Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7796b63e-a3f6-32f5-8eef-d866f8e76131.roa
File:                     7796b63e-a3f6-32f5-8eef-d866f8e76131.roa (raw, json)
Hash identifier:          72WMNEYzDkG0N4q3z+e4IS1+hN/qKXD8NpN7y4Fousc=
Subject key identifier:   CE:DD:25:6D:ED:30:C0:3D:73:32:29:C8:63:26:2C:01:99:CD:E9:0D
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584A94D0D1F3755F75F0B879A300
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7796b63e-a3f6-32f5-8eef-d866f8e76131.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     212238
IP address blocks:        173.239.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:d1:f3:75:5f:75:f0:b8:79:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=d16f5192-4234-476b-a745-7d3cb167b411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:88:2c:69:eb:dd:21:5c:f3:78:b9:a1:82:45:
                    fd:b6:0d:d5:4c:1a:cb:39:05:b4:fa:90:6f:de:23:
                    b6:5a:fb:03:ab:39:0e:03:5b:0a:11:ca:4b:16:eb:
                    86:2a:78:7c:fc:5d:c6:80:07:40:e6:88:3a:4a:d7:
                    e0:98:50:18:57:67:2f:95:cd:a5:37:fc:ed:92:9e:
                    c1:01:e3:10:ad:36:34:0b:80:b0:a2:5b:e2:87:92:
                    c1:53:f4:fb:6c:e6:81:f5:5a:73:cb:7a:a9:c6:53:
                    0c:c2:44:e2:8d:d6:c1:c3:55:13:70:2f:fb:cb:91:
                    04:6b:86:10:d1:e5:35:e4:d6:03:41:12:62:94:ba:
                    f0:ab:a3:a3:51:36:ce:b6:8d:43:26:22:5f:64:46:
                    60:4d:9b:30:a6:42:ea:98:bb:0a:1b:46:64:3d:da:
                    35:51:26:32:78:2e:ee:82:01:d6:a0:5a:01:0a:de:
                    c4:b0:d3:af:f9:ca:87:c3:8b:4f:ae:6a:a1:2e:27:
                    d9:99:db:ad:7d:50:da:24:71:d4:6b:72:a9:33:3c:
                    85:29:58:43:62:2b:f9:a8:c8:66:02:91:24:71:d9:
                    62:ee:75:74:e3:e9:fa:d4:ad:70:1d:51:56:63:14:
                    48:9d:74:6d:42:0d:5d:05:eb:6f:a2:f7:80:1a:6a:
                    a2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DD:25:6D:ED:30:C0:3D:73:32:29:C8:63:26:2C:01:99:CD:E9:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7796b63e-a3f6-32f5-8eef-d866f8e76131.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.239.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:34:33:e8:fe:ca:2c:91:55:a7:5a:87:5d:65:c1:32:95:bf:
         d5:d0:23:49:7e:81:7e:cf:ab:85:2f:cd:1d:3f:f6:2e:e9:2c:
         d6:d6:c1:5c:1e:3d:0b:98:94:80:a9:3a:14:9f:c4:62:7f:ac:
         59:85:00:af:5d:88:80:ab:12:10:90:5e:70:16:ef:46:45:23:
         6d:46:04:14:27:c6:8b:42:89:35:d6:3b:8b:08:1c:d0:1b:99:
         af:23:65:16:34:31:fa:0c:2c:35:d6:7a:14:9c:57:8b:b2:ce:
         2d:1e:60:73:33:8f:4a:39:40:a8:d0:d9:00:2a:c3:1c:01:44:
         9f:d0:79:4a:f8:48:ed:19:1b:bd:8c:86:72:2a:63:e8:20:9e:
         f7:7c:71:34:cd:35:1d:0c:e3:2b:a6:45:ae:00:d6:ad:08:0b:
         7d:da:4f:2c:fc:45:15:c8:ff:a7:05:98:6d:28:85:eb:0c:31:
         dd:f1:58:56:89:18:ba:f8:59:cd:b3:68:41:c9:c3:b0:bf:4b:
         da:c3:1b:72:9f:e2:9b:17:9e:49:f9:1c:8d:80:7f:ed:4e:5f:
         17:95:2c:0f:41:ff:76:fe:47:55:f4:98:4a:c4:ad:51:5c:20:
         82:3c:b2:09:e3:56:5e:13:e0:a8:7f:cf:5f:f4:32:15:26:b0:
         fc:8e:d3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:41:30 2025 by rpki-client