Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/19a62d2b-da55-3be0-b433-46859e2a5d3e.roa
File:                     19a62d2b-da55-3be0-b433-46859e2a5d3e.roa (raw, json)
Hash identifier:          X+dXtGYp48jhJn0Fc7NWVFfjwxjONmJLV6Hjo7ZOaJc=
Subject key identifier:   DC:93:FA:4F:35:07:33:4A:8F:3F:93:49:C8:B0:F4:54:50:9D:CD:D6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BE48BF08794CE1B67B1E0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/19a62d2b-da55-3be0-b433-46859e2a5d3e.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        72.173.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:e4:8b:f0:87:94:ce:1b:67:b1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=155b3b7a-87be-4b5d-9d62-358fe53efac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:17:f1:86:5e:f6:5f:ad:ae:4d:78:46:18:25:
                    a1:1f:8a:a4:f0:4b:7c:fd:4f:87:7c:29:a8:ba:7c:
                    fc:1e:5c:52:71:b4:76:2b:33:4f:bc:05:0e:71:77:
                    44:9e:42:75:91:df:50:a3:4d:bf:b4:17:51:d1:3e:
                    ed:a2:3c:2f:e3:53:eb:85:97:2e:0d:0b:01:b4:55:
                    12:d8:b3:d9:65:9e:ec:8a:c1:ae:0c:49:7b:0c:a5:
                    c3:2e:a6:32:ec:b1:74:7c:c1:4d:46:f1:9c:63:7f:
                    5c:2f:c8:ec:06:a4:e6:9c:32:30:ea:45:d7:f6:0d:
                    b1:0e:a4:86:ab:8d:0e:d9:bf:3f:42:70:f5:c1:9c:
                    c9:22:bd:71:e3:ae:77:86:1d:6d:3c:e0:f5:70:c5:
                    31:5d:44:14:83:b4:3f:90:87:99:8f:bd:47:07:2e:
                    45:da:49:a1:cf:5b:2e:b4:3e:fb:f0:63:b7:d2:53:
                    79:f1:19:c2:fa:a5:23:1c:e7:e9:05:b2:ee:e4:95:
                    1a:f0:86:23:35:c7:73:2c:de:d5:21:a7:2a:1a:bd:
                    a0:10:54:36:f4:8c:57:e7:c6:a1:3c:8f:e9:b8:c4:
                    26:2d:48:48:29:bc:5c:32:d6:bc:d6:c9:ae:41:a8:
                    df:16:1f:85:41:f0:e2:cb:c0:92:ab:88:97:b9:93:
                    3f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:93:FA:4F:35:07:33:4A:8F:3F:93:49:C8:B0:F4:54:50:9D:CD:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/19a62d2b-da55-3be0-b433-46859e2a5d3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:47:dd:c6:66:77:bb:61:37:19:ee:07:27:a6:06:79:9d:7f:
         fc:3b:90:e4:71:63:cb:bf:2f:82:84:06:e3:ce:25:1e:5e:48:
         9f:92:04:7d:e2:7e:72:25:14:71:2d:be:33:58:9c:5f:3d:6c:
         7d:b6:ce:a8:eb:49:28:44:7e:86:8c:55:65:1b:02:28:5a:e6:
         5b:96:5d:18:c0:bf:c7:da:4b:a1:0b:86:37:fb:73:ac:59:e9:
         af:45:29:86:e7:03:00:c7:d7:13:15:e3:4f:43:ef:ad:4d:17:
         d3:b4:b3:72:8b:15:36:fe:14:35:1f:ef:13:94:10:42:fe:ab:
         81:3b:c0:21:59:54:39:71:c3:3b:a2:f5:90:6d:6f:60:9d:88:
         aa:f9:1e:40:a5:fe:87:1f:f8:8a:5d:4b:01:f6:ef:d8:fa:3a:
         fe:ce:ef:12:f6:76:1b:e6:33:78:67:38:2d:bb:df:a3:9c:2a:
         a7:63:ea:80:59:e3:3d:62:2c:e8:47:46:bc:b1:d3:8e:e0:a9:
         3d:45:aa:c6:a7:6a:93:9d:09:d9:00:32:4c:1b:e6:8f:b9:b1:
         9e:1f:dd:c4:e5:25:b8:1b:19:99:53:b4:fd:a3:75:8b:93:d9:
         3a:8f:6f:2b:d3:2c:d2:01:d5:41:ad:0b:17:2c:0d:d4:56:d6:
         76:0c:56:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:01:28 2026 by rpki-client