Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/a140d151-5e59-30bd-81ec-045425e2fb5b.roa
File:                     a140d151-5e59-30bd-81ec-045425e2fb5b.roa (raw, json)
Hash identifier:          fvI5NQ6G7F7FDhIupI3uHXrTUeY18OxxvVBAYByzJZk=
Subject key identifier:   C2:01:0A:31:D7:99:CB:CB:1F:EF:D2:FA:CA:74:2A:C1:33:22:1E:80
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584DC5658F1AE2487D68E5848380
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/a140d151-5e59-30bd-81ec-045425e2fb5b.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     206092
IP address blocks:        173.239.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:8f:1a:e2:48:7d:68:e5:84:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=35c5cbb3-1d3f-4e6a-ac34-651e9886609b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:81:82:40:f0:f2:bd:a8:36:4c:ae:c9:a2:b7:
                    0b:20:f4:86:5e:b1:eb:59:61:0e:3a:93:40:83:94:
                    37:0c:53:1e:9f:9c:ec:ba:86:cc:22:a7:54:38:60:
                    1f:cf:90:01:06:ac:5e:d8:eb:0b:7a:b8:ad:44:d1:
                    55:c6:1f:6f:6d:dc:db:32:ef:b5:13:a6:40:4b:93:
                    9f:18:67:ee:a6:6f:c2:fa:26:ce:9c:86:54:a9:a3:
                    f3:60:e8:db:be:68:49:b7:4a:3f:c5:83:9b:3b:f4:
                    3c:c8:2e:83:d9:82:0e:bb:8a:ef:79:71:4a:e5:fd:
                    18:bf:c2:0f:d3:e7:a4:5e:c1:1a:4b:3e:67:da:f6:
                    aa:2e:a6:2c:d0:cb:91:2d:12:40:54:cc:76:c5:1d:
                    b2:34:5b:f9:d8:ca:cf:03:eb:d1:90:cb:2f:3f:7c:
                    6f:20:00:84:4b:ef:71:28:32:c3:07:5a:66:d6:b7:
                    32:02:40:07:27:ee:eb:1c:02:62:8c:18:29:b1:b9:
                    c8:07:82:ff:4a:73:63:26:12:75:34:92:6d:c4:36:
                    d6:9a:aa:0e:86:bc:2e:9c:1f:30:78:42:78:bb:67:
                    2f:e5:33:1e:0c:8b:7d:f5:00:09:e3:12:9b:e6:84:
                    90:bc:e2:a3:0d:6e:30:6e:90:83:97:20:c1:92:de:
                    b7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:01:0A:31:D7:99:CB:CB:1F:EF:D2:FA:CA:74:2A:C1:33:22:1E:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/a140d151-5e59-30bd-81ec-045425e2fb5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.239.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:ba:92:37:cd:d8:8a:39:aa:fc:2c:7b:3c:4f:48:5c:24:87:
         b6:a2:57:99:21:0b:e5:c1:68:f9:46:31:41:51:b7:e9:03:7b:
         70:92:6c:47:16:70:06:71:f6:74:58:0e:9e:e7:b3:9a:be:39:
         26:29:7c:57:64:97:db:94:21:98:e3:a2:ed:05:8a:1f:88:65:
         e2:a7:4a:bf:4b:35:03:d7:7e:fb:0e:ba:66:16:e0:46:a0:70:
         36:c6:39:ee:b9:42:55:01:c6:dc:17:95:75:3a:45:d9:42:f3:
         5b:86:5f:f6:00:01:f0:73:4f:16:9c:75:16:fe:76:08:9b:bd:
         b5:e6:dc:08:82:c5:d9:4e:22:69:43:95:a1:62:3f:f7:cf:d2:
         8b:33:62:b0:8d:cb:8e:9d:9b:47:15:da:b1:7b:7a:57:86:e7:
         8d:d9:9a:5a:51:d9:d3:9a:b0:98:4b:d5:5b:6e:c0:26:f1:4f:
         a4:36:31:83:ba:90:55:6d:1f:fc:28:c7:0d:49:c6:01:c7:96:
         c7:e5:a7:4b:5d:07:63:99:73:06:69:7c:18:a1:a6:8d:01:e7:
         d1:f8:f2:bd:91:ad:92:42:e6:59:52:ad:e8:04:3c:9b:18:f8:
         24:f8:1b:c8:fb:ca:75:ad:f1:ce:27:9f:1b:21:da:ae:b4:04:
         ba:63:40:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:02:42 2026 by rpki-client