Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2c55fff8-f55e-353b-a3e5-c6b2dff9362c.roa
File:                     2c55fff8-f55e-353b-a3e5-c6b2dff9362c.roa (raw, json)
Hash identifier:          69zqS8zyXQZ9uJSjY3D78wL/xsgqEOpooosijh/UIIs=
Subject key identifier:   5F:61:A8:AB:80:E0:6D:10:D7:42:90:72:08:CC:DA:5A:3E:84:AC:DE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BE7392A9DEC1F0F5B70C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2c55fff8-f55e-353b-a3e5-c6b2dff9362c.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        72.173.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:e7:39:2a:9d:ec:1f:0f:5b:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=76c70cc3-4b09-47a4-b0f9-e85c7639cff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:af:e7:83:68:82:81:4f:c8:23:28:ed:6e:b1:
                    ee:81:5a:98:a6:39:e0:53:31:ce:9e:4b:f4:cf:45:
                    ed:a7:5f:21:98:38:76:74:19:41:62:0f:44:8d:e0:
                    72:ef:b5:72:4c:9a:d4:1d:52:e7:94:c6:67:58:0f:
                    e7:8e:d7:49:48:0b:b6:b1:c3:68:dc:3a:05:77:05:
                    f7:db:0b:03:62:fc:1b:c2:06:b5:13:e2:22:5f:e9:
                    17:5d:64:48:06:90:11:25:90:23:70:cb:aa:90:e1:
                    9a:97:75:ed:6d:5a:92:e3:cd:49:01:4d:ec:cb:cd:
                    df:40:d3:85:5e:20:08:66:9c:52:77:6d:e0:f7:ad:
                    98:9c:91:d1:5c:2c:aa:76:e8:ac:71:82:c3:5b:46:
                    1f:b3:0a:66:bd:dc:ff:91:d6:fd:3e:6c:4a:ed:61:
                    f5:0b:f2:1d:7d:cf:29:b6:7b:e0:82:4d:fa:88:36:
                    84:73:c7:64:3d:c8:2a:ce:82:d8:eb:81:64:e0:23:
                    f5:3c:71:b1:a9:76:2e:ac:f1:56:29:50:33:f3:c9:
                    6b:07:9c:cb:ee:1f:7f:c6:0a:8f:bd:b2:fd:03:05:
                    c5:b4:a4:15:cd:19:65:1d:f6:28:3a:dd:68:b3:9a:
                    f1:5e:0a:6f:d1:93:9d:05:98:60:8f:af:38:32:d6:
                    75:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:61:A8:AB:80:E0:6D:10:D7:42:90:72:08:CC:DA:5A:3E:84:AC:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2c55fff8-f55e-353b-a3e5-c6b2dff9362c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:19:2d:9a:68:94:d1:c9:a2:c0:3f:3a:70:b6:e0:dd:f6:9b:
         b4:d0:1e:43:ba:d2:34:5f:4c:cf:de:8c:d2:aa:69:66:8c:9a:
         c8:be:93:9a:26:28:8c:04:94:b9:d8:96:9e:6a:11:dc:6e:8c:
         d1:bb:eb:c2:dd:b8:d1:03:b9:ed:fa:01:f2:fe:96:ae:f8:64:
         b2:e7:91:e2:c8:ee:24:15:ce:3b:d4:5c:e4:37:c9:30:fa:bc:
         0b:05:f8:db:7b:5d:ba:81:71:7b:46:6f:b8:e8:5d:cd:d8:5b:
         86:21:d6:2a:60:06:52:d8:d3:47:ff:10:71:a4:74:e5:40:82:
         02:06:15:49:91:95:35:fb:b2:b4:4a:16:0a:47:7d:58:57:5f:
         26:3c:0a:41:1d:8a:6c:5e:1e:a4:dc:5d:ff:a7:99:d5:d5:92:
         f4:d8:2c:df:42:3c:d7:c6:17:5f:5d:6f:1d:18:3e:58:11:29:
         09:4d:3d:88:6a:74:5d:cb:be:68:fc:b2:58:b4:cd:82:33:b1:
         7a:b5:56:9f:dd:e5:56:c1:81:8b:4e:85:c4:32:b0:90:a9:67:
         9b:cb:d3:b7:66:85:2d:6b:1b:37:67:29:3c:bd:87:7f:cf:81:
         cc:9e:d1:10:b3:b4:d1:ef:6a:38:8d:a9:c0:73:74:af:d2:c9:
         9e:68:ef:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:23:56 2026 by rpki-client