Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6a6c47b1-6914-3f93-9257-6c771815d8d7.roa
File:                     6a6c47b1-6914-3f93-9257-6c771815d8d7.roa (raw, json)
Hash identifier:          SJOjJbD3KjQw1u4B0QTve39uS1rYzMkHMf0f95qyRbA=
Subject key identifier:   7A:29:F0:F6:42:AA:AF:6F:8A:1C:4D:B3:71:88:6F:5F:88:CD:5D:B3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79D85C47729E2BFFE5B4F00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6a6c47b1-6914-3f93-9257-6c771815d8d7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        72.173.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:85:c4:77:29:e2:bf:fe:5b:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fc8bfafc-d314-449a-91d3-ef498f35fe55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b7:c6:e5:e3:6b:7d:be:a1:78:38:c7:88:1b:
                    00:45:4e:3d:59:1b:df:c4:40:b0:9e:f4:c6:ab:0a:
                    40:a0:ce:8d:4c:9b:01:66:59:53:84:43:8a:b2:15:
                    57:c4:69:7c:cc:23:fe:ac:90:13:8a:f0:cc:41:38:
                    28:b2:69:db:24:8a:a9:b4:8f:d0:f2:21:81:1d:0d:
                    02:46:5f:78:18:42:7c:fe:13:10:bf:55:fe:d4:67:
                    e3:c7:cf:c7:ba:cc:cc:a4:74:48:35:80:54:b2:c7:
                    0d:29:fe:be:c2:0a:4c:af:49:08:be:14:a3:0d:d9:
                    e5:b2:d6:4d:e6:bf:a8:8c:a0:e0:86:de:5f:b1:1e:
                    20:4a:f7:ab:59:cb:9c:f5:56:b3:08:bf:32:fc:d2:
                    e2:e7:42:8d:55:2e:57:3f:d5:81:f8:d4:8b:c2:1d:
                    87:a1:89:33:38:a9:5a:ef:9f:ab:5c:97:de:77:57:
                    ab:b2:b0:11:06:ae:1b:9c:43:f8:4d:b5:f2:d7:f1:
                    6d:ac:e4:bc:59:9f:3b:a1:f6:a3:23:98:3b:6f:b1:
                    18:e7:b4:5d:f5:2d:07:5f:70:2a:64:d1:f6:c3:20:
                    60:58:1b:09:71:97:dd:51:d9:37:d4:6e:c2:8d:73:
                    89:b7:91:fc:08:83:49:44:e4:97:31:2e:0d:b6:4a:
                    73:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:29:F0:F6:42:AA:AF:6F:8A:1C:4D:B3:71:88:6F:5F:88:CD:5D:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6a6c47b1-6914-3f93-9257-6c771815d8d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:e1:e0:a9:66:24:f4:0a:b3:38:13:23:a7:97:ac:6b:e2:b1:
         45:4c:c7:65:82:3d:ab:12:00:db:b9:17:b1:db:c4:26:33:78:
         30:d4:71:45:d6:88:d5:3a:2f:3c:7c:2d:3d:08:57:f6:0b:67:
         1d:87:62:63:aa:fa:1d:e4:c3:2d:c5:38:54:f7:8f:21:7a:b9:
         6a:36:4b:27:d5:5f:a8:41:e6:77:e2:a4:2d:55:e0:81:7d:d3:
         b5:a5:bf:18:4d:da:23:1c:fd:50:bc:01:10:ae:e2:97:5d:73:
         70:05:4f:6a:7e:49:53:f7:4f:9d:4f:42:1b:e5:40:ae:c4:71:
         18:28:99:a9:54:a9:11:60:77:4c:8e:2d:58:f8:fc:ea:cb:3f:
         3c:f0:1d:9f:29:cf:0a:f5:83:34:52:5e:49:03:cc:9e:c8:96:
         e2:76:ee:45:d6:1b:15:39:19:99:d1:a0:df:5e:fe:03:05:0a:
         15:49:84:ec:68:29:af:0d:48:b3:fd:cd:98:70:95:fd:08:03:
         76:1c:92:1b:e9:55:0c:b7:2d:9d:76:34:b1:7b:08:c0:e9:7d:
         31:57:87:86:ae:9c:12:b4:23:c6:e0:81:d4:9d:8d:f7:bb:6a:
         f4:80:3c:93:01:e3:f8:eb:c1:27:45:2a:d5:0b:bd:bb:cb:97:
         ee:0f:13:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:34:42 2026 by rpki-client