Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/57df0c23-97c2-38c3-b47c-b9406f7fa55b.roa
File:                     57df0c23-97c2-38c3-b47c-b9406f7fa55b.roa (raw, json)
Hash identifier:          dEPcm8x8Lea5B/OYUxrNNnLlEwJOqs1heG9lEkT8n4Y=
Subject key identifier:   3D:B7:73:31:DE:FA:FB:26:E1:4C:93:E1:C1:96:18:60:C9:7B:4D:7D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AD23C05579C915098D4061680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/57df0c23-97c2-38c3-b47c-b9406f7fa55b.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     395747
IP address blocks:        172.71.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:05:57:9c:91:50:98:d4:06:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=d21dedfd-fd89-4c81-b625-d98b4e05503e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e7:36:ab:94:33:55:6c:14:7e:b7:42:ac:29:
                    ac:2f:c3:1f:a4:86:54:99:ab:c7:60:b8:06:9f:bb:
                    cd:06:ad:08:3e:bb:05:a9:82:8b:ab:4c:18:f3:9c:
                    83:4f:57:5b:5e:70:47:8f:d0:b3:ca:d1:2e:51:2b:
                    97:93:0e:86:d1:81:6f:29:c7:e1:d6:56:f9:61:20:
                    02:78:07:72:46:cf:93:bc:c6:b1:35:15:ff:39:42:
                    15:e0:38:fe:8a:4b:60:6a:8a:d0:7a:de:74:4c:7e:
                    b8:59:4d:0d:2d:f4:5a:62:b2:f8:7d:61:de:9c:d6:
                    de:71:9d:b0:97:ba:31:eb:95:c8:c6:e6:71:fd:04:
                    ce:c4:c3:71:cd:8a:56:6f:99:8a:e6:1d:5b:1b:76:
                    78:c5:cc:14:a7:f9:da:4c:05:b1:d8:44:f8:9a:f8:
                    d1:1d:be:28:d0:a2:e5:0c:d6:a7:ab:5f:f9:64:2f:
                    bd:73:78:e8:e5:d8:5a:34:d1:60:ea:cc:f3:9f:de:
                    a1:d3:ff:bc:4f:83:f4:14:44:8a:c9:6a:c7:02:8e:
                    63:14:55:9b:aa:66:44:8e:ab:10:47:77:76:90:e4:
                    96:1f:7c:98:c0:fe:46:ca:57:c8:10:c7:1a:43:78:
                    97:ae:f3:54:5e:2e:be:85:3f:bd:61:ce:5e:9f:29:
                    0f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B7:73:31:DE:FA:FB:26:E1:4C:93:E1:C1:96:18:60:C9:7B:4D:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/57df0c23-97c2-38c3-b47c-b9406f7fa55b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:c3:f5:4d:40:45:26:88:6d:f2:d7:b6:e9:13:b9:79:df:ae:
         0c:1d:a3:b0:d9:e2:0c:ed:56:3b:f0:66:17:ea:64:2d:a6:7d:
         e6:aa:3a:70:18:78:11:e8:83:14:ba:41:90:b4:15:64:7b:c4:
         d3:90:ca:3a:8d:42:ae:7f:af:6c:26:93:d6:2d:16:3f:25:39:
         40:75:53:fd:af:e7:d0:51:a3:d2:f8:30:61:fe:0b:50:af:c0:
         a2:75:05:26:b2:28:e1:00:ba:82:be:00:2d:f1:c5:a9:9e:39:
         8a:d6:c4:d2:46:f5:9d:2a:82:4a:53:be:2a:24:f0:ec:ae:20:
         15:db:70:fd:c2:0d:40:25:6c:8c:e3:82:b2:d8:f1:a0:a8:15:
         ea:12:f2:15:29:43:d3:13:f0:55:8e:9f:e8:e5:77:0c:73:e8:
         be:b1:f9:91:66:f0:36:a1:44:39:f8:3c:ef:94:aa:7d:d4:0c:
         16:1d:ac:8e:81:cb:f8:a6:b2:91:aa:8a:00:74:bc:68:51:c1:
         ce:ee:eb:35:28:4a:92:12:3c:f8:c8:26:ce:ea:34:e7:6e:0c:
         d6:46:99:96:27:26:3e:8e:3b:0c:b1:ad:08:22:64:ca:ab:d0:
         a8:f4:51:ac:c3:19:ba:e0:c0:2b:cf:2a:ee:d5:bd:48:4c:cd:
         cd:71:98:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPAVXnJFQmNQGFoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk
ZDIxZGVkZmQtZmQ4OS00YzgxLWI2MjUtZDk4YjRlMDU1MDNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+c2q5QzVWwUfrdCrCmsL8MfpIZUmavHYLgG
n7vNBq0IPrsFqYKLq0wY85yDT1dbXnBHj9CzytEuUSuXkw6G0YFvKcfh1lb5YSAC
eAdyRs+TvMaxNRX/OUIV4Dj+iktgaorQet50TH64WU0NLfRaYrL4fWHenNbecZ2w
l7ox65XIxuZx/QTOxMNxzYpWb5mK5h1bG3Z4xcwUp/naTAWx2ET4mvjRHb4o0KLl
DNanq1/5ZC+9c3jo5dhaNNFg6szzn96h0/+8T4P0FESKyWrHAo5jFFWbqmZEjqsQ
R3d2kOSWH3yYwP5GylfIEMcaQ3iXrvNUXi6+hT+9Yc5enykP7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD23czHe+vsm4UyT4cGWGGDJe019MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTdkZjBjMjMtOTdjMi0z
OGMzLWI0N2MtYjk0MDZmN2ZhNTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEdbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI7D9U1ARSaIbfLXtukTuXnfrgwdo7DZ4gztVjvwZhfqZC2mfeaqOnAY
eBHogxS6QZC0FWR7xNOQyjqNQq5/r2wmk9YtFj8lOUB1U/2v59BRo9L4MGH+C1Cv
wKJ1BSayKOEAuoK+AC3xxameOYrWxNJG9Z0qgkpTviok8OyuIBXbcP3CDUAlbIzj
grLY8aCoFeoS8hUpQ9MT8FWOn+jldwxz6L6x+ZFm8DahRDn4PO+Uqn3UDBYdrI6B
y/imspGqigB0vGhRwc7u6zUoSpISPPjIJs7qNOduDNZGmZYnJj6OOwyxrQgiZMqr
0Kj0UazDGbrgwCvPKu7VvUhMzc1xmFM=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:53:29 2025 by rpki-client