Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c6ebdb80-86f9-342d-88db-f0a12853e3b3.roa
File:                     c6ebdb80-86f9-342d-88db-f0a12853e3b3.roa (raw, json)
Hash identifier:          kfWhHTeYuhy8+g1ZqRU479/fKSZP/8RGw+Skc0+I4Kc=
Subject key identifier:   A1:B5:3D:69:6E:5D:F6:B5:EB:A1:25:47:CD:E7:C8:20:05:D1:82:96
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584B84E77AAD429C8B16547B3600
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c6ebdb80-86f9-342d-88db-f0a12853e3b3.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     206092
IP address blocks:        173.239.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:7a:ad:42:9c:8b:16:54:7b:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=ef362d56-6922-46e1-ba7c-57ea35b478ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fd:87:ef:24:a0:d6:91:af:af:5c:3b:9c:57:
                    0b:80:7d:9d:d6:96:2e:2c:93:dc:28:b9:71:fc:26:
                    8d:8a:42:86:84:26:cd:fd:51:94:71:99:b0:90:74:
                    1f:36:42:2b:67:8c:1b:b4:28:f8:e8:1f:c1:08:15:
                    12:08:59:ed:ff:2d:71:62:ec:73:97:6b:77:75:8a:
                    c7:48:f1:5e:f0:95:1b:b9:a8:28:54:38:48:6b:16:
                    3f:4d:46:a7:9f:7b:73:3c:18:dd:92:f2:61:93:d1:
                    d3:78:c0:e2:f6:3d:06:51:56:d0:5b:7f:69:72:49:
                    07:87:3c:d8:d1:c1:c6:f9:0f:1f:a2:82:95:c6:43:
                    21:9c:86:87:4a:20:bf:33:37:e1:a0:c4:70:a4:01:
                    e8:0c:02:51:dd:5f:de:9b:4b:3a:b7:47:82:d0:0b:
                    dd:05:d6:8e:d1:d5:74:1b:df:48:f8:be:eb:64:7f:
                    d9:75:9d:6e:36:56:9b:4e:bb:e1:d1:83:a4:90:2f:
                    52:ed:af:35:30:67:db:69:0d:8d:ff:47:de:0b:3f:
                    e6:89:6a:dd:92:12:39:c6:c2:54:e5:75:7c:6d:ee:
                    36:87:de:47:ad:6a:b8:c4:ba:e0:71:7d:f1:16:cb:
                    8f:62:ce:bb:af:ed:79:be:a4:e7:35:40:43:4f:46:
                    d8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B5:3D:69:6E:5D:F6:B5:EB:A1:25:47:CD:E7:C8:20:05:D1:82:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c6ebdb80-86f9-342d-88db-f0a12853e3b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.239.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:83:9c:13:2f:c5:24:d6:a0:2d:f1:9d:3b:79:e4:5b:52:f6:
         61:91:cc:e8:ad:d1:31:96:a8:09:96:b1:33:d0:89:2e:0d:47:
         49:52:d3:60:6f:8b:55:70:8f:05:57:45:35:ba:53:3c:a3:fa:
         c1:39:be:d9:46:bd:5d:11:59:72:40:bb:1a:0d:5f:07:91:78:
         e0:38:98:0e:f2:47:6c:1e:b4:30:5e:66:40:55:19:59:ab:ca:
         05:b4:5f:ec:09:11:b3:53:7e:db:77:09:77:5e:a3:cc:33:25:
         69:9a:c4:e2:79:d5:e3:1a:f8:d4:78:b4:01:07:ee:8c:8b:18:
         75:7e:9e:d4:fc:e6:f6:38:a8:d8:4f:7b:1b:e3:6c:2a:fb:6b:
         94:b6:e0:1b:1c:8a:84:9b:7d:a6:b5:a0:50:2b:d5:8a:49:ed:
         c9:80:6f:69:b2:2a:b4:31:32:90:17:96:95:35:67:d5:19:99:
         d5:e6:c6:37:96:f4:b6:91:07:01:1a:22:10:84:1d:df:75:ea:
         fa:88:5d:c5:1d:b1:04:cd:86:ff:11:dd:22:eb:5d:55:6e:3b:
         3e:c3:da:02:be:3d:3b:02:d7:c4:33:ea:2c:4a:26:ed:e6:84:
         c7:fc:27:85:07:27:3f:cf:a1:16:82:ab:3b:9b:74:0d:63:b1:
         47:9c:f2:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53qtQpyLFlR7NgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx
NzNhMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk
ZWYzNjJkNTYtNjkyMi00NmUxLWJhN2MtNTdlYTM1YjQ3OGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgf2H7ySg1pGvr1w7nFcLgH2d1pYuLJPcKLlx
/CaNikKGhCbN/VGUcZmwkHQfNkIrZ4wbtCj46B/BCBUSCFnt/y1xYuxzl2t3dYrH
SPFe8JUbuagoVDhIaxY/TUann3tzPBjdkvJhk9HTeMDi9j0GUVbQW39pckkHhzzY
0cHG+Q8fooKVxkMhnIaHSiC/MzfhoMRwpAHoDAJR3V/em0s6t0eC0AvdBdaO0dV0
G99I+L7rZH/ZdZ1uNlabTrvh0YOkkC9S7a81MGfbaQ2N/0feCz/miWrdkhI5xsJU
5XV8be42h95HrWq4xLrgcX3xFsuPYs67r+15vqTnNUBDT0bYSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKG1PWluXfa166ElR83nyCAF0YKWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx
ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvYzZlYmRiODAtODZmOS0z
NDJkLTg4ZGItZjBhMTI4NTNlM2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh
M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm
MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk
MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK6DnBMvxSTWoC3xnTt55FtS9mGRzOit0TGWqAmWsTPQiS4NR0lS02Bv
i1VwjwVXRTW6Uzyj+sE5vtlGvV0RWXJAuxoNXweReOA4mA7yR2wetDBeZkBVGVmr
ygW0X+wJEbNTftt3CXdeo8wzJWmaxOJ51eMa+NR4tAEH7oyLGHV+ntT85vY4qNhP
exvjbCr7a5S24BscioSbfaa1oFAr1YpJ7cmAb2myKrQxMpAXlpU1Z9UZmdXmxjeW
9LaRBwEaIhCEHd916vqIXcUdsQTNhv8R3SLrXVVuOz7D2gK+PTsC18Qz6ixKJu3m
hMf8J4UHJz/PoRaCqzubdA1jsUec8h4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:42 2025 by rpki-client