Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b4149e4a-3ff1-3c3b-a812-0884bd5a4e7f.roa
File:                     b4149e4a-3ff1-3c3b-a812-0884bd5a4e7f.roa (raw, json)
Hash identifier:          QU3aF4ZjNYtxByP4TI+vOVzn2MjOEHD6tVmX10LdVkA=
Subject key identifier:   D1:E1:56:3C:73:E7:2A:4E:09:D6:25:19:04:5E:F8:FA:EC:3C:C4:B6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BE4C34171E559758BDC40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b4149e4a-3ff1-3c3b-a812-0884bd5a4e7f.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        72.173.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:e4:c3:41:71:e5:59:75:8b:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=ebd06d9f-3473-4fc9-a63e-1595731284b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3c:fe:79:bc:67:a7:3c:18:57:ec:43:a9:27:
                    a3:d3:10:c7:b9:3c:97:cb:90:de:6b:e8:27:c7:6a:
                    65:4c:6f:5f:ee:fe:fe:91:fa:ce:e9:1c:9f:0d:65:
                    47:8a:2d:26:01:7a:b8:2f:6b:81:f3:14:c9:ea:b6:
                    7a:28:8f:b9:e1:89:16:e9:fc:6c:67:3e:b2:4d:45:
                    16:df:6d:0d:ff:9e:7d:f5:f6:26:19:ff:78:da:a8:
                    ae:e9:b1:65:84:88:73:69:31:d2:39:3c:82:62:44:
                    b1:a1:d9:81:3e:e5:9a:30:e4:f4:13:59:50:99:31:
                    df:2a:fe:60:dc:94:cc:f0:40:03:d6:79:44:8a:c6:
                    b1:d0:f5:e7:ad:8f:6b:02:19:00:a5:6c:cd:f9:a6:
                    62:92:ae:93:70:df:1a:20:d5:d5:54:97:90:b4:f7:
                    85:27:8b:c9:79:64:56:c5:6a:0f:c1:13:41:85:a6:
                    df:14:19:3b:c4:fe:40:08:9f:5d:de:5e:fe:1f:07:
                    ca:d2:85:6f:63:f7:c4:21:20:85:fa:a0:c4:ee:30:
                    98:5c:4b:87:50:20:b3:f9:c6:44:d4:5b:e3:3b:b7:
                    ee:f7:71:56:b8:34:2d:db:f8:8a:0b:b4:c9:5f:87:
                    4d:90:c8:7b:97:c5:ee:56:6d:78:db:e4:89:d8:e8:
                    56:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E1:56:3C:73:E7:2A:4E:09:D6:25:19:04:5E:F8:FA:EC:3C:C4:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b4149e4a-3ff1-3c3b-a812-0884bd5a4e7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:9a:9e:5e:c6:67:92:de:5e:ab:4f:12:14:37:eb:b3:81:cf:
         eb:4c:bb:e1:c3:ed:be:5e:65:e5:03:85:dc:4e:4f:1c:db:72:
         7a:05:37:91:a6:4d:8e:5b:4c:13:5e:36:cf:61:d3:be:fb:58:
         d1:cf:8b:88:51:ba:f0:6d:9a:7d:a4:5c:95:8e:56:6e:eb:38:
         76:49:7c:de:7c:54:10:37:ea:3c:7b:1e:dc:04:56:99:3c:6d:
         85:f2:78:e9:06:46:fd:59:a6:b7:4b:99:dc:43:3e:ea:fe:a5:
         f7:aa:e9:cf:3e:20:a6:f0:33:8d:ca:e9:dd:c8:10:69:f5:70:
         c1:fd:43:bd:ee:1e:85:98:c4:a4:02:fa:6a:0d:93:a6:67:c8:
         e6:b6:89:f6:b9:b6:46:d7:24:8f:12:d1:7b:66:14:0f:51:8f:
         2a:1c:d2:9a:02:d2:94:12:79:ee:a8:ba:27:af:9c:f4:1f:7d:
         10:ae:c3:0c:80:48:10:37:b3:4e:c9:9e:12:3e:42:16:7d:96:
         a3:f1:db:43:78:5a:63:6b:f9:a9:bd:b3:82:bb:05:60:f7:0d:
         13:8b:49:87:8b:e7:df:28:58:93:5c:01:b8:37:df:20:cd:2f:
         ea:aa:5d:50:11:e0:21:54:dc:0d:63:48:ba:4c:7b:56:ad:df:
         43:3f:58:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:57:44 2026 by rpki-client