Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6ed4437-2c07-3f5d-b07d-5ecf28fdc5e3.roa
File:                     f6ed4437-2c07-3f5d-b07d-5ecf28fdc5e3.roa (raw, json)
Hash identifier:          IjFV3P40f+cK85ijY4U//c+DCSa0JcxbouBg6A96v8s=
Subject key identifier:   AD:CE:3A:6D:7F:1A:DB:DA:0D:02:15:61:B0:00:4E:1B:49:45:D7:11
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B6AE075D78A80FCB30580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6ed4437-2c07-3f5d-b07d-5ecf28fdc5e3.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        72.173.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:6a:e0:75:d7:8a:80:fc:b3:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=db3fe900-d758-494b-9ad3-8cc2914428f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8f:0f:ee:44:f9:dd:1c:d5:3c:04:47:8f:4b:
                    aa:0a:22:05:3a:70:bb:ac:26:a1:c3:c0:0a:31:d9:
                    1c:10:8e:5c:d5:58:07:22:39:a0:fc:17:86:7a:48:
                    ea:88:55:79:69:c4:b3:fc:ea:bf:05:aa:90:2d:87:
                    66:3f:6e:58:a1:16:ac:e9:ff:72:f6:7d:c1:ad:e1:
                    bc:97:e2:c5:c9:dd:a2:fb:b5:49:76:03:c1:6d:01:
                    e2:42:65:dd:f0:c1:95:07:45:ef:09:71:79:36:c8:
                    3d:b8:01:92:51:03:dd:d2:89:8b:13:6f:96:5d:a7:
                    ff:44:74:51:45:37:18:0c:cd:12:f9:e5:f0:d7:12:
                    4e:39:84:c6:2c:1f:00:84:29:56:3a:be:b2:71:af:
                    5f:16:c0:67:f8:58:78:19:fe:3d:89:47:79:06:98:
                    41:23:d6:d6:48:7c:fe:1c:a6:a0:15:da:7d:3e:9e:
                    22:95:94:ff:64:15:6f:23:31:64:6f:50:36:93:16:
                    31:4f:c6:b6:de:f7:42:74:95:43:a4:4c:6b:bf:86:
                    cd:42:fd:fd:78:81:88:ef:97:27:25:3f:16:ae:31:
                    aa:15:bf:af:cc:a1:54:03:3b:b5:7a:7f:94:39:9c:
                    26:f3:9a:7d:a3:f8:ec:4d:c3:24:12:2d:63:e4:61:
                    8b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CE:3A:6D:7F:1A:DB:DA:0D:02:15:61:B0:00:4E:1B:49:45:D7:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6ed4437-2c07-3f5d-b07d-5ecf28fdc5e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:92:b9:36:72:f6:01:83:0d:71:03:38:30:11:a2:b5:92:94:
         57:d8:69:fd:3a:54:64:0c:2d:23:8b:68:21:95:5d:0a:a0:c9:
         0a:ed:4a:ea:e1:45:24:a9:45:1c:bc:36:49:7e:dc:7c:e1:ad:
         e6:9e:17:62:80:af:02:7b:85:88:92:43:dd:ef:ff:dc:e6:7d:
         d5:cb:f2:e9:88:c1:92:10:be:ec:eb:af:1a:0e:1f:91:43:16:
         0f:a0:3d:26:b2:b9:50:a1:5a:d9:1a:06:94:ae:26:25:ae:06:
         b8:2d:38:36:72:62:7e:2b:55:ed:b7:86:0e:43:1b:bd:2f:2c:
         fe:59:c7:f5:a2:29:bf:35:f2:91:b4:fb:92:7a:a0:37:83:5c:
         ba:fc:49:b9:40:f5:d0:2c:bd:b1:d7:7c:ac:b4:77:7e:8e:bd:
         b2:1b:b3:30:19:25:37:80:5a:a9:b9:d1:69:e3:0d:57:d5:c5:
         1e:44:ed:7c:0a:e1:87:6d:10:78:32:21:10:0b:e7:23:f3:38:
         a5:4e:36:b7:42:54:71:26:01:77:2a:51:9e:78:27:7d:43:35:
         fe:72:23:f4:ad:4f:28:a2:60:d0:1a:36:cd:a4:2f:72:1b:9f:
         97:aa:7f:e2:57:49:d9:ca:64:9a:9c:0f:76:80:ac:60:33:c8:
         d8:39:f1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:29:31 2026 by rpki-client