Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bac2d5b-e2cf-3737-9287-1bdd916748a3.roa
File:                     9bac2d5b-e2cf-3737-9287-1bdd916748a3.roa (raw, json)
Hash identifier:          xmGqckbi8BI/vTKuB5z4rs5eQfgo2lvWfd6odfjU5bY=
Subject key identifier:   79:B5:3A:2F:44:F7:EB:A8:E0:E4:28:14:38:5B:B7:CA:B6:B4:A6:A2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79F18833810C9C17EBBC180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bac2d5b-e2cf-3737-9287-1bdd916748a3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        72.173.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:18:83:38:10:c9:c1:7e:bb:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fa5f9225-b9da-4383-86e6-95e860c7cce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7e:3a:bc:49:dd:c0:b9:28:87:1b:07:1c:c7:
                    46:f7:60:9c:46:ec:e8:37:f5:4c:5b:30:69:4d:77:
                    9e:22:23:ec:a0:86:13:c1:5f:5a:ae:57:cf:18:72:
                    a4:c1:d4:6a:12:6b:03:ea:0e:fa:7c:9f:2f:8a:17:
                    72:0f:91:68:49:8d:f6:6b:b7:2e:d3:45:aa:1c:c6:
                    c7:84:be:d9:2c:41:3c:57:9c:6e:bd:09:df:c9:2d:
                    27:66:b6:1d:e5:b7:05:0d:dd:55:f2:21:1a:ac:83:
                    62:e6:f4:96:ff:46:3a:3d:a0:40:8e:5f:03:e4:01:
                    2d:fb:33:73:3a:c1:e5:02:05:aa:9f:7e:c2:6e:40:
                    30:8f:8b:86:2f:2d:89:7f:62:41:05:7d:da:16:f1:
                    a1:e1:e1:d3:4a:d5:97:60:ee:dd:c9:d5:ec:ea:31:
                    03:d5:84:6b:ea:64:5e:ea:b3:54:ae:b1:07:21:d4:
                    22:ba:25:bc:be:5a:dd:bc:4a:17:a1:a1:75:8b:b5:
                    9c:3a:76:db:9e:fb:34:a6:f3:74:85:4f:c7:d7:0c:
                    2e:4d:03:65:f6:52:64:1a:a5:9a:b5:0a:03:1d:81:
                    48:80:3b:3a:6d:ec:5b:3f:ee:ea:97:3b:66:74:10:
                    e7:28:94:9d:8d:b2:b4:6e:94:db:70:ca:3e:ea:01:
                    29:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B5:3A:2F:44:F7:EB:A8:E0:E4:28:14:38:5B:B7:CA:B6:B4:A6:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bac2d5b-e2cf-3737-9287-1bdd916748a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:2d:38:94:59:ef:d8:a5:5e:16:cd:b0:37:77:09:36:5e:f6:
         7b:7b:53:df:ed:57:2a:9a:bc:ab:1b:b4:3b:0b:2d:ff:de:15:
         b0:47:ce:30:30:32:bd:48:20:f9:c4:f1:ee:ec:74:ef:a1:87:
         c9:2d:18:8b:f5:3d:75:a3:b2:75:37:b2:37:01:4a:99:6d:31:
         47:d4:93:4b:87:a0:35:fa:56:82:64:2f:88:1a:94:a3:be:4d:
         87:4e:88:88:8a:33:c8:76:69:ce:0b:a0:97:e4:39:83:83:44:
         70:0a:1a:38:be:17:2f:26:d2:71:9d:b7:61:66:1b:69:ed:3a:
         2b:a6:22:8b:5c:29:fa:8d:d2:1b:f4:ce:90:f9:e4:ac:c9:b8:
         2d:84:4e:2a:04:69:fb:ad:4d:8e:bc:33:fb:32:d7:f1:b5:11:
         3e:bc:b6:e9:d7:0c:da:c1:d1:20:02:f7:96:78:4f:fa:fa:fe:
         94:0b:4b:c6:4b:b5:39:46:d9:d9:88:fa:9a:c8:19:fa:bf:20:
         8a:e5:f0:89:c5:bc:49:01:98:9d:a4:f3:e6:63:d4:b5:23:98:
         f8:dc:b5:61:be:92:f0:9b:14:37:0b:0a:92:64:a1:78:1e:c7:
         91:12:e2:8c:8e:ea:ba:29:a8:0c:19:0c:f1:f4:b7:1d:5e:03:
         76:6d:0a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:57:42 2026 by rpki-client