Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/48ba97a9-e439-3494-95f4-ba34ffeddc52.roa
File:                     48ba97a9-e439-3494-95f4-ba34ffeddc52.roa (raw, json)
Hash identifier:          9w32ILcbOAFCA4AMV237KjcvESWRSIR8vh63mGeYx3o=
Subject key identifier:   6D:F3:13:3E:14:37:03:0B:04:50:0E:96:96:B5:CB:37:0D:96:C8:C5
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584ACCA655EAA7E90A1850A8A100
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/48ba97a9-e439-3494-95f4-ba34ffeddc52.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     137409
IP address blocks:        173.239.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:55:ea:a7:e9:0a:18:50:a8:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=1383178c-86d0-4ba5-9bae-e30f2d6b7221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d0:44:3d:8f:e5:59:9f:ab:fc:64:ae:35:b9:
                    51:96:5a:af:30:47:32:6e:55:79:2a:6e:10:d0:8d:
                    c8:ac:2d:5c:10:63:e9:ee:b1:9a:4e:74:4b:01:ee:
                    2a:34:be:f4:2b:2b:97:e5:90:b6:40:b5:20:65:91:
                    78:a9:b5:7a:16:7b:4f:23:9e:2f:6c:30:61:e7:bc:
                    59:cb:fb:df:13:a2:4f:2b:7a:09:e7:46:55:f5:97:
                    23:57:9b:05:3d:90:b2:bf:4c:83:a7:ce:a5:5e:25:
                    a3:1a:ab:88:18:dd:d1:ed:b9:03:33:4f:0a:2d:6f:
                    aa:1a:59:67:e2:e1:cd:a5:11:fd:a4:c9:44:af:6a:
                    7c:cf:db:c8:d2:d0:a3:60:02:db:02:da:05:71:b5:
                    9a:2d:42:b5:e6:cf:59:07:0f:19:a4:94:76:a0:80:
                    a8:38:0a:bf:09:a9:cb:ec:07:93:c9:dd:14:a2:ab:
                    a8:a6:83:02:8d:3c:31:67:be:f0:27:8c:ca:ad:99:
                    d4:84:e5:d1:d2:93:15:3d:e6:7b:07:2a:0a:23:af:
                    64:85:29:9d:9e:d8:ec:ce:ae:5f:0b:b5:3e:c0:57:
                    42:b0:ed:f6:76:bc:a6:cc:ce:d5:d3:d1:33:71:7f:
                    5c:48:12:7e:91:de:cc:ac:ba:eb:8a:a0:3a:b1:bc:
                    32:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F3:13:3E:14:37:03:0B:04:50:0E:96:96:B5:CB:37:0D:96:C8:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/48ba97a9-e439-3494-95f4-ba34ffeddc52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.239.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:11:4c:42:64:56:c9:2d:e6:a5:3e:9a:23:b9:54:b6:74:7e:
         67:6e:58:45:b6:01:15:80:b1:24:82:30:3c:b9:a8:d0:b3:a9:
         5d:b4:30:d5:47:25:c0:9f:50:3e:b6:17:a1:2f:df:37:c1:8c:
         1c:26:e7:9e:fb:9e:58:cc:d6:bb:fc:f7:3b:ea:c7:59:09:aa:
         53:6d:77:fa:b9:3b:5a:81:5c:f7:bd:e6:37:a6:e0:ed:06:6e:
         ca:14:b4:f1:cb:25:af:ae:33:de:6e:b8:46:97:65:56:88:6a:
         c5:a8:8e:6d:8f:fe:33:23:6c:95:55:a5:4d:e0:63:16:5c:a9:
         53:9f:50:87:ee:e2:ff:c6:3a:9c:e8:29:c7:80:30:42:2c:b9:
         7a:a9:5e:4a:62:d3:25:2c:d5:54:18:06:7d:ee:ab:8b:a8:9f:
         19:38:5e:48:1a:3f:9b:1c:dc:fa:d0:cc:f8:11:9c:ae:fd:a6:
         4b:a8:82:b5:ea:05:75:6a:48:c2:a2:7b:83:7d:be:36:b8:d8:
         4c:63:b2:62:9e:5b:3f:f2:c3:15:77:bb:21:70:41:db:dd:e2:
         f5:8a:95:96:96:92:50:9a:0d:53:4f:73:64:dc:56:78:72:8e:
         db:80:ff:fa:e3:81:fe:ec:93:69:ad:8c:62:1a:39:97:13:0e:
         ca:59:2c:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMplXqp+kKGFCooQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx
NzNhMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk
MTM4MzE3OGMtODZkMC00YmE1LTliYWUtZTMwZjJkNmI3MjIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNBEPY/lWZ+r/GSuNblRllqvMEcyblV5Km4Q
0I3IrC1cEGPp7rGaTnRLAe4qNL70KyuX5ZC2QLUgZZF4qbV6FntPI54vbDBh57xZ
y/vfE6JPK3oJ50ZV9ZcjV5sFPZCyv0yDp86lXiWjGquIGN3R7bkDM08KLW+qGlln
4uHNpRH9pMlEr2p8z9vI0tCjYALbAtoFcbWaLUK15s9ZBw8ZpJR2oICoOAq/CanL
7AeTyd0UoquopoMCjTwxZ77wJ4zKrZnUhOXR0pMVPeZ7ByoKI69khSmdntjszq5f
C7U+wFdCsO32drymzM7V09EzcX9cSBJ+kd7MrLrriqA6sbwyBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG3zEz4UNwMLBFAOlpa1yzcNlsjFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx
ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvNDhiYTk3YTktZTQzOS0z
NDk0LTk1ZjQtYmEzNGZmZWRkYzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh
M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm
MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk
MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/jMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACQRTEJkVskt5qU+miO5VLZ0fmduWEW2ARWAsSSCMDy5qNCzqV20MNVH
JcCfUD62F6Ev3zfBjBwm5577nljM1rv89zvqx1kJqlNtd/q5O1qBXPe95jem4O0G
bsoUtPHLJa+uM95uuEaXZVaIasWojm2P/jMjbJVVpU3gYxZcqVOfUIfu4v/GOpzo
KceAMEIsuXqpXkpi0yUs1VQYBn3uq4uonxk4XkgaP5sc3PrQzPgRnK79pkuogrXq
BXVqSMKie4N9vja42ExjsmKeWz/ywxV3uyFwQdvd4vWKlZaWklCaDVNPc2TcVnhy
jtuA//rjgf7sk2mtjGIaOZcTDspZLDk=
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:28:01 2025 by rpki-client