Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/265785d5-88d3-3b7c-808d-f7032445583c.roa
File:                     265785d5-88d3-3b7c-808d-f7032445583c.roa (raw, json)
Hash identifier:          PBGXOu1jAdLDLA15/h+0mGVYYD2bLUooj67pWxULRLs=
Subject key identifier:   22:B8:7C:B0:EB:8B:E2:8C:0A:47:FE:0A:CC:A2:D9:ED:CD:8E:56:58
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B6B9611FF41978CB4FF80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/265785d5-88d3-3b7c-808d-f7032445583c.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        72.173.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:6b:96:11:ff:41:97:8c:b4:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=c04ff287-4f12-4bea-8605-3855bbc5f072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6b:7a:17:35:02:21:a6:44:67:93:0b:c2:fd:
                    4e:cd:55:f4:f4:07:0c:1d:98:6b:7c:fc:0d:0e:67:
                    d8:c2:e2:ac:17:c0:4d:9b:5e:d2:bf:55:96:7e:7e:
                    49:94:ba:8b:6f:84:01:53:20:f2:fa:f4:51:2e:70:
                    5d:c1:8c:bc:88:6d:b7:07:95:c4:1f:dd:dc:b3:7e:
                    78:02:a2:93:51:a1:6e:63:db:31:0a:2a:58:8f:63:
                    db:1f:24:f9:fb:9a:b3:cf:a5:be:56:98:44:b2:e9:
                    54:03:3e:4f:03:3d:e5:b5:79:dd:6d:d2:b0:a0:7e:
                    9f:e0:31:d7:1b:d0:58:eb:72:00:23:98:c1:c8:34:
                    f7:0f:87:9e:74:76:c3:04:7e:87:e7:65:50:b1:7e:
                    64:ec:be:88:18:0a:56:58:fb:43:0c:f9:69:a9:de:
                    fe:ed:ae:62:12:1f:fa:d7:bc:ae:7d:60:4d:ac:52:
                    ec:bd:1e:f4:8c:75:d2:3b:1a:dd:1d:7f:55:4f:fd:
                    11:d5:a0:d0:03:96:c1:2f:d8:9c:a7:f7:e9:ab:99:
                    52:92:ab:02:1a:50:12:81:21:ff:5c:cb:04:cc:91:
                    73:81:24:1c:17:14:cf:68:cd:01:98:f9:d9:70:3d:
                    ce:ae:30:d3:ef:5b:ba:ff:72:30:aa:37:25:dc:c9:
                    28:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B8:7C:B0:EB:8B:E2:8C:0A:47:FE:0A:CC:A2:D9:ED:CD:8E:56:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/265785d5-88d3-3b7c-808d-f7032445583c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:91:71:42:7f:7e:14:9e:b6:03:f4:04:9b:92:5e:08:45:dc:
         82:7b:7f:3b:0f:93:c3:61:49:cd:96:54:dc:92:a2:0d:74:67:
         59:e2:1a:ab:9b:54:c4:90:8f:e9:89:21:83:08:02:ad:7d:b2:
         b9:66:a4:d1:bf:d0:67:ab:c5:94:f4:6b:73:b0:19:67:d3:64:
         7c:51:d6:41:c8:df:2c:6e:9e:c7:c7:c5:cb:a7:6e:b2:b9:87:
         35:f4:20:2c:41:3a:78:cf:38:20:52:dc:dd:21:7e:ea:28:70:
         8f:2e:5b:cf:93:ff:26:b3:c8:a7:91:e3:46:bf:1e:16:14:ff:
         e2:4a:ad:29:08:c3:67:9d:96:02:1b:2a:21:f1:23:50:d9:a6:
         a7:6b:5a:53:be:f2:3a:cc:9f:52:6f:80:48:b1:74:72:21:18:
         9b:35:b7:ac:8e:c2:84:58:d3:2f:61:96:16:d4:83:72:cf:a4:
         95:fb:db:93:7b:d3:1d:9b:c9:17:66:e5:61:78:05:df:b5:d6:
         c5:31:6d:dd:3d:3f:db:cd:c7:26:63:e1:90:e9:9f:98:2d:14:
         eb:b4:e9:c5:01:78:b4:71:10:37:60:92:15:74:30:d4:37:3f:
         76:8e:c1:d8:56:12:7f:8b:a0:bb:7f:cb:30:74:92:6a:a5:38:
         e2:c2:f4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:27:46 2026 by rpki-client