Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a32b5a1e-fbcd-32b1-b42b-19d64122595e.roa
File:                     a32b5a1e-fbcd-32b1-b42b-19d64122595e.roa (raw, json)
Hash identifier:          OnEfKqMzfZhr6nQpqaXHDHtC9VkhxqlJQ4z9uAZqvgo=
Subject key identifier:   0B:D8:3C:69:D8:71:B1:0B:84:67:75:A4:14:A6:87:17:05:18:7B:8B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B6B569F59FA80821B28C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a32b5a1e-fbcd-32b1-b42b-19d64122595e.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        72.173.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:6b:56:9f:59:fa:80:82:1b:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=06f56af1-7cde-49de-b9cf-397c7c1d69ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f0:00:a9:84:31:09:47:1d:4f:14:e0:6d:3b:
                    af:bb:63:28:9a:90:55:d1:30:30:5a:ec:96:49:e0:
                    20:13:ab:c8:0e:32:5a:be:8e:d4:01:df:1c:40:25:
                    41:a5:5a:8d:fc:e9:63:d5:6d:43:30:e7:f2:42:e8:
                    5c:c6:9f:4a:55:29:e2:ba:8c:07:6c:a1:ad:7a:ee:
                    18:9e:dd:6b:73:2b:e1:6a:a4:15:1c:e3:aa:4f:f6:
                    0d:cc:66:d6:92:26:da:d3:0e:76:14:ab:23:76:15:
                    5b:e1:7e:d4:41:33:21:49:8b:28:39:3a:77:42:47:
                    7b:a3:43:33:76:fd:bc:84:b4:42:6e:52:3d:7a:c0:
                    b5:01:fc:51:33:fa:b2:7f:a8:f8:f6:ce:39:cd:39:
                    83:e1:45:f3:fa:a6:fb:7d:dc:17:eb:bc:5b:64:be:
                    c8:1c:aa:0b:33:33:cc:07:4e:f9:e8:89:9c:4c:80:
                    6a:04:75:e4:69:6c:50:81:45:63:35:5c:8d:9b:2f:
                    77:f2:74:d0:3f:e0:14:2b:b9:c1:e6:99:c0:ed:94:
                    32:32:43:51:9a:4a:f5:df:4e:2f:cd:c6:44:f4:15:
                    8a:9e:f4:53:83:19:a7:af:01:f6:2b:3b:c3:ae:f7:
                    ac:cc:07:22:0d:b0:84:89:e4:d2:a8:cc:ed:95:69:
                    8c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D8:3C:69:D8:71:B1:0B:84:67:75:A4:14:A6:87:17:05:18:7B:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a32b5a1e-fbcd-32b1-b42b-19d64122595e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:9a:69:44:b1:ea:8f:4a:1b:47:90:e2:45:8b:b6:35:11:58:
         ec:41:9c:e9:18:1e:95:dd:43:7e:5a:c0:e2:76:7e:b4:5a:83:
         ea:b5:8f:dc:e8:7f:a4:7e:f8:46:9e:da:96:09:82:a7:c9:bc:
         38:62:9e:ab:88:dd:8d:ed:d5:d7:82:61:1c:ea:1c:61:c6:2e:
         11:21:fd:9a:b5:3f:03:62:f1:ca:cd:d5:7c:49:e6:45:25:03:
         d6:aa:3f:16:cf:65:2e:c6:d8:c5:85:0e:3c:93:c7:90:c1:05:
         2d:27:1e:de:0f:9d:10:3f:3b:81:8f:a3:13:ff:8b:95:96:29:
         e7:d1:93:a5:7c:25:4d:e8:d1:47:aa:65:0c:22:b3:36:e8:b6:
         29:a1:e5:e9:a7:07:c4:1f:38:22:3c:b2:40:7f:82:9f:c3:ce:
         69:b1:d6:15:d0:c8:2b:ac:fc:2c:58:30:3e:f4:77:5d:1c:fa:
         d6:39:7b:cd:39:f6:08:a2:55:a1:aa:86:d9:af:1f:ea:a4:d2:
         de:be:14:a1:3d:4a:65:64:a2:a4:27:4f:81:cb:a7:7e:8d:d5:
         a8:db:87:cb:05:c1:bc:f5:e9:a6:c7:04:80:32:40:4b:b5:41:
         3f:f2:02:2d:f7:af:f8:04:a6:d6:c5:81:0b:82:d3:80:5c:d1:
         50:40:11:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:36:16 2026 by rpki-client