Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/d164de3e-4cd4-3bbd-9d16-1e2f9785cdbc.roa
File:                     d164de3e-4cd4-3bbd-9d16-1e2f9785cdbc.roa (raw, json)
Hash identifier:          vk6bSAUmeRY5rFHpjujT6FwQDW9m4+bUpeVVadW+Uw8=
Subject key identifier:   FF:2C:BC:0B:95:4A:78:80:0C:4F:43:3A:00:64:50:1F:D0:9C:F7:E5
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584F4975783605A5162B066BD400
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/d164de3e-4cd4-3bbd-9d16-1e2f9785cdbc.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     137409
IP address blocks:        173.239.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:78:36:05:a5:16:2b:06:6b:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ab3dd1f9-4224-4349-8344-23796525e93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:41:be:36:3c:30:3e:37:7f:8f:2a:29:c4:14:
                    31:c4:f2:f0:14:0b:a2:5b:fe:9e:53:4a:cd:c2:1f:
                    80:aa:1c:c7:ef:55:bc:be:a7:cb:28:71:fe:06:b5:
                    48:e1:98:f4:c0:0b:dd:10:1c:a2:f3:27:64:bb:45:
                    6f:4c:c5:d2:6e:64:bb:4a:26:3a:8f:24:a1:63:d3:
                    ae:d8:2e:a5:7d:5d:91:df:a5:eb:e6:24:af:a7:df:
                    d9:1e:9e:2e:f2:de:0c:d9:11:85:f0:f8:0e:a0:76:
                    8d:36:39:85:51:78:c5:d2:19:8f:62:2f:66:a3:17:
                    18:7c:93:29:c5:48:43:a4:6e:a1:26:66:a1:31:6f:
                    11:e7:c7:bd:46:91:2f:44:d8:14:e1:b3:68:d2:e5:
                    fb:f2:54:ac:16:3b:a9:63:79:e9:c3:dc:53:28:ec:
                    94:1c:d3:48:b4:b3:79:87:5f:ab:be:f3:82:38:22:
                    3b:2b:0c:7b:33:de:5a:ea:4b:42:bb:c8:e2:48:18:
                    a1:87:7a:15:d5:b8:89:43:01:3a:82:29:69:37:48:
                    d8:6c:24:e0:86:cf:42:9b:53:29:82:99:68:ed:2a:
                    90:48:b8:ed:55:ed:d9:83:25:f7:10:d6:de:83:8c:
                    2a:bb:a7:70:02:16:48:7d:d1:6b:d6:87:44:76:4d:
                    97:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:2C:BC:0B:95:4A:78:80:0C:4F:43:3A:00:64:50:1F:D0:9C:F7:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/d164de3e-4cd4-3bbd-9d16-1e2f9785cdbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.239.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:56:24:1f:00:63:f2:6f:e1:bf:14:d7:f4:07:9e:aa:78:87:
         e2:d7:9a:05:dd:77:c3:2c:aa:57:79:bc:a2:c2:98:8c:97:58:
         e1:3b:60:c0:f1:4d:2f:c7:a7:05:ba:f2:1f:b3:92:6b:1b:b0:
         d5:81:c0:4c:f3:c2:a6:56:e4:63:34:d1:da:42:8e:df:5b:6a:
         b5:eb:f9:99:e3:07:0e:c3:5a:76:3a:c0:59:66:1c:13:f2:33:
         59:1c:cc:7b:c8:3d:46:4b:80:54:0b:42:aa:0a:6c:27:56:0d:
         80:95:2a:64:ee:a9:38:76:8e:aa:cd:a4:0b:2d:7b:83:62:aa:
         b7:9a:2f:f2:db:ff:97:2b:21:ec:5f:0e:86:82:8d:f7:fd:b0:
         75:51:63:fd:87:4d:50:3e:f3:4b:a1:2b:36:ad:e4:3f:93:61:
         8a:ea:02:3c:13:ab:74:f6:d5:12:5f:74:12:b6:48:b8:c2:4c:
         61:97:b6:61:eb:8f:f9:a2:f6:70:7e:9a:a3:ee:22:6e:35:98:
         85:0e:fc:a3:30:65:e3:72:d8:e0:72:41:69:cb:83:d5:73:7b:
         9f:17:38:fe:c5:b6:bf:b4:3d:ca:48:d9:1d:5e:f1:e1:85:6d:
         86:5d:46:dd:0f:d4:3d:33:58:d9:73:a2:f7:09:6c:2c:8c:2d:
         80:c4:71:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:34:04 2026 by rpki-client