Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/352490f8-3bbc-3c24-9175-79d37b2b0b45.roa
File:                     352490f8-3bbc-3c24-9175-79d37b2b0b45.roa (raw, json)
Hash identifier:          OUY33qmddL9Yy5GeS2/ZBgQxCKOzzPWdgxqQ1aZMAbQ=
Subject key identifier:   83:5C:3D:D9:3F:FB:4D:6D:61:54:9B:53:D2:8F:D7:EA:48:54:4A:DF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79D937F73887EC3EED7DB80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/352490f8-3bbc-3c24-9175-79d37b2b0b45.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        72.173.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:93:7f:73:88:7e:c3:ee:d7:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e0b187e7-52dd-4e61-b165-82bb553b9b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a5:d2:55:ac:b9:ce:6f:f5:b8:07:d3:ca:31:
                    78:47:72:df:94:ca:32:02:ed:d2:59:29:ac:1f:70:
                    0a:af:33:16:f2:b2:59:f8:d1:ae:e6:1f:da:9f:f0:
                    be:fb:30:8a:63:35:fc:a5:8e:bd:05:13:99:5a:3f:
                    1a:01:17:48:ab:31:3a:a3:46:91:87:6f:ca:bf:d5:
                    5d:85:1a:bc:33:e6:4e:c3:f8:33:ac:d6:6a:60:5f:
                    74:de:c7:ff:2b:26:67:3c:c4:23:de:ca:d5:05:29:
                    e0:3e:34:e1:48:4f:d7:d8:ae:1b:b4:f6:5e:a3:b7:
                    48:76:7a:19:bd:d0:a5:8d:be:0f:4a:55:24:42:9c:
                    7f:1e:a9:a0:10:fe:2d:d6:b5:9a:27:a3:65:53:55:
                    64:06:65:c2:9f:d8:e8:51:20:60:e1:97:71:db:94:
                    41:e2:a2:c1:b8:47:ed:00:36:76:5c:21:78:5a:71:
                    ad:a8:16:63:57:73:21:bb:e5:9a:d8:32:6a:5e:f3:
                    ad:9c:8d:68:f9:55:08:b1:16:29:3b:e6:b6:57:e0:
                    d2:6a:58:93:a5:74:e5:97:df:fd:76:3d:7e:1d:26:
                    dd:a9:ae:07:7f:3f:c2:ad:7f:f6:77:92:b3:a1:02:
                    35:69:d1:f8:2e:2e:0c:55:3b:83:c6:44:b7:0c:27:
                    f0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5C:3D:D9:3F:FB:4D:6D:61:54:9B:53:D2:8F:D7:EA:48:54:4A:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/352490f8-3bbc-3c24-9175-79d37b2b0b45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:3a:84:79:31:2d:f4:03:e0:71:d4:29:a7:6f:5c:56:a4:d6:
         da:ce:1a:87:9b:f1:7a:57:39:43:19:0b:c9:40:61:fc:97:b2:
         a0:e1:95:a9:53:42:cb:ae:1f:89:cf:31:0e:fe:db:ad:a0:1d:
         dc:6d:a5:d0:66:a5:f5:03:9a:b4:0e:27:03:64:85:4e:b1:53:
         95:e1:ee:4f:87:6d:ad:f6:c9:b0:de:5d:37:7a:e1:4e:6c:4b:
         14:84:d7:7e:dc:2e:ba:e3:f3:b4:c6:12:7c:32:96:c9:77:3a:
         9d:70:4c:40:c4:f6:80:ed:49:b3:b5:91:ab:95:9a:3c:0d:34:
         57:59:7a:14:7c:e3:6e:4c:73:7c:7c:91:11:6e:a4:38:e0:1d:
         a4:ff:f9:2e:03:ef:a1:bd:69:51:2e:09:0a:45:42:3d:34:e0:
         7d:cd:cc:d8:49:6b:7e:51:79:d0:25:9c:83:35:d3:ae:7a:57:
         16:81:bd:d3:2a:05:49:04:17:88:7c:1f:e9:f8:58:86:95:08:
         4d:69:7a:d1:69:a7:f9:07:5c:b6:94:e5:a4:46:c4:21:7a:f8:
         d8:f8:74:e3:3e:de:cf:7e:44:bf:b4:79:67:a4:ef:d8:26:b2:
         d6:c2:4d:e6:79:06:a0:4d:02:e9:ec:6f:4b:a7:41:aa:47:ac:
         89:04:f8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:33:27 2026 by rpki-client