Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/46788f87-86b9-348c-9349-a19adb4c18f6.roa
File:                     46788f87-86b9-348c-9349-a19adb4c18f6.roa (raw, json)
Hash identifier:          NOIGJHwKwrFSCEpGpW/5tnboTbOp17gsjAu7Gk38mUA=
Subject key identifier:   9A:B5:A2:A7:7D:7D:7F:8E:26:CC:72:86:C4:74:C4:0A:15:CB:CE:BD
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BE786208C3192FA241808
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/46788f87-86b9-348c-9349-a19adb4c18f6.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        72.173.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:e7:86:20:8c:31:92:fa:24:18:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=af85720e-4ffb-4828-987c-b2de10fa4cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cf:40:1e:dc:94:0e:5f:cf:72:85:17:0a:f0:
                    b4:28:97:ac:56:da:52:29:5a:f6:4c:14:a3:86:46:
                    31:00:b5:2f:4f:69:23:a5:cc:e0:60:29:88:55:b1:
                    42:ba:5f:70:c3:48:0e:cb:16:14:93:8d:92:08:58:
                    37:ac:a6:54:42:a0:a3:f8:94:49:dc:67:64:99:45:
                    b9:12:f4:ea:66:34:5f:96:ca:dd:72:fb:35:5e:34:
                    aa:ec:14:36:ee:38:9a:85:2f:f6:5c:93:62:83:2b:
                    c1:e0:b9:c7:39:78:37:fe:6b:4f:d2:ba:7f:b3:ee:
                    20:5d:4e:04:f7:95:b7:3e:4f:e3:90:4f:75:01:48:
                    2a:5b:8a:f4:ba:eb:25:d3:fc:bb:4a:ca:c7:75:0d:
                    60:46:57:4e:21:22:ca:0e:cd:a0:c8:5d:61:b1:6f:
                    3b:59:bf:f6:99:26:79:28:d7:0c:07:7a:3c:93:cb:
                    1e:31:f0:03:28:f7:98:a3:33:72:58:c4:a1:7e:cf:
                    46:49:49:8b:57:21:7f:9f:25:3f:61:85:1a:48:1e:
                    5f:4d:43:88:5a:b6:1f:8a:22:7f:f5:56:db:fb:4e:
                    89:75:50:a7:fc:0b:ab:f9:4f:9d:e3:08:60:e0:2a:
                    66:b3:83:cb:8f:99:78:62:ee:bb:b9:37:ff:22:6e:
                    2f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B5:A2:A7:7D:7D:7F:8E:26:CC:72:86:C4:74:C4:0A:15:CB:CE:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/46788f87-86b9-348c-9349-a19adb4c18f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:34:59:47:57:08:3a:63:99:8f:f8:dc:84:b8:62:47:79:90:
         08:91:8e:c7:73:01:29:9f:bc:f5:3c:ec:2a:d6:bc:23:f7:5d:
         e7:d2:23:21:11:a0:67:71:14:09:ca:2e:84:6a:3e:ae:85:ad:
         28:eb:db:2f:51:1a:11:f9:05:5f:d7:88:d3:ad:cc:b7:51:47:
         d1:72:8d:69:14:bc:28:a9:02:c2:b1:c4:0f:e5:92:87:a5:48:
         0b:c1:bb:67:92:a0:4b:ce:a4:b8:40:5e:5e:c8:e0:80:a0:9e:
         64:77:32:02:ca:be:d5:68:79:ba:54:f9:35:6d:84:02:79:2d:
         50:bb:e5:1f:1b:92:a8:b1:a8:ea:75:22:c1:0b:f2:a1:33:1c:
         2e:6e:85:29:50:02:9a:43:17:20:2b:91:11:ea:be:12:25:38:
         57:c4:41:06:e0:34:bb:82:a4:66:c6:85:a5:91:1e:8c:8a:b9:
         97:45:d1:fd:dd:64:75:c8:51:f4:ac:d7:42:2d:ec:6a:b1:21:
         92:92:fa:b4:1b:6e:bc:54:91:4a:02:9e:bf:38:cd:2f:b0:85:
         c1:03:5a:cf:b7:f8:66:48:00:84:c6:95:1e:31:3b:0c:47:b6:
         28:38:5c:3c:60:df:f8:54:7b:e7:14:cd:25:73:f0:02:aa:0e:
         73:94:37:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm+eGIIwxkvokGAgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
YWY4NTcyMGUtNGZmYi00ODI4LTk4N2MtYjJkZTEwZmE0Y2QzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc9AHtyUDl/PcoUXCvC0KJesVtpSKVr2TBSj
hkYxALUvT2kjpczgYCmIVbFCul9ww0gOyxYUk42SCFg3rKZUQqCj+JRJ3GdkmUW5
EvTqZjRflsrdcvs1XjSq7BQ27jiahS/2XJNigyvB4LnHOXg3/mtP0rp/s+4gXU4E
95W3Pk/jkE91AUgqW4r0uusl0/y7SsrHdQ1gRldOISLKDs2gyF1hsW87Wb/2mSZ5
KNcMB3o8k8seMfADKPeYozNyWMShfs9GSUmLVyF/nyU/YYUaSB5fTUOIWrYfiiJ/
9Vbb+06JdVCn/Aur+U+d4whg4Cpms4PLj5l4Yu67uTf/Im4vrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJq1oqd9fX+OJsxyhsR0xAoVy869MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDY3ODhmODctODZiOS0z
NDhjLTkzNDktYTE5YWRiNGMxOGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM00WUdXCDpjmY/43IS4Ykd5kAiRjsdzASmfvPU87CrWvCP3XefSIyER
oGdxFAnKLoRqPq6FrSjr2y9RGhH5BV/XiNOtzLdRR9FyjWkUvCipAsKxxA/lkoel
SAvBu2eSoEvOpLhAXl7I4ICgnmR3MgLKvtVoebpU+TVthAJ5LVC75R8bkqixqOp1
IsEL8qEzHC5uhSlQAppDFyArkRHqvhIlOFfEQQbgNLuCpGbGhaWRHoyKuZdF0f3d
ZHXIUfSs10It7GqxIZKS+rQbbrxUkUoCnr84zS+whcEDWs+3+GZIAITGlR4xOwxH
tig4XDxg3/hUe+cUzSVz8AKqDnOUN+Y=
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:26:42 2026 by rpki-client