Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ba88815a-de9e-372f-8a24-3232cbdebebd.roa
File:                     ba88815a-de9e-372f-8a24-3232cbdebebd.roa (raw, json)
Hash identifier:          zjgTOG7X2FGniCBBqIqV+YrlFURJ5KicDAoIMK5TQLw=
Subject key identifier:   F0:EF:2B:B3:CE:27:13:B3:E1:6B:79:86:0F:F3:AC:C0:BC:62:17:DC
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B686262741A736B698880
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ba88815a-de9e-372f-8a24-3232cbdebebd.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        72.173.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:68:62:62:74:1a:73:6b:69:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=ec28d806-a690-408c-928d-68331f4b0476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e1:fe:98:45:a7:89:8f:70:e9:e9:1f:ce:e6:
                    fe:cf:fa:24:e6:54:12:7a:77:0c:9b:91:51:61:01:
                    d6:ef:37:81:35:0f:7b:47:be:da:6d:16:94:4b:d1:
                    b1:a9:d5:42:a4:31:b7:49:b4:10:b4:86:d8:b0:f4:
                    eb:ab:4e:6d:0b:74:cd:d9:d9:a1:76:66:fb:75:3f:
                    89:8d:43:18:e8:ad:d8:82:fe:26:fc:3d:57:4c:03:
                    7a:e2:e2:db:11:36:1f:65:42:a7:d0:c9:d3:f3:85:
                    7c:2a:45:1d:31:28:3c:bd:72:f1:19:bb:80:c5:86:
                    10:32:dd:92:07:a1:ab:97:2b:be:7d:c5:5a:ef:0f:
                    a2:36:ba:1c:96:f7:be:bb:01:c7:ff:37:f2:ec:a8:
                    e2:4e:85:28:75:5f:07:13:37:a4:66:fc:68:a9:19:
                    3c:03:8e:b8:03:06:0b:32:45:6c:a2:01:ae:ec:84:
                    7b:14:1a:43:1b:5b:7b:5d:f1:33:d4:6f:4c:69:e0:
                    87:1a:af:13:0e:ab:43:f6:34:d5:d1:4b:c5:61:bb:
                    0f:65:7a:86:02:2d:c3:33:37:f9:af:24:4e:73:88:
                    d8:d5:f4:64:0c:dd:73:69:4c:59:6e:0b:62:c0:d4:
                    b6:b8:03:e1:30:b6:a1:5a:64:0b:25:ca:de:d5:b4:
                    f9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:EF:2B:B3:CE:27:13:B3:E1:6B:79:86:0F:F3:AC:C0:BC:62:17:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ba88815a-de9e-372f-8a24-3232cbdebebd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:3b:f9:2d:74:15:b3:c1:39:4b:9f:e1:c0:19:77:d4:66:f1:
         97:a9:f0:f5:db:7d:b4:b0:41:20:4d:3b:d8:ad:db:4a:d6:d3:
         df:b2:73:25:22:62:28:6c:18:f1:a0:65:c7:8b:d8:63:22:80:
         46:12:11:dd:34:fa:cf:c0:28:09:52:12:51:86:0d:68:41:0c:
         82:0b:a1:26:0e:05:d4:0e:9a:d2:6b:51:7d:37:63:e2:6c:42:
         39:a1:91:ac:cf:a2:6e:e9:24:98:1a:eb:39:18:39:9b:24:95:
         ee:bf:29:bf:a5:4c:9c:fa:3e:ff:e8:2b:b5:b7:12:bb:81:69:
         63:89:94:9f:28:2a:7e:24:ec:eb:dc:87:d0:f6:4c:a0:4c:08:
         1a:86:60:e1:15:ec:f6:1a:75:4e:63:89:f0:f5:a4:e2:88:40:
         d0:e3:16:37:db:d8:b4:d8:f1:a5:34:46:04:e6:39:e2:50:cb:
         35:0d:41:28:86:4d:44:36:95:70:77:31:49:1c:63:03:0a:02:
         59:df:1b:c2:49:75:56:10:0c:6d:bc:2a:04:56:58:2f:7d:bf:
         f3:a8:fd:4e:35:0e:99:9b:27:44:af:8d:44:16:b7:aa:8d:2e:
         a4:94:23:93:11:23:1e:a1:f4:60:b6:db:c6:6a:3b:16:d9:11:
         1e:3a:87:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:11:32 2026 by rpki-client