Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/094ba684-8495-3416-b94e-0130627b1c45.roa
File:                     094ba684-8495-3416-b94e-0130627b1c45.roa (raw, json)
Hash identifier:          o1eC/XqH24ctYtW3RAmOZs/ccVfyJFBjoNFKlmppqXY=
Subject key identifier:   43:8B:BC:89:66:9B:92:F5:43:0A:B6:A4:D6:F0:4F:55:2D:A2:E7:95
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E067C62DE232D5F0758180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/094ba684-8495-3416-b94e-0130627b1c45.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        72.173.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:67:c6:2d:e2:32:d5:f0:75:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=647b320d-d898-4510-8f45-6ed10f253910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:15:7f:e0:00:6c:68:75:cb:59:1c:38:55:8f:
                    6a:58:51:57:a7:68:9d:75:80:ae:cd:85:d7:9d:3d:
                    e3:15:66:1f:69:d1:d4:fb:91:4a:4e:6a:dc:a1:be:
                    8b:80:87:93:e3:57:e4:d8:49:9b:1b:8d:75:3a:3c:
                    af:df:f3:df:56:0e:de:b4:09:e7:ab:ff:3f:a9:46:
                    d8:17:c2:91:3a:3d:2e:8a:cd:a3:2b:14:ff:73:0d:
                    65:0d:55:7c:60:06:31:8f:f6:dd:f5:fd:89:a9:6b:
                    69:0d:3f:e6:5d:2a:31:e1:ef:dd:48:05:9f:7d:f4:
                    15:49:90:5b:84:6c:75:09:3c:71:97:b4:80:80:ea:
                    cf:ae:ca:c9:c3:24:f1:3c:1d:0d:3f:38:da:f6:26:
                    ce:0b:35:ff:5a:ec:33:73:52:73:5a:52:d9:9f:f0:
                    b5:9a:76:06:e6:a9:65:26:bf:fe:f5:47:d9:e5:4d:
                    6d:49:59:40:87:06:df:22:e3:bf:47:c7:d0:64:87:
                    bc:51:0a:ad:37:f6:14:64:55:92:20:e9:36:73:65:
                    a1:06:46:e5:0f:f7:8a:59:2a:86:6c:5e:e3:b2:7e:
                    04:79:be:5e:8b:d7:9e:ed:33:8c:77:98:1f:ea:98:
                    aa:ec:a8:85:f4:72:f9:08:a3:96:d0:43:5c:e5:e4:
                    ee:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:8B:BC:89:66:9B:92:F5:43:0A:B6:A4:D6:F0:4F:55:2D:A2:E7:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/094ba684-8495-3416-b94e-0130627b1c45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:1f:1e:ca:de:ec:e8:57:52:8c:d6:23:82:2b:cd:a3:8f:94:
         75:0c:0a:c1:16:b9:28:a8:98:bc:43:24:13:ad:b2:7a:d6:f0:
         f9:86:42:5b:67:85:59:b4:ab:95:ff:8f:42:57:b6:b7:dd:73:
         b3:e5:5e:49:e3:84:01:73:17:be:26:d0:ff:49:36:97:c0:69:
         ea:63:6b:cd:20:bb:19:f4:fe:6c:af:a8:35:73:ec:14:b1:c0:
         29:c4:51:95:ca:28:09:ff:69:73:d2:f3:25:fa:6e:b3:8c:29:
         77:76:45:17:b8:9b:55:b2:af:45:6e:51:34:77:24:f6:f6:7f:
         87:74:52:ec:1c:3a:53:cd:d3:d3:52:93:bf:1f:e4:a8:2e:80:
         cc:84:89:b3:d9:e7:e7:3e:ae:ba:30:77:ae:22:6c:10:45:52:
         29:3d:5b:e2:43:1d:3f:1d:a1:39:c1:53:af:75:ee:37:26:49:
         cb:09:b3:18:1b:15:37:d3:e4:e5:8a:04:84:2c:21:71:9a:1b:
         99:1b:d4:77:61:c6:0a:1a:7e:2d:9f:89:48:02:55:c2:30:4d:
         68:77:68:87:19:56:00:7e:20:1f:fb:d8:c6:c4:39:da:e2:a3:
         a6:fa:92:46:f6:73:d6:b4:9c:40:2d:48:ae:02:de:d2:54:17:
         9b:ea:f4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:53:31 2026 by rpki-client