Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c6ebdb80-86f9-342d-88db-f0a12853e3b3.roa
File:                     c6ebdb80-86f9-342d-88db-f0a12853e3b3.roa (raw, json)
Hash identifier:          cKzLTTk0O/GCPTpsV2TX6FzmZjs7F+gv0FE9Hmt6d8A=
Subject key identifier:   46:87:FC:23:AF:CA:3D:5E:A6:4A:A6:0D:D1:95:E2:41:24:E6:CA:DE
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584AA42B82CC670066A3D89473E0
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c6ebdb80-86f9-342d-88db-f0a12853e3b3.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     206092
IP address blocks:        173.239.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:82:cc:67:00:66:a3:d8:94:73:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=29003b71-ba7e-472a-8137-fbbd2f1c8d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:02:b6:f4:71:e1:58:16:2e:40:93:a4:0b:eb:
                    d0:1b:96:f6:05:aa:0f:c2:13:55:ed:7f:7d:da:18:
                    08:b7:2e:3e:d1:3c:2c:82:6d:fd:1e:3e:88:65:5b:
                    36:4c:75:6e:0c:43:39:53:67:e6:08:11:be:24:57:
                    b3:ec:f6:d9:8b:01:2e:94:64:2d:99:e5:c1:18:6b:
                    8f:d7:bf:9e:d9:47:24:eb:f7:02:56:6f:d5:8d:9f:
                    07:a7:fe:d2:e9:f2:0d:80:ac:57:6f:f1:0a:75:86:
                    00:08:54:59:8b:8b:e7:d7:50:89:df:2f:95:61:3b:
                    05:64:ea:3a:73:a7:b4:3a:71:43:d8:fb:4b:e8:d8:
                    f2:7b:9b:72:4d:4b:c9:8c:c4:c9:a0:45:a1:9a:19:
                    ed:ca:ba:97:d0:0c:75:5a:18:09:59:fa:a4:c8:ef:
                    29:a2:fb:18:9a:ba:95:80:c5:59:fc:64:b8:56:bc:
                    03:02:58:30:52:bf:1e:d9:20:ee:d1:a5:0f:11:88:
                    c2:cb:85:05:3b:ef:2a:6b:06:7a:7d:7c:48:a1:f7:
                    ef:0c:3d:7b:09:6e:9b:cd:fc:2c:e8:d2:97:44:55:
                    3a:b9:8c:4a:35:a0:fc:13:93:cd:a6:3e:6d:7b:27:
                    cb:17:69:f1:9d:b4:cb:04:2e:68:5b:9d:f8:9e:23:
                    dc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:87:FC:23:AF:CA:3D:5E:A6:4A:A6:0D:D1:95:E2:41:24:E6:CA:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c6ebdb80-86f9-342d-88db-f0a12853e3b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.239.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:e1:28:fa:41:db:de:cc:5c:96:13:83:95:92:16:36:94:7c:
         cb:ef:93:3e:64:0c:8a:02:8b:20:30:33:d8:0e:a3:7c:ba:18:
         7a:70:34:ec:cd:ab:0c:e3:81:e3:00:af:4a:85:af:32:49:8f:
         e5:7f:8f:b4:e5:6f:8f:1a:99:82:fb:84:ba:49:37:77:a9:b2:
         0f:fc:b8:a4:26:c8:e3:b2:46:28:1b:8d:3f:e1:82:68:42:3b:
         7f:b6:05:5e:fe:e2:7b:81:64:60:cc:f5:50:ff:bd:0c:15:61:
         0c:22:d8:6c:7d:71:22:b2:d0:00:3f:ab:5d:65:74:1a:b0:51:
         73:ee:a0:09:a7:a6:ef:7b:92:74:44:bd:a9:18:6f:cc:35:c6:
         51:1c:37:c3:16:da:db:1e:9e:a8:04:8f:3e:77:b9:2d:c0:e7:
         e8:51:41:7a:c0:54:30:73:18:32:3b:68:64:33:0b:0d:68:ac:
         6e:de:3b:29:d2:af:21:92:09:4a:f3:d1:7f:a5:ed:91:4e:f5:
         0e:c9:84:ca:ee:35:de:1d:fc:e0:2e:ab:ac:23:bf:e7:80:c0:
         b3:d6:82:0f:62:7e:22:37:f4:ae:77:7a:d3:9a:dc:da:34:25:
         8d:72:f9:e3:d7:0b:36:cf:af:e3:48:25:93:ed:ad:81:b8:d4:
         f7:92:1f:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK4LMZwBmo9iUc+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx
NzNhMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk
MjkwMDNiNzEtYmE3ZS00NzJhLTgxMzctZmJiZDJmMWM4ZDJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgK29HHhWBYuQJOkC+vQG5b2BaoPwhNV7X99
2hgIty4+0Twsgm39Hj6IZVs2THVuDEM5U2fmCBG+JFez7PbZiwEulGQtmeXBGGuP
17+e2Uck6/cCVm/VjZ8Hp/7S6fINgKxXb/EKdYYACFRZi4vn11CJ3y+VYTsFZOo6
c6e0OnFD2PtL6Njye5tyTUvJjMTJoEWhmhntyrqX0Ax1WhgJWfqkyO8povsYmrqV
gMVZ/GS4VrwDAlgwUr8e2SDu0aUPEYjCy4UFO+8qawZ6fXxIoffvDD17CW6bzfws
6NKXRFU6uYxKNaD8E5PNpj5teyfLF2nxnbTLBC5oW534niPcywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEaH/COvyj1epkqmDdGV4kEk5sreMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx
ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvYzZlYmRiODAtODZmOS0z
NDJkLTg4ZGItZjBhMTI4NTNlM2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh
M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm
MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk
MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALfhKPpB297MXJYTg5WSFjaUfMvvkz5kDIoCiyAwM9gOo3y6GHpwNOzN
qwzjgeMAr0qFrzJJj+V/j7Tlb48amYL7hLpJN3epsg/8uKQmyOOyRigbjT/hgmhC
O3+2BV7+4nuBZGDM9VD/vQwVYQwi2Gx9cSKy0AA/q11ldBqwUXPuoAmnpu97knRE
vakYb8w1xlEcN8MW2tsenqgEjz53uS3A5+hRQXrAVDBzGDI7aGQzCw1orG7eOynS
ryGSCUrz0X+l7ZFO9Q7JhMruNd4d/OAuq6wjv+eAwLPWgg9ifiI39K53etOa3No0
JY1y+ePXCzbPr+NIJZPtrYG41PeSH7A=
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:45 2025 by rpki-client