Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9d048fd9-3e71-3b74-b184-92e88f73b697.roa
File:                     9d048fd9-3e71-3b74-b184-92e88f73b697.roa (raw, json)
Hash identifier:          V2Vg6rU9hC74/oHAzBxlyeS3t0hhtZ7geGlNDEy14zo=
Subject key identifier:   F1:ED:50:4A:7F:21:7A:75:C7:21:9C:98:D6:85:F4:73:E1:34:99:D2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B684B14592C97A0FD9D40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9d048fd9-3e71-3b74-b184-92e88f73b697.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        72.173.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:68:4b:14:59:2c:97:a0:fd:9d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=4ab722f3-8c48-4a57-8d39-34872eae86cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:80:8f:6e:a6:a8:99:59:6f:44:7d:93:72:dc:
                    2c:36:63:12:0e:46:8d:af:74:29:e5:2d:b7:7a:97:
                    8b:20:f6:30:8e:c4:6f:c9:20:f6:4b:47:7b:5e:70:
                    22:12:fd:48:fe:0f:70:ca:d2:24:a6:e0:db:89:46:
                    39:be:cc:d4:84:3f:4d:15:07:54:2f:df:cc:17:3d:
                    76:9f:4b:ca:12:c1:49:04:a5:65:89:67:92:ad:0d:
                    4e:e7:4c:23:e6:53:59:92:99:78:f8:e0:94:92:b8:
                    e4:47:70:c4:9f:db:d1:e6:ff:e0:de:24:ef:cf:f4:
                    18:34:a5:40:1b:15:05:ab:0b:13:83:fc:d2:2d:96:
                    ca:fe:d2:0f:8e:d0:7d:bf:e7:12:f2:56:1a:7c:84:
                    5e:7f:e9:04:e9:61:98:55:b9:13:83:f5:c0:b9:07:
                    93:61:38:e3:f7:ec:96:59:4d:5c:2b:41:e0:41:c1:
                    82:2f:45:ab:20:cb:d7:16:46:80:23:26:fa:85:f4:
                    6f:73:47:5c:66:b0:31:8b:c8:42:e7:3b:af:e1:f4:
                    1c:b6:7a:10:64:ad:29:e4:34:2e:d0:9a:cd:f6:9c:
                    ad:9f:e7:db:96:1a:63:3a:8b:da:26:d0:6d:78:78:
                    ef:84:74:fd:ad:8c:5e:62:ef:58:65:18:19:a3:65:
                    7d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:ED:50:4A:7F:21:7A:75:C7:21:9C:98:D6:85:F4:73:E1:34:99:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9d048fd9-3e71-3b74-b184-92e88f73b697.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:78:2a:63:83:31:59:7a:97:3f:71:bb:1c:f4:c3:de:f7:f9:
         f6:3d:e4:80:3f:a8:fc:3a:70:d8:6f:64:55:1a:1f:40:6f:ee:
         6f:45:22:3d:71:fd:1b:98:3b:15:b1:02:8b:41:5b:fe:e5:2a:
         da:86:0b:04:e3:92:ad:26:d3:89:a6:4f:29:ea:97:7b:e8:e2:
         b0:4e:48:91:40:67:e3:17:99:af:b8:14:d7:e0:4c:cd:a1:27:
         ec:83:63:88:59:49:d1:57:a1:0b:f5:07:46:e7:a4:3a:69:e0:
         07:1c:38:5e:3d:77:d5:fa:37:b8:af:78:5d:59:6c:64:f9:7d:
         87:5a:c7:d9:e1:4c:a1:c6:84:bf:d1:c8:37:cd:66:5d:59:76:
         a9:80:9b:d0:38:36:1f:82:64:53:33:48:9f:77:e7:c8:9b:c4:
         10:f5:61:38:59:49:9e:73:df:be:83:fa:5e:bd:58:b7:af:51:
         cd:84:ab:ca:44:42:af:96:9d:45:0b:c9:6f:20:4f:70:f6:f2:
         36:fb:ef:9f:61:93:d3:3d:36:6a:c4:3e:dc:6f:3e:7c:3b:3b:
         b6:5b:05:c1:af:03:79:39:69:51:a0:e0:ae:e7:12:43:20:7a:
         01:84:fe:81:2e:9b:62:9c:09:ed:a1:06:c2:a5:06:65:99:b2:
         d4:f1:5c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:23:47 2026 by rpki-client