Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/153453fb-4e83-30ed-96bc-b96e677fd344.roa
File:                     153453fb-4e83-30ed-96bc-b96e677fd344.roa (raw, json)
Hash identifier:          RW6s1hsa+Ra/Sf5m22XPOEd0wDHRV/RVn19cC78lxMk=
Subject key identifier:   07:36:22:92:D0:65:FC:CF:D3:33:71:21:2D:01:DC:EA:81:10:6D:01
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F497B0F585BAC49F4217B60C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/153453fb-4e83-30ed-96bc-b96e677fd344.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        72.173.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7b:0f:58:5b:ac:49:f4:21:7b:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=087b29e4-bf23-4c69-82ea-c68701794f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:31:f0:41:e5:4e:28:db:48:4a:af:1f:0a:d8:
                    55:82:52:e9:97:6f:52:e7:76:c0:65:38:32:e6:29:
                    2b:12:6a:cd:38:ed:75:76:10:2a:c6:f0:3c:ec:f2:
                    4c:40:97:4b:56:53:29:28:db:d6:cb:08:0e:3a:98:
                    db:08:9d:e3:7d:01:c5:69:2c:80:bc:f3:f2:f2:eb:
                    81:81:c2:4f:78:a9:09:7b:60:7e:83:51:82:a6:45:
                    0c:a7:fc:74:7a:bb:13:6a:e5:6a:18:53:1d:d4:aa:
                    3b:11:6b:17:8e:a4:cb:01:a9:af:e2:08:86:b7:04:
                    87:b6:55:3f:9d:cd:dc:ea:d0:34:7d:9c:96:d9:09:
                    d3:6f:82:06:6b:86:7a:8a:57:4f:99:78:19:26:57:
                    f3:4d:a3:08:71:31:63:7a:8a:e9:41:37:bf:8e:a3:
                    07:49:c1:c7:3e:23:4a:f7:f4:f9:32:99:b3:6c:23:
                    bc:89:e0:bd:e4:bd:4d:a0:de:78:c6:3e:87:bb:3e:
                    27:45:ae:83:df:92:2f:77:1a:87:5c:07:76:0c:0d:
                    ca:56:20:d5:dc:3b:88:50:7f:cb:72:44:f7:a9:95:
                    74:77:33:fc:3d:7e:f2:05:53:92:6f:ed:ec:17:d3:
                    3d:f3:50:8d:dd:67:56:e8:88:a5:6d:d7:e7:dd:ed:
                    2a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:36:22:92:D0:65:FC:CF:D3:33:71:21:2D:01:DC:EA:81:10:6D:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/153453fb-4e83-30ed-96bc-b96e677fd344.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:c1:8f:a6:d9:3a:e5:20:a2:67:94:8d:5c:61:e6:21:fc:ad:
         81:a9:9f:fe:68:62:bf:9a:e2:df:1c:b3:a1:e0:68:c0:a8:cf:
         10:3e:d3:7c:68:60:bb:f6:a0:b1:c5:a7:70:b9:0a:eb:eb:73:
         12:97:0b:a0:39:a5:d6:78:cf:d5:61:bf:59:c8:6d:16:77:dc:
         ec:c4:07:f3:0d:0f:22:c5:ba:59:7e:c0:61:fd:f8:58:74:4b:
         e3:af:d3:84:c1:62:e5:3a:98:53:03:1c:e4:de:48:62:6c:42:
         0e:6a:8e:0f:e9:54:79:b4:f5:45:7a:46:ed:9e:43:70:df:c9:
         f6:5c:bb:fa:0b:d4:35:ac:58:3a:8c:41:57:ec:4a:97:0b:cb:
         f7:4f:96:ef:00:d7:53:77:0a:27:d0:a6:70:89:fa:f1:02:5b:
         2d:15:e2:fa:4b:d8:2a:0f:51:06:68:68:1f:a3:9f:6b:09:2e:
         fb:92:01:b1:23:a8:50:21:5c:49:75:4b:03:b9:e1:92:7f:58:
         5f:48:ed:21:4f:73:6d:ba:b8:f5:b0:bb:da:53:57:a4:cb:10:
         65:54:6f:c4:13:f8:af:49:74:c4:88:07:97:2f:d6:53:fe:03:
         3f:ce:d3:46:0c:ee:65:7c:5e:32:d1:b8:bb:07:ef:5e:d1:d8:
         ae:e7:59:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:13:55 2026 by rpki-client