Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/1cec9401-9fe6-3876-b322-d8b10fface07.roa
File:                     1cec9401-9fe6-3876-b322-d8b10fface07.roa (raw, json)
Hash identifier:          giTrvsB0dCsaaAXATcP0tPX3eZoRuyphFdq9vq0tY68=
Subject key identifier:   6E:15:B5:40:4D:2E:8C:A0:14:3D:04:E0:03:3A:A1:50:D0:09:1E:8C
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584AC9DB9CA00A260298D25A2C00
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/1cec9401-9fe6-3876-b322-d8b10fface07.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     30860
IP address blocks:        173.239.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:9c:a0:0a:26:02:98:d2:5a:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=88080db2-ffcb-4b31-9cc1-9b0c19d71890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a3:b0:57:84:41:af:53:ca:da:4d:9c:10:12:
                    0f:0d:3b:0d:ca:84:e7:05:ef:ce:a5:96:a8:fc:7d:
                    36:f4:bc:14:f8:64:32:b5:a8:f7:68:66:78:bd:c8:
                    25:0a:12:9c:74:e8:3a:ec:1f:7a:b8:84:63:65:78:
                    8a:2d:c4:66:7b:66:99:7c:95:09:c1:35:1f:c8:f3:
                    97:aa:34:24:e9:5d:29:28:6f:3a:7e:2b:0e:14:2b:
                    6e:7d:ba:4d:8b:b4:b9:0b:b6:f8:40:2a:30:2f:5b:
                    a3:8c:2b:3b:07:af:1a:d0:9d:32:e5:a5:d5:94:94:
                    64:76:9c:66:f6:da:c0:36:45:e1:f1:e6:63:4a:29:
                    9b:89:9c:06:c9:cf:bc:54:20:d6:55:93:f4:d5:8c:
                    c2:fa:c6:1f:1e:75:89:ef:e4:3e:05:26:b9:75:ea:
                    dd:7f:21:1a:b9:3d:71:85:20:d0:99:39:1d:da:2a:
                    2d:c8:1b:2c:e8:b7:b7:bc:c4:86:36:72:8d:e8:d8:
                    4f:84:69:42:4a:ec:0c:2c:7b:02:79:0c:e4:8b:2c:
                    66:a7:8e:6c:1c:c2:1a:b3:91:8d:80:4b:d0:5d:9a:
                    fc:78:1f:b5:fb:44:5c:20:18:48:67:b9:45:e3:fb:
                    ea:b3:dc:a5:fa:7a:ef:d0:db:3b:c8:47:27:e7:a7:
                    62:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:15:B5:40:4D:2E:8C:A0:14:3D:04:E0:03:3A:A1:50:D0:09:1E:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/1cec9401-9fe6-3876-b322-d8b10fface07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.239.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:8b:0e:8d:cb:e0:92:36:3c:c6:08:a0:61:7f:34:54:86:c8:
         99:16:c1:55:eb:81:65:4a:8f:8a:41:40:18:bb:5d:7d:7e:fe:
         64:ab:07:2f:ae:5d:6f:ae:a5:3c:74:aa:85:1f:14:03:93:e8:
         79:80:45:ad:a8:0d:e2:be:61:f9:fe:f9:69:2d:e9:32:79:28:
         68:ab:7f:c8:b1:53:50:63:fb:ad:26:eb:09:42:d6:3f:d6:a7:
         c0:1e:5e:bc:c1:2f:06:e5:e5:95:1b:5f:d4:c6:71:7f:16:19:
         26:0f:05:8e:2b:82:a6:ec:73:1a:00:ed:bf:50:90:f3:ee:21:
         8d:8c:8d:03:4b:7b:7d:bd:84:bb:95:35:e2:d2:73:b4:6e:59:
         e1:f9:46:a5:b4:9e:52:61:a8:35:6b:65:0f:00:de:9e:56:fb:
         35:1f:7b:e7:a9:72:2f:19:bd:d4:82:cd:70:01:78:82:dd:5e:
         8b:14:52:20:a7:3d:4c:1d:90:43:51:24:2d:d4:56:cb:11:d4:
         15:1b:74:10:02:a7:b9:b9:50:2b:46:6c:35:fd:2a:53:64:1e:
         89:fb:4c:21:0d:06:59:37:d4:86:0f:4c:07:c4:2d:68:90:2f:
         6f:f6:16:c9:29:5d:b9:77:60:45:c3:68:b2:ee:f0:93:6e:63:
         e3:fe:34:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:54:11 2025 by rpki-client