Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/129dca48-db60-34d2-801e-0d7c82dc0f87.roa
File:                     129dca48-db60-34d2-801e-0d7c82dc0f87.roa (raw, json)
Hash identifier:          QhtYhxLvorjSLj6WUG4PMRyZclD+TEIaMncvqScUlMk=
Subject key identifier:   B0:91:4D:A9:E3:C0:AE:32:D7:66:D3:6B:75:26:D4:22:E9:05:F5:F0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BE3BD6DDDB9250FEC9180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/129dca48-db60-34d2-801e-0d7c82dc0f87.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        72.173.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:e3:bd:6d:dd:b9:25:0f:ec:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=f9ce0e15-a130-47a1-aee8-48b55cb5bebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a5:2c:b2:61:fa:16:09:33:bb:fa:1f:72:64:
                    5c:16:3f:e6:15:33:dd:dc:0a:c2:8d:a3:3f:a3:51:
                    9e:43:b2:e0:a5:5c:e2:c6:1d:27:47:2f:5a:91:e9:
                    f9:8e:59:63:0c:16:0a:1c:1c:b5:91:2d:0d:bc:6c:
                    18:fb:ec:86:32:ae:6f:63:5f:d9:53:ce:9e:de:c7:
                    c4:79:f8:bb:8f:85:77:05:84:27:10:2c:8b:ca:39:
                    53:30:4b:22:ef:8b:d0:46:6c:40:19:54:51:00:b5:
                    86:2f:ba:36:95:ef:dc:38:a1:b8:f8:98:bc:db:84:
                    e3:dd:89:79:87:56:37:55:50:fa:67:3f:36:c8:35:
                    fa:af:d6:bb:5d:c3:a7:0e:9f:42:99:5f:c0:6a:52:
                    41:68:3e:41:68:02:99:57:97:50:50:0f:41:e1:cb:
                    bb:98:46:35:4b:95:a9:fb:ad:e8:a3:d5:66:d7:e5:
                    ae:26:3f:17:32:e8:49:f8:66:16:7a:ad:6a:83:e8:
                    78:52:96:6d:a7:ad:c8:84:05:3a:ce:b3:7b:6c:77:
                    e4:ff:bb:c6:0d:b2:f4:b9:00:9e:c2:94:58:7e:06:
                    23:54:08:11:b1:04:bd:a7:b9:19:6d:3b:e2:71:c2:
                    3b:b4:bf:f2:cf:82:09:4a:fb:24:e9:dc:8f:12:aa:
                    42:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:91:4D:A9:E3:C0:AE:32:D7:66:D3:6B:75:26:D4:22:E9:05:F5:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/129dca48-db60-34d2-801e-0d7c82dc0f87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:2b:56:5e:4a:5d:da:f8:98:bc:76:97:4d:e2:d5:88:e9:36:
         dc:40:76:ec:82:47:64:5a:29:f1:24:3d:12:8f:ce:4b:35:08:
         c4:a1:d3:7c:c7:0a:53:82:10:31:9b:8d:cc:23:b0:be:b2:96:
         ff:48:35:e4:5b:9b:1b:b3:8b:fa:20:48:f2:70:61:5d:32:fd:
         85:2e:3d:7b:3a:3f:1d:20:5d:ff:ba:eb:5c:ca:98:bd:45:db:
         8d:0e:12:d2:5b:e6:07:42:d9:d5:94:7c:9c:89:2d:7d:d7:14:
         bd:69:48:e0:f3:9f:0c:a3:7c:6d:26:2b:03:b8:f1:f8:6f:fd:
         ed:ed:07:0a:89:a6:06:7f:a5:f2:06:8d:a3:c3:62:d7:93:aa:
         1e:17:48:16:30:e9:58:9c:e6:8d:2a:40:38:62:b7:44:b7:fc:
         a2:e3:70:2d:66:4d:38:96:99:5e:26:d5:9e:ed:f2:78:ef:db:
         8b:b5:a2:ea:55:24:8d:4f:de:61:1d:84:cf:2d:e0:f1:56:0d:
         d6:cb:98:3c:60:62:e9:8e:05:63:48:f3:06:b6:aa:3a:87:7d:
         c2:4a:99:5a:08:66:45:66:b2:de:57:87:dc:08:dd:9e:4f:47:
         f5:a7:fc:b3:d6:a5:b1:40:85:ef:a0:23:4f:f5:8b:fd:3d:54:
         d0:e9:a3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:29:34 2026 by rpki-client