Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/54b33a20-f355-3a35-8bf9-13b1f6c0f2e8.roa
File:                     54b33a20-f355-3a35-8bf9-13b1f6c0f2e8.roa (raw, json)
Hash identifier:          yOfe+HDGNhFhm6lt9R0nctXzucYhhC9cpV/RW94Z5Jo=
Subject key identifier:   68:1B:E2:B5:50:37:FC:3E:0B:B7:65:C2:E9:F3:B9:B0:00:72:8D:F5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B69AE30F6963CEE9C5900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/54b33a20-f355-3a35-8bf9-13b1f6c0f2e8.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        72.173.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:69:ae:30:f6:96:3c:ee:9c:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=7e09a919-cd3d-4a4a-9428-d329dd822b13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:76:93:45:4b:f9:a4:6a:aa:bc:d7:07:1f:ea:
                    07:25:fe:bf:a2:c4:a8:50:a4:92:1c:82:43:1e:da:
                    86:a0:b7:09:63:e4:ca:0b:4a:84:ca:3d:9c:38:e9:
                    65:24:e2:be:b6:84:e1:78:d4:21:d9:ee:f2:bc:be:
                    54:1d:79:6d:be:db:1d:c3:d8:25:d2:15:38:d7:89:
                    c6:8c:7b:97:c3:91:12:c0:0d:3e:da:af:93:30:8f:
                    a4:59:86:96:88:86:c4:d4:4f:a6:2f:b0:ee:32:e3:
                    2d:2b:ed:7c:f2:b2:1f:0c:94:6c:78:8a:13:46:f5:
                    2c:1a:5f:d1:72:19:4f:3f:65:ea:11:88:f2:02:54:
                    69:c2:99:2c:db:1c:de:1c:77:b9:d8:57:d0:c3:c9:
                    88:14:8c:cb:18:35:9a:2c:7d:7f:57:c7:e3:7e:37:
                    e2:99:cf:0b:ce:98:15:f0:dc:9a:94:ff:0e:eb:15:
                    60:88:1b:62:e8:f8:2a:41:89:52:57:b8:01:dc:d3:
                    a2:17:e6:80:ff:a2:f6:b7:5e:51:39:89:bd:51:6b:
                    1a:5c:38:cb:de:4d:31:73:27:b7:06:7a:28:85:e2:
                    96:d9:19:f1:96:7a:b0:ca:a3:15:f4:a6:7b:98:e3:
                    91:7d:33:85:8d:0d:1d:77:ba:61:77:2d:d4:37:7e:
                    e4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:1B:E2:B5:50:37:FC:3E:0B:B7:65:C2:E9:F3:B9:B0:00:72:8D:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/54b33a20-f355-3a35-8bf9-13b1f6c0f2e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:af:c8:95:2b:85:f1:a6:82:31:95:19:74:5f:7c:8d:65:7c:
         78:f0:e8:6f:4a:b9:c3:f5:cb:52:04:46:54:10:ee:5c:a6:f5:
         6a:c1:84:98:33:83:03:92:58:b2:be:d5:bf:03:05:25:07:b3:
         9e:c2:ab:43:a8:4a:e3:e1:37:79:60:e6:fb:fc:e9:ce:5e:5b:
         e6:81:f2:26:4a:4e:aa:80:98:82:4e:89:b0:1c:f3:74:68:17:
         a8:4f:db:4e:b9:d7:a9:8c:3c:b2:ed:71:f3:a1:83:94:da:bc:
         ca:43:47:89:3e:c7:ef:82:ad:15:1b:22:7c:db:e7:c8:84:43:
         7c:ef:1a:4c:76:77:d6:5b:97:ba:2a:83:98:a1:73:43:0f:0c:
         61:a0:e9:2c:b7:91:f4:05:6a:e1:dc:a8:62:96:c8:33:32:aa:
         2e:1f:66:8a:85:d7:e2:54:f3:d9:b4:07:79:21:ba:9a:b6:ce:
         e9:9f:62:51:96:7f:cb:d0:92:7c:bc:d3:a2:5f:e2:88:65:90:
         80:31:61:15:00:91:15:54:07:de:38:c0:e3:4d:df:d4:f4:c5:
         66:5a:95:bc:5e:ab:d1:c9:4c:6d:a1:68:c9:ae:91:85:f5:d6:
         85:8a:d0:39:6c:19:16:68:80:e0:b0:af:61:25:19:b5:18:18:
         53:a8:34:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:01:15 2026 by rpki-client