Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/291a591a-dffb-329c-aa23-b434e04ebd8d.roa
File:                     291a591a-dffb-329c-aa23-b434e04ebd8d.roa (raw, json)
Hash identifier:          ao5YcBVgVVQbG+xh2SzrEWmRVuheP4HexsLWEo4GHCU=
Subject key identifier:   F8:FC:E3:D5:24:C8:11:7D:17:55:C3:27:3C:12:9A:28:AA:B2:44:AA
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584EF769485A458EF32FD9FE0EC0
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/291a591a-dffb-329c-aa23-b434e04ebd8d.roa
Signing time:             Wed 26 Aug 2026 15:45:18 +0000
ROA not before:           Wed 26 Aug 2026 15:45:18 +0000
ROA not after:            Tue 24 Nov 2026 16:45:18 +0000
asID:                     275837
IP address blocks:        173.244.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:69:48:5a:45:8e:f3:2f:d9:fe:0e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Aug 26 15:45:18 2026 GMT
            Not After : Nov 24 16:45:18 2026 GMT
        Subject: CN=fd81dca3-458d-4e69-a603-28b9b9b149e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:eb:97:fc:d6:e8:7a:66:c1:83:0b:89:b4:11:
                    2a:1c:9b:6a:ad:8d:de:80:1c:e6:6c:8c:fc:ba:77:
                    a3:05:4b:6b:09:74:53:75:34:5a:60:03:6d:f6:24:
                    5c:66:9e:3d:0f:c6:e3:e9:3b:7c:01:1f:98:a0:27:
                    32:d0:b2:2f:1f:13:76:5e:e8:5a:11:e8:e5:f7:85:
                    1a:39:b3:25:72:ab:a4:58:4d:f9:58:f4:82:be:8b:
                    7f:67:ac:05:16:9b:b0:8f:c7:5d:3e:e0:f7:73:82:
                    bc:8a:7a:d9:4a:d5:21:9a:bd:4b:80:9c:42:89:fa:
                    09:09:3f:ff:73:03:31:50:86:f5:25:ff:76:cb:6c:
                    5e:52:3c:82:da:32:c7:fd:89:78:91:15:8d:55:b8:
                    94:95:4b:1e:da:69:42:5f:38:e2:4e:32:bf:3a:59:
                    7e:0d:6a:46:bb:80:6a:c2:fc:59:cf:02:5e:a2:ca:
                    32:74:38:91:2f:ce:9a:df:80:cb:6d:06:87:c2:8e:
                    bd:79:e1:d7:21:d3:86:92:f7:a4:89:dc:54:9a:cd:
                    c1:ea:b4:c2:f5:af:79:7f:e9:87:79:a1:42:e3:f6:
                    4d:89:22:2c:e2:57:60:cf:2f:95:a1:44:8a:9c:2d:
                    64:cd:96:e0:62:08:66:e1:8c:a0:2d:8d:ae:f3:ca:
                    a8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FC:E3:D5:24:C8:11:7D:17:55:C3:27:3C:12:9A:28:AA:B2:44:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/291a591a-dffb-329c-aa23-b434e04ebd8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:2d:7a:e7:50:e4:10:22:7c:d9:84:79:d1:5c:93:0e:95:99:
         36:fb:4e:a4:f3:0b:ce:4b:a2:e6:22:f8:c9:63:ab:9c:ed:25:
         c9:42:df:ad:58:f6:7e:7b:6a:b7:4f:36:cc:f7:47:9f:2a:fc:
         0c:34:69:76:42:a3:a0:2a:06:13:e2:09:a5:91:60:f0:f6:f9:
         01:43:22:92:10:fe:84:81:f6:42:0a:e5:dd:cc:ec:14:4d:5d:
         44:d1:6f:82:2f:a6:50:36:b3:23:24:a6:d7:fd:17:d1:5c:c1:
         3c:5e:d6:d4:95:60:aa:49:97:b6:62:ec:28:dd:d5:ab:ee:2e:
         f9:cf:28:3b:95:3b:ea:28:01:a6:6e:21:ed:a0:16:c5:8f:27:
         f9:6f:41:67:8f:bf:43:1e:78:54:29:59:30:bf:16:aa:ab:07:
         23:08:0b:63:42:4f:1e:f2:9c:61:21:b4:5a:93:23:ee:a9:ae:
         42:04:db:b5:7b:0e:45:4b:42:92:3c:aa:29:27:1f:bc:28:07:
         69:54:3f:04:35:d6:da:49:e4:12:1b:b0:c1:9c:e5:5a:78:00:
         5d:c1:45:25:f1:4f:2e:38:75:65:9a:c6:b1:01:44:61:86:52:
         11:af:26:ba:b8:dd:fe:b8:9b:7c:68:2a:cb:19:b0:03:77:1a:
         cb:33:e3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:33:37 2026 by rpki-client