Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/d164de3e-4cd4-3bbd-9d16-1e2f9785cdbc.roa
File:                     d164de3e-4cd4-3bbd-9d16-1e2f9785cdbc.roa (raw, json)
Hash identifier:          8qGlJ+38+AftVPB2php4cnnQphpbrmLYs7naVRnmag4=
Subject key identifier:   6D:F9:FD:FC:A4:9F:C1:AC:B1:E5:C7:5F:2D:99:3E:33:0C:3E:85:8C
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584A6C55D6D08F9F7070B2717C38
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/d164de3e-4cd4-3bbd-9d16-1e2f9785cdbc.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     137409
IP address blocks:        173.239.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:d6:d0:8f:9f:70:70:b2:71:7c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=bde5d096-7a13-4c8a-ab32-880fd839bcbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:37:71:cd:fc:9d:a8:17:a4:93:19:92:42:6c:
                    fa:b6:71:5d:bf:2c:2f:e0:70:1e:b9:a0:ca:a7:fd:
                    c1:f9:fb:0f:73:2f:71:5c:be:33:07:7f:e9:f8:99:
                    f0:9e:14:3a:76:74:ea:7d:52:55:09:c4:34:3d:08:
                    c9:f8:71:f4:37:1a:83:a6:ca:d9:f0:5e:5e:ed:38:
                    7e:70:c3:46:f2:a8:47:a6:d6:2d:a7:21:8a:92:81:
                    92:e9:e2:96:f7:01:76:6f:7d:04:4a:7d:26:25:4a:
                    3f:85:4e:87:ae:22:74:64:06:c4:0b:0e:ef:79:a8:
                    1d:eb:c2:f7:5c:57:f5:e0:d6:40:b5:3e:3d:7d:53:
                    ea:4e:9f:39:ff:a4:dc:35:1e:e8:09:62:96:72:11:
                    c6:08:44:52:fb:1d:94:04:1f:ed:9a:9b:b9:b4:d9:
                    6b:1c:29:19:73:73:ec:9c:29:6f:68:69:e2:26:76:
                    29:0b:94:a7:7b:f6:3f:37:c4:c7:3e:e1:23:d1:7f:
                    94:e0:55:62:16:6d:fd:01:ee:02:e4:41:aa:1d:17:
                    e7:07:1a:13:30:8b:d3:5d:7b:6a:9a:14:fb:1b:f6:
                    a0:32:19:3e:9d:fd:09:e9:21:1a:c0:e3:a2:07:5f:
                    38:47:39:de:cd:03:a0:d9:70:e1:93:06:ce:4e:f2:
                    6d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F9:FD:FC:A4:9F:C1:AC:B1:E5:C7:5F:2D:99:3E:33:0C:3E:85:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/d164de3e-4cd4-3bbd-9d16-1e2f9785cdbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.239.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:84:54:75:71:42:e8:1e:90:92:80:4c:d5:fe:fb:ce:73:59:
         cc:95:d5:63:ef:b5:72:cc:97:30:f3:41:99:26:c6:77:0f:d8:
         23:8b:52:98:91:45:73:83:e0:a5:b7:f2:35:b1:9a:23:8e:36:
         0c:a5:64:46:1f:97:2b:02:1d:16:97:63:a3:4d:55:6e:82:5b:
         cc:be:30:83:58:a5:b7:6a:04:d6:df:b6:b1:2a:64:ae:6c:60:
         6f:e2:4f:cc:78:00:53:e1:d9:93:7c:41:29:47:1f:60:9e:c5:
         c6:ea:35:b0:b7:c8:f3:6f:ce:ba:da:2f:6c:0d:b2:2f:88:18:
         4c:45:d0:db:59:fd:0c:60:f5:d7:f0:ad:2b:65:8c:36:65:d4:
         7b:41:86:d0:5f:f9:17:fe:91:c7:df:98:d9:6b:2d:cb:44:73:
         58:fe:c8:32:37:b5:98:79:ed:27:91:52:32:a4:2e:de:7d:b7:
         8e:27:6b:b3:c7:0a:b5:4a:07:62:a9:d8:02:66:9d:c0:36:17:
         1e:fc:05:bb:22:84:0d:36:e3:8c:11:ec:22:9f:00:c5:fd:cf:
         92:4b:fd:22:4a:06:ca:aa:74:53:e8:8c:a0:d8:4b:e6:b5:1b:
         8a:6d:06:58:b9:7c:06:ac:56:78:7a:9c:3d:c4:e5:8a:e8:78:
         18:4b:51:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 12:44:59 2025 by rpki-client