Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7171b1a1-b47a-3900-865e-4cfb068b19be.roa
File:                     7171b1a1-b47a-3900-865e-4cfb068b19be.roa (raw, json)
Hash identifier:          WAeYgE5+Bkr7xRLCJJDH3LTcV66BdDCv6HzdnURPZ2A=
Subject key identifier:   5F:3D:4F:F7:1F:D9:67:2D:39:CC:5E:18:D8:AF:3B:32:FF:7D:36:F1
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584CFB1CEBA2FF45CFFE561F8700
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7171b1a1-b47a-3900-865e-4cfb068b19be.roa
Signing time:             Wed 25 Feb 2026 14:00:39 +0000
ROA not before:           Wed 25 Feb 2026 14:00:39 +0000
ROA not after:            Tue 26 May 2026 13:00:39 +0000
asID:                     137409
IP address blocks:        173.244.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fb:1c:eb:a2:ff:45:cf:fe:56:1f:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Feb 25 14:00:39 2026 GMT
            Not After : May 26 13:00:39 2026 GMT
        Subject: CN=62f706f5-b0d5-40c4-b9ee-056605540e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a5:2a:ca:43:a0:72:ea:90:af:0b:71:9d:8a:
                    c5:c1:7a:72:d5:89:9b:d8:4c:dd:18:67:d9:22:f9:
                    04:f6:3e:16:60:2f:f3:95:13:04:68:d2:9b:f3:e7:
                    3a:55:f7:18:5e:2a:cb:b4:cc:2c:12:86:41:23:9d:
                    93:bc:6d:cb:81:c9:8c:22:9d:c1:e8:34:ce:97:dd:
                    81:0d:25:d6:49:d4:b1:2a:1c:f9:48:e9:54:1e:d0:
                    05:e8:1d:61:87:87:12:15:2c:66:66:1d:7f:a0:ea:
                    ad:ee:75:35:8d:bf:c3:20:c1:1f:a7:eb:62:94:c3:
                    11:b1:06:68:52:5c:c0:0a:c1:08:f1:43:fc:93:99:
                    a9:12:c1:35:b4:24:32:fe:7d:db:a9:55:ae:f5:f5:
                    89:9b:87:d9:7e:18:9b:84:ed:d2:52:7e:a1:61:f0:
                    01:00:37:3e:ad:39:7b:f5:a6:36:38:9b:82:08:1f:
                    a6:1e:00:72:77:73:f3:cf:b9:3b:37:97:5d:0c:2a:
                    63:8b:42:b5:78:50:59:56:cd:77:0a:b7:07:ae:84:
                    71:02:20:53:9d:2b:87:b4:15:36:5a:a5:cc:a7:58:
                    9c:75:08:a5:44:13:cb:39:d9:cf:52:0a:c8:ac:e7:
                    44:80:e6:e1:18:42:85:a4:0a:1a:c5:47:5b:97:58:
                    ad:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3D:4F:F7:1F:D9:67:2D:39:CC:5E:18:D8:AF:3B:32:FF:7D:36:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7171b1a1-b47a-3900-865e-4cfb068b19be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:15:66:8a:68:aa:cc:11:fc:47:9c:64:90:b9:ad:f3:73:48:
         a3:7f:b7:14:b1:42:11:b9:c6:53:c4:3a:20:af:5a:e3:18:29:
         a1:fb:7f:ca:40:ec:7b:f6:52:5c:00:36:0e:b8:50:47:50:b9:
         71:d8:dc:25:87:de:0b:78:39:31:90:3c:11:21:48:83:bb:78:
         f6:16:bf:be:44:90:86:df:c2:c1:87:c5:0a:d9:28:b6:d2:78:
         74:eb:e5:91:f6:a0:14:35:5c:1a:76:51:fd:ba:eb:b5:0f:99:
         f3:f2:9d:ab:d9:78:b7:ae:7f:53:ba:3d:16:9f:f8:58:ea:ba:
         d7:8a:5d:22:b8:a2:26:7a:b8:54:85:15:80:43:9b:b6:d6:ea:
         0b:5e:84:78:67:3b:88:77:91:65:45:3c:3c:d9:f1:23:f4:7d:
         60:a3:02:95:b6:5a:c2:86:62:42:fd:38:68:66:2e:5e:27:15:
         ab:56:42:af:45:f5:69:a1:b1:ff:5e:dc:90:f4:93:42:f9:e1:
         c3:5e:ae:c0:ee:04:a3:e4:2d:8b:a8:d7:59:eb:f9:7f:47:e1:
         bb:df:a9:b5:59:06:56:6d:aa:72:8f:ed:9f:1e:48:55:00:7b:
         c5:2c:de:69:68:c6:9f:95:af:52:66:d7:c6:e1:da:07:41:e5:
         84:dd:c4:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz7HOui/0XP/lYfhwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx
NzNhMB4XDTI2MDIyNTE0MDAzOVoXDTI2MDUyNjEzMDAzOVowLzEtMCsGA1UEAxMk
NjJmNzA2ZjUtYjBkNS00MGM0LWI5ZWUtMDU2NjA1NTQwZTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKUqykOgcuqQrwtxnYrFwXpy1Ymb2EzdGGfZ
IvkE9j4WYC/zlRMEaNKb8+c6VfcYXirLtMwsEoZBI52TvG3LgcmMIp3B6DTOl92B
DSXWSdSxKhz5SOlUHtAF6B1hh4cSFSxmZh1/oOqt7nU1jb/DIMEfp+tilMMRsQZo
UlzACsEI8UP8k5mpEsE1tCQy/n3bqVWu9fWJm4fZfhibhO3SUn6hYfABADc+rTl7
9aY2OJuCCB+mHgByd3Pzz7k7N5ddDCpji0K1eFBZVs13CrcHroRxAiBTnSuHtBU2
WqXMp1icdQilRBPLOdnPUgrIrOdEgObhGEKFpAoaxUdbl1itQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF89T/cf2WctOcxeGNivOzL/fTbxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx
ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvNzE3MWIxYTEtYjQ3YS0z
OTAwLTg2NWUtNGNmYjA2OGIxOWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh
M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm
MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk
MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfQ4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB4VZopoqswR/EecZJC5rfNzSKN/txSxQhG5xlPEOiCvWuMYKaH7f8pA
7Hv2UlwANg64UEdQuXHY3CWH3gt4OTGQPBEhSIO7ePYWv75EkIbfwsGHxQrZKLbS
eHTr5ZH2oBQ1XBp2Uf2667UPmfPynavZeLeuf1O6PRaf+FjquteKXSK4oiZ6uFSF
FYBDm7bW6gtehHhnO4h3kWVFPDzZ8SP0fWCjApW2WsKGYkL9OGhmLl4nFatWQq9F
9Wmhsf9e3JD0k0L54cNersDuBKPkLYuo11nr+X9H4bvfqbVZBlZtqnKP7Z8eSFUA
e8Us3mloxp+Vr1Jm18bh2gdB5YTdxBY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:40 2026 by rpki-client