Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad8375b4-58f6-3ee2-a9cf-ee1868d6e3e7.roa
File:                     ad8375b4-58f6-3ee2-a9cf-ee1868d6e3e7.roa (raw, json)
Hash identifier:          OF0b6hWd88OM9N5sDUnUh/Qaiu5q9tdeq7bc4OOL3fs=
Subject key identifier:   05:17:4F:DE:84:07:1D:CF:FF:72:3D:8A:81:7C:A0:56:F2:04:2E:54
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C30A5F8EE6DAE77FA3660
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad8375b4-58f6-3ee2-a9cf-ee1868d6e3e7.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        184.63.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:30:a5:f8:ee:6d:ae:77:fa:36:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=559b9159-c388-467d-bc93-11bcc9c43f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d2:59:1d:41:b1:45:6b:22:ca:e2:ae:1c:73:
                    56:40:93:80:9d:57:0b:79:ee:eb:e2:3a:eb:48:2b:
                    60:2d:bc:8f:d6:02:ec:31:da:35:e8:a5:36:9a:d2:
                    21:09:59:b4:89:a7:ab:ec:18:7b:b3:a3:9a:65:21:
                    36:91:63:19:bf:18:8a:2c:65:6e:5f:47:16:2b:f3:
                    eb:e7:6d:ca:82:0b:7b:05:39:c8:c6:99:fd:d2:ea:
                    2b:0a:87:e2:72:48:c2:60:8a:5b:cf:53:74:68:96:
                    f0:af:20:24:8b:b5:4a:95:3f:4e:c3:7d:5a:e9:4a:
                    cb:84:da:91:16:2f:8e:8e:87:b4:8e:f7:f6:4f:35:
                    8e:d2:bc:e6:d5:09:74:c4:83:64:95:9f:7f:f6:cd:
                    96:87:a5:86:58:7f:98:92:07:52:86:70:df:06:3d:
                    3f:0e:39:e6:d0:fb:c6:2f:4c:5e:88:6c:41:c5:e0:
                    4c:73:6f:1e:cb:fe:e8:a1:bc:22:58:68:99:94:d0:
                    a1:e3:50:5f:d9:cb:4c:4b:8a:6c:e3:4b:b3:8d:46:
                    3a:b8:0f:8f:0b:32:70:6d:7c:bc:91:58:6b:3b:9d:
                    08:51:6a:56:7c:8f:ab:d6:42:ac:d9:ef:55:08:4e:
                    94:99:bc:79:07:c5:e6:0c:24:4a:c4:1a:21:3d:18:
                    ed:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:17:4F:DE:84:07:1D:CF:FF:72:3D:8A:81:7C:A0:56:F2:04:2E:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad8375b4-58f6-3ee2-a9cf-ee1868d6e3e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:b0:21:99:90:9d:28:ec:5e:11:eb:eb:8a:a4:f5:40:be:77:
         31:32:30:86:8b:ca:79:3f:5f:7a:b5:8e:9e:f2:49:62:ff:7b:
         18:b8:7f:92:fb:34:64:ad:8c:13:c4:54:4a:5e:4a:42:4e:a7:
         b9:62:be:be:9e:7b:45:d3:81:43:23:cd:7b:98:99:d9:30:98:
         ed:77:d5:54:bd:4b:74:d8:c2:30:a8:f2:12:9c:50:ef:e8:f4:
         7f:5a:03:4d:f0:d0:56:36:09:bc:5d:a5:2f:49:7c:88:1e:1d:
         a6:c0:59:9c:cd:74:0c:4b:13:06:a0:c6:7d:75:b4:42:4a:f2:
         47:df:84:0c:07:70:52:ee:46:0a:7a:ae:81:8f:0b:2f:1e:7e:
         56:79:93:03:df:03:b8:c1:c0:25:15:a9:08:ec:53:fe:50:6e:
         22:31:75:b2:42:df:e1:f6:0a:ba:fc:1e:80:d1:e8:44:63:82:
         f9:0b:56:05:9e:a0:91:c3:18:e7:e4:a5:b4:0d:dc:4f:cb:c0:
         5c:40:2b:78:9a:0a:5d:eb:65:54:6a:75:e0:d1:f2:e4:6e:7c:
         90:4f:90:d3:88:ec:16:4b:74:0b:2f:73:65:19:0b:ed:eb:f7:
         43:8a:cd:4f:96:65:36:f1:59:eb:71:61:ce:68:cd:02:ff:df:
         ca:09:fb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:33:27 2026 by rpki-client