Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65e59ba5-ca14-32dd-ad54-8a61384d4312.roa
File:                     65e59ba5-ca14-32dd-ad54-8a61384d4312.roa (raw, json)
Hash identifier:          Rj4I8QjnmJrS63WJku5MP4P6R8PQjKiqnXuEAhygNyc=
Subject key identifier:   93:E2:E7:15:0D:7F:E2:2F:4D:80:D9:8D:D4:77:C0:9A:3D:7B:E5:BE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B69B98CB16E5354E92280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65e59ba5-ca14-32dd-ad54-8a61384d4312.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        72.173.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:69:b9:8c:b1:6e:53:54:e9:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=f5709091-8971-4892-933f-6cac02ba1cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fa:88:ab:15:4a:f1:c2:14:65:c5:62:44:54:
                    47:96:ae:1d:8f:94:fa:f0:ab:69:23:6f:5c:1d:3e:
                    73:75:b0:00:44:24:ff:0d:a7:a4:2b:c3:f2:c3:cf:
                    c9:8a:f7:7a:2a:4a:f1:ad:3e:48:aa:35:74:29:02:
                    7b:2d:1e:5c:13:fd:eb:8c:68:8e:da:f8:29:97:d3:
                    a5:dc:93:03:c8:65:8e:96:45:c8:38:71:2c:c1:e7:
                    c0:f4:9f:e1:bd:41:b5:43:24:ed:60:e3:81:b8:5f:
                    cf:24:52:e9:d9:17:07:7c:64:90:2a:97:b9:f3:59:
                    93:96:3d:ff:9b:44:10:a7:58:8c:08:cd:c5:fb:5c:
                    a0:b4:e6:c0:89:6b:a3:2c:d3:29:7d:da:b4:e8:8d:
                    06:6b:c7:77:7b:3d:cd:79:97:30:3b:19:f4:41:fd:
                    d7:68:ab:fb:64:8d:9f:fb:af:a2:5e:c5:0d:ad:d6:
                    52:03:3d:45:c3:16:37:68:f2:a8:e9:c0:a7:ed:d1:
                    0f:24:5d:23:9d:d7:85:f7:d8:9d:51:59:50:fa:97:
                    e6:74:e3:11:21:d7:60:18:50:31:f6:05:03:e8:a4:
                    7f:b7:e0:8d:b9:2d:9e:07:91:1a:4f:6e:9a:06:b0:
                    1e:d5:54:39:7d:b6:a4:73:59:03:2e:d2:06:d8:9b:
                    7a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E2:E7:15:0D:7F:E2:2F:4D:80:D9:8D:D4:77:C0:9A:3D:7B:E5:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65e59ba5-ca14-32dd-ad54-8a61384d4312.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:39:42:73:34:bc:19:87:91:a6:7e:2a:43:43:77:fa:97:64:
         81:fb:91:1e:ed:c7:2b:d9:c4:fe:57:f6:a7:4c:4f:3e:06:28:
         f1:0e:dc:f3:e9:fc:fb:6f:4c:e7:b2:58:59:c7:e2:1e:d8:34:
         01:90:82:6d:81:e4:04:80:90:16:b3:39:3e:07:bf:6d:37:c3:
         b6:4e:27:55:f7:ea:bd:72:d3:37:4d:60:41:57:78:d9:2e:dd:
         ed:a7:1f:bb:54:fb:3c:79:e1:5e:84:94:3a:f1:b3:7b:45:bb:
         f2:87:3f:f8:ae:98:7f:0f:02:ae:66:fa:4d:45:ad:03:91:e1:
         6e:d0:d1:8f:f4:0f:9c:aa:df:50:ec:06:35:f6:e7:ef:de:e7:
         9b:da:16:bd:26:ec:8d:d6:8f:e3:a6:44:a9:d3:ee:39:0e:d8:
         20:d0:d2:a5:9b:d7:83:b9:88:c9:21:c1:b7:66:a9:c2:9e:1e:
         3b:e6:f6:44:64:dc:c9:47:b0:84:d3:f8:4b:0f:77:fa:8c:21:
         ff:ee:80:22:5c:cd:ed:a8:67:29:ec:2b:c6:5e:8a:cd:2f:13:
         d4:bc:b7:17:e3:cf:ea:df:94:e9:a3:97:73:76:be:fe:d1:fa:
         0b:17:62:ed:ca:df:82:5a:0d:f9:49:ba:df:3b:0f:aa:75:d4:
         32:ae:42:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:25:35 2026 by rpki-client