Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/46788f87-86b9-348c-9349-a19adb4c18f6.roa
File:                     46788f87-86b9-348c-9349-a19adb4c18f6.roa (raw, json)
Hash identifier:          5fw9H3msY/9yWLTKx5hm8AL/oXICSa0bv3dSDJObTYY=
Subject key identifier:   2B:F1:AC:05:B6:EC:FD:7A:E5:C9:2B:35:D9:C1:E9:47:CD:38:24:E1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E06A935BF6A00123952DD0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/46788f87-86b9-348c-9349-a19adb4c18f6.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        72.173.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:6a:93:5b:f6:a0:01:23:95:2d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=cb6332e7-91ac-4e56-a983-5733a725d925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f2:97:15:8e:4a:d2:4b:df:7d:b9:b0:f9:f6:
                    26:0d:66:82:b0:ec:bb:9d:b7:8a:dc:83:e2:55:43:
                    75:3c:da:d3:62:47:55:11:fb:a7:51:cc:27:2d:dc:
                    1b:d2:8a:b8:6f:dc:ec:f1:85:a8:72:3d:e1:a9:db:
                    27:87:7d:12:b3:9a:2b:4b:f5:6f:4b:0b:47:e8:bf:
                    68:95:23:83:b2:80:fa:62:f6:01:3f:93:cb:81:9c:
                    59:df:3b:f5:4f:d5:d0:f0:f9:cb:f7:1e:da:ce:d1:
                    8f:70:88:dd:47:8c:c0:22:97:6e:3c:01:f9:df:08:
                    ac:96:94:18:91:db:59:9d:6f:71:91:76:4b:36:62:
                    ff:1e:bf:9e:a2:0d:d5:97:9a:1d:d7:4a:b5:bf:e1:
                    45:53:02:a5:b8:30:99:d4:50:75:49:ce:43:69:06:
                    51:e1:b7:b1:54:48:a7:2b:5b:3e:58:0f:25:73:d2:
                    f4:59:03:48:0f:ec:53:df:ce:92:7f:df:5c:f4:b1:
                    51:86:5d:bd:11:8b:37:96:79:9d:59:fe:26:c3:9a:
                    f8:36:2f:0b:7d:4d:16:26:b6:68:6b:ed:96:d9:3f:
                    0d:71:1d:f6:f6:f2:74:3a:a6:df:a7:38:bc:ab:f9:
                    1a:62:7b:bf:28:cb:63:0a:92:19:64:01:cb:07:71:
                    05:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F1:AC:05:B6:EC:FD:7A:E5:C9:2B:35:D9:C1:E9:47:CD:38:24:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/46788f87-86b9-348c-9349-a19adb4c18f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:3f:69:1d:2f:24:0a:27:0a:e8:13:f5:3c:be:c3:da:dd:cd:
         a9:0b:ba:7d:2c:d8:7b:4f:9f:6d:2d:d2:d8:31:36:ee:d2:9e:
         fd:97:8f:25:89:56:c0:79:46:c1:b8:6a:43:d9:48:2d:88:b4:
         ec:95:9d:fe:76:e7:97:76:4a:9e:ee:f3:d9:74:1a:77:8d:58:
         97:9f:05:04:d4:4f:d4:66:af:3f:1e:55:2e:7a:00:6b:0c:1b:
         c1:a3:30:04:b6:5a:f8:40:75:ec:86:61:0d:89:5d:c4:38:32:
         8c:ff:c9:81:3e:ef:85:41:2c:df:d2:f4:8f:59:3d:aa:50:aa:
         58:c7:ad:7f:09:7d:8d:b6:93:c0:d5:d8:8f:25:a0:f5:08:d6:
         0a:85:b7:ae:ee:97:09:d5:2e:06:99:30:96:60:64:6a:c1:02:
         60:f7:24:17:77:8a:c9:ff:4c:06:0b:46:6d:e1:f0:aa:ee:f2:
         11:54:27:1d:0a:25:8b:3e:14:99:1b:e6:ba:8e:20:0f:21:ac:
         4a:26:15:70:8b:90:52:97:96:7c:4b:61:5f:23:9b:a1:16:05:
         c6:0b:32:36:bc:da:88:f4:7c:fe:5f:94:1c:76:8d:94:87:bb:
         53:3d:d8:d2:44:f8:38:2a:fe:b3:a2:d9:d0:1f:76:c4:07:7d:
         b9:57:66:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:53:11 2026 by rpki-client