Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/dd042710-853c-3377-8175-71e45a5c93e8.roa
File:                     dd042710-853c-3377-8175-71e45a5c93e8.roa (raw, json)
Hash identifier:          b8A9qXbnP9XVyny9LadT/jP39wyp0zv9AgXJyYiDhqQ=
Subject key identifier:   59:76:04:2F:4E:B9:D2:DE:8C:29:65:72:57:C3:FD:97:73:8B:9C:FA
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584F5E62C23EA7AF0660511ABE00
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/dd042710-853c-3377-8175-71e45a5c93e8.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     64286
IP address blocks:        173.239.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:c2:3e:a7:af:06:60:51:1a:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=3e882ce0-d36d-4f5f-8acf-7799cc766ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:86:9f:81:bf:64:1a:3b:39:4d:6b:a6:92:1b:
                    ce:14:b3:86:f5:1e:7d:dc:0e:49:56:b7:f8:c8:60:
                    52:34:3d:97:b6:2f:e0:6e:54:36:0c:de:07:39:75:
                    21:43:37:cf:22:16:8e:7c:89:2c:04:b4:ba:9e:57:
                    52:37:d1:91:52:e3:0b:bc:7f:2b:ee:c8:1f:3d:3f:
                    82:ff:68:62:54:c5:af:15:f6:83:08:3f:b9:5e:cf:
                    b4:d5:74:5b:9f:35:1a:6d:a7:de:52:fd:8f:b0:6f:
                    92:e6:ae:58:64:8a:4f:49:04:6e:24:6f:95:21:0a:
                    1f:5b:eb:3e:52:cb:87:0a:10:8e:e4:f1:75:6e:3f:
                    58:aa:15:80:81:2c:4b:d1:bb:83:72:52:44:56:f2:
                    bb:1f:03:9b:91:50:49:44:dc:dc:d8:ca:e2:b9:fc:
                    14:5a:25:52:13:59:73:28:9d:e6:03:d3:2d:b1:9f:
                    43:20:e4:4b:60:23:56:db:5d:b1:ca:73:5f:5b:26:
                    1b:a8:cc:b9:0c:50:f0:cb:8f:9a:04:79:1f:0a:2b:
                    80:0c:b0:bd:f4:92:48:2c:a1:f8:fc:e2:de:8e:94:
                    72:7d:bf:ea:46:60:87:03:90:e0:9c:36:7a:a0:8f:
                    0a:cf:95:b4:b1:ae:38:17:de:27:45:cb:75:f6:21:
                    b9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:76:04:2F:4E:B9:D2:DE:8C:29:65:72:57:C3:FD:97:73:8B:9C:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/dd042710-853c-3377-8175-71e45a5c93e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.239.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:b7:16:99:1b:2f:47:33:3d:c1:66:0e:74:fe:e4:b8:df:4a:
         6d:65:54:d1:7b:23:44:6c:45:a7:46:ca:2e:7d:14:fe:31:de:
         1a:08:c7:f7:e5:46:05:d5:89:4b:28:d7:ef:22:30:09:37:b9:
         43:39:f3:85:70:14:2f:32:89:5c:b0:07:8c:ff:b3:46:8e:13:
         c1:fd:ec:69:a0:d8:0e:0a:19:84:3d:88:fa:b6:ba:6c:76:6a:
         ea:25:8a:13:09:e2:d7:ae:e2:06:fb:ec:cd:af:84:20:c1:a7:
         fb:5c:60:75:91:d2:e5:51:4b:0e:e2:93:5b:3b:5d:3a:43:4f:
         0a:90:27:27:78:d0:e9:16:c4:03:91:9d:34:ba:9d:70:a6:99:
         b1:9e:41:ce:f4:73:3a:6e:07:85:31:f7:b4:78:e4:17:79:79:
         36:21:64:52:ad:ad:cf:24:ed:68:68:5a:02:0c:fc:54:c6:be:
         42:25:68:88:39:81:4a:2b:ba:d1:27:a9:31:70:80:fd:74:48:
         57:49:d2:99:35:e4:65:7c:f3:71:47:e4:7b:03:7c:b1:a5:b7:
         e4:7b:c8:c0:bb:c5:3d:52:96:ed:94:a4:d8:99:25:6b:65:c0:
         3c:4c:5b:e1:61:2d:81:bd:85:d4:97:9d:c1:26:85:84:4b:9a:
         84:43:5d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:45:25 2026 by rpki-client