Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6c71a50b-e704-3623-89e8-1db9283e8ca4.roa
File:                     6c71a50b-e704-3623-89e8-1db9283e8ca4.roa (raw, json)
Hash identifier:          c4PmRrtpbUwHWz+dhRganrZpceGsqLGiJ10aHLo4a2o=
Subject key identifier:   BD:7E:D4:28:CE:FA:CE:D8:25:5A:4D:13:C2:82:CB:8E:20:8F:6C:97
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584E0865E810A324F0E2BA7700C0
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6c71a50b-e704-3623-89e8-1db9283e8ca4.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     137409
IP address blocks:        64.64.112.0/24 maxlen: 24
                          173.239.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:65:e8:10:a3:24:f0:e2:ba:77:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=d2ac1536-f0f7-4d34-b807-f35995d2f11d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bb:01:ec:10:50:0c:f3:d9:72:39:82:1f:fc:
                    3b:75:ca:84:e1:57:68:95:1d:bc:bb:92:ce:ec:1e:
                    e3:52:2b:bc:34:0e:08:f0:c4:a1:42:b6:bd:4b:66:
                    9f:f1:dc:94:d6:e3:10:95:a2:d5:82:b2:12:f4:a5:
                    3b:5c:f4:e3:de:66:37:e5:01:76:d0:46:70:6d:f6:
                    a6:58:93:e5:a3:19:23:25:8f:78:28:55:5b:a0:42:
                    63:e7:ef:83:91:96:53:af:1b:a5:55:1f:0a:46:e2:
                    80:54:61:91:b9:98:bd:ac:0c:0f:2b:03:53:f3:66:
                    1d:db:f7:d4:85:bd:13:6f:ce:c4:2b:48:a2:3c:ac:
                    da:f2:60:ed:42:b4:7c:2c:9c:57:57:49:ac:7f:3f:
                    23:05:ae:95:a2:94:d2:13:2b:4c:83:65:d3:38:f4:
                    b2:77:ed:8a:ab:e8:fa:49:21:5c:d1:07:f0:e3:31:
                    85:96:c8:77:74:2d:16:59:18:8c:bd:27:a3:ac:65:
                    79:bd:f9:c9:a3:cd:2d:62:f0:4a:66:c5:82:60:d2:
                    58:b6:65:95:a4:a4:4c:c6:eb:2b:1c:1f:09:29:79:
                    b1:4f:4a:d8:ef:37:41:b3:c0:c7:7c:be:47:2c:0e:
                    c4:b5:ef:8b:3e:0c:b9:34:56:26:36:a9:e9:3f:96:
                    67:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7E:D4:28:CE:FA:CE:D8:25:5A:4D:13:C2:82:CB:8E:20:8F:6C:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6c71a50b-e704-3623-89e8-1db9283e8ca4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.64.112.0/24
                  173.239.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:27:1f:01:8c:cc:35:58:81:6a:50:e3:77:c1:8a:6d:9e:fd:
         eb:96:6c:26:8b:d3:08:46:4b:17:d6:cc:3a:8f:f8:25:68:57:
         c5:0a:20:69:d3:93:96:46:bf:fe:70:ed:2a:62:0b:bd:e5:af:
         f8:72:a0:d2:55:72:c0:10:99:3d:4e:89:15:27:82:40:a0:b3:
         07:4a:07:38:93:d8:c6:fa:ab:1e:05:46:d1:c9:8b:6d:f3:e0:
         60:80:fc:91:54:bd:98:f3:6f:b1:d1:9d:5d:d5:78:06:e7:6b:
         f0:fc:d6:fd:b3:7a:48:30:35:bd:6d:92:c3:db:71:fc:ed:ef:
         68:71:9e:a6:bd:a9:87:27:45:6e:4b:32:b5:96:33:84:ff:f9:
         67:dd:be:96:fb:ae:60:3c:48:7f:5b:78:22:23:06:c4:bf:14:
         26:fc:a3:ba:95:a7:38:d8:fd:04:9b:7a:e0:fa:21:ee:4f:d0:
         ca:ca:2a:74:ae:81:ab:12:26:17:d7:b1:53:e5:cd:8b:d0:5f:
         06:ed:55:f5:e6:0c:c5:04:9f:f6:a6:2f:f3:ae:15:5a:67:de:
         d0:0c:cd:01:5c:83:cd:4c:39:65:a8:ac:48:0f:e8:63:0d:42:
         07:d1:21:a0:04:c9:67:13:38:86:c3:cb:7b:91:fe:3e:46:a1:
         ef:7e:d1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:25:33 2026 by rpki-client