Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/02634ef7-76ad-316e-a32f-77f1afa3219e.roa
File:                     02634ef7-76ad-316e-a32f-77f1afa3219e.roa (raw, json)
Hash identifier:          dBiQmBMCHBY1S4zFU5r8/PgvOcrXqkCIYxdTVd+2M44=
Subject key identifier:   A3:0D:FD:A4:47:38:07:89:05:6F:97:CA:4E:78:61:45:16:D6:8F:81
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584DCDC5A995FF6DD7A1EDEC4D00
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/02634ef7-76ad-316e-a32f-77f1afa3219e.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     174
IP address blocks:        173.244.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:a9:95:ff:6d:d7:a1:ed:ec:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=1fdaf86d-1cd8-4213-a660-ee2f1eb1dda9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:49:0e:68:f8:3a:b3:dc:79:46:84:08:96:f6:
                    0c:11:75:7c:59:ea:93:eb:6e:d5:8b:80:cf:20:af:
                    ad:1b:c6:a4:93:a6:7f:2e:57:aa:55:ef:c9:11:20:
                    a5:7f:c0:d8:bf:ad:8d:81:79:fa:ea:e4:35:e8:c0:
                    39:39:dd:47:bb:e5:8e:47:1c:ca:bc:45:23:68:fa:
                    e8:90:23:2a:53:b5:57:07:5a:49:0a:bf:d8:bd:4f:
                    37:28:7c:74:d7:97:19:2f:08:d3:d9:13:2e:3a:d8:
                    83:16:07:8e:22:d6:be:02:31:ec:0d:b2:10:e7:81:
                    92:be:7e:62:2f:35:6a:69:1b:f5:fb:59:7e:00:da:
                    c4:87:bf:c7:d2:97:68:e3:f2:a4:ab:04:fe:b1:3d:
                    28:88:de:09:30:2f:3f:a8:de:db:a9:ad:56:99:ff:
                    b9:9d:19:bb:e2:95:f7:18:da:2d:09:ae:b6:5c:ba:
                    a2:8e:f9:5b:d6:a8:06:7c:f1:86:37:05:93:fb:17:
                    90:e8:50:f2:9b:98:1a:ec:81:ff:85:4b:6a:8c:30:
                    b7:fe:b9:c8:8d:9c:51:eb:ab:22:9f:57:5a:91:e7:
                    56:80:2b:da:ae:74:b6:a8:cf:da:b1:a2:ca:10:da:
                    82:61:21:8e:ff:db:71:80:59:d4:b9:2f:04:99:34:
                    ca:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0D:FD:A4:47:38:07:89:05:6F:97:CA:4E:78:61:45:16:D6:8F:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/02634ef7-76ad-316e-a32f-77f1afa3219e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:87:62:fd:7d:c6:7a:74:1f:83:7b:e0:3f:2f:51:d2:6e:67:
         56:87:38:09:ab:ba:57:87:ea:46:96:c9:74:8b:e6:05:5b:53:
         0a:0f:76:0f:1f:3e:ed:57:37:be:2f:2b:07:fd:dc:8c:cf:29:
         9a:8d:78:28:6c:59:1a:d5:3f:6b:79:9f:1f:59:4d:72:25:5e:
         ed:9a:1a:00:65:55:56:a8:84:52:9d:a9:88:7f:6a:1c:f9:7f:
         80:c0:ee:9e:bf:3b:6e:85:9c:fe:50:37:34:f8:58:a6:63:5d:
         9f:cb:31:18:4e:18:2c:9d:09:00:55:14:5e:c6:fe:a4:16:79:
         d8:8e:f0:36:33:96:d4:a6:25:5d:5c:ea:89:5c:eb:2e:3f:b6:
         38:52:33:1f:db:7f:1c:9a:34:f1:92:21:b9:a8:8d:c7:18:e3:
         43:c7:6d:a2:40:a6:70:13:7c:c2:4b:6c:e5:54:75:ae:ad:75:
         da:bd:75:2a:bb:e6:7c:38:c5:88:70:39:6a:db:9d:38:d6:07:
         3b:ca:96:0b:6e:0a:09:74:b6:6a:fc:fd:56:f0:58:1a:6d:f3:
         c7:75:bd:96:c4:2f:4a:7e:42:e4:81:bd:82:e3:b1:37:ad:aa:
         93:c2:ca:ad:b0:54:94:6c:18:bd:ad:c6:f7:97:4e:8a:2f:4b:
         a5:4c:07:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:22:53 2026 by rpki-client