:35:48:f6:01:18:14:
                    1a:94:ae:a1:db:64:65:bf:41:5e:86:6b:11:67:c5:
                    40:cd:0b:cc:20:a8:48:ea:cf:3b:9e:ab:02:b6:a9:
                    04:11:55:1d:f7:d0:25:6f:37:c8:c0:0a:82:9c:5c:
                    03:bd:27:01:5c:f1:51:d9:e8:30:7c:80:11:5b:7b:
                    9b:c1:6b:4a:e4:b0:9f:cd:bc:3e:24:ab:88:6f:bc:
                    60:30:25:96:d6:fe:54:ec:37:c9:81:fb:95:cf:f9:
                    13:1f:7e:7e:f6:fe:fd:4b:e8:e3:5c:c5:04:2c:73:
                    ca:7e:19:53:8a:33:92:4e:5d:68:d0:c0:ce:ab:21:
                    0a:ba:e6:69:61:24:d0:29:51:b9:b0:b8:78:24:86:
                    3d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:59:C2:38:B6:07:F6:B2:A3:62:53:E3:11:01:A7:CB:D2:CB:79:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/cb3521ee-876b-31da-af7d-3913e552e9f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.239.213.0-173.239.214.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:63:8b:27:b8:41:0d:19:27:c0:82:50:73:09:98:ae:c7:23:
         0e:26:ea:6a:01:10:af:b4:46:0a:80:0f:15:cc:bd:29:98:36:
         56:db:6e:fa:16:34:36:41:80:2a:7b:c0:74:3a:ed:2b:21:0f:
         ec:40:70:5f:f8:c9:f2:38:67:f4:73:24:5b:d0:12:2c:6b:f0:
         20:eb:28:2f:8a:80:ae:e4:2d:03:07:9b:a5:ef:ae:d1:0b:a5:
         a6:7c:dc:16:e7:1f:1b:68:48:05:28:4d:5e:67:1a:73:01:8c:
         58:3a:62:e1:22:c3:38:9d:05:b2:54:f8:eb:0e:85:4c:7e:6e:
         bb:65:63:7c:d3:6d:2f:ca:bb:08:aa:6a:28:56:4f:43:6a:f6:
         e4:e5:c3:4f:d3:b5:8a:77:a0:f4:d0:da:6d:e3:a5:ad:e4:ec:
         28:d8:13:84:0c:df:86:15:09:5b:32:af:0f:5e:a4:94:72:f3:
         2f:b4:09:ea:06:89:10:65:5a:cc:90:cf:35:9d:d5:4b:35:98:
         1d:da:c8:6b:88:92:ce:93:42:28:5c:bb:f7:3c:80:86:80:3e:
         bf:e8:a4:d3:b8:f1:32:ac:66:34:08:b8:bc:bb:60:61:4a:0b:
         18:92:68:8a:00:58:82:99:56:d6:02:0b:fc:40:dd:d6:0a:4f:
         ea:0b:c1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 05:33:54 2026 by rpki-client