Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b315d729-0940-300a-b640-bd59dc4b8411.roa
File:                     b315d729-0940-300a-b640-bd59dc4b8411.roa (raw, json)
Hash identifier:          jKZGUG49Ul12CkuRClm91PkPETIh5o38IXBifIYrlO0=
Subject key identifier:   66:30:A5:D2:0C:79:82:7A:92:AD:DB:CE:A6:62:1B:0D:5C:17:E6:A5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79D86964495138B356C9C80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b315d729-0940-300a-b640-bd59dc4b8411.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        72.173.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:86:96:44:95:13:8b:35:6c:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a13519ee-ac31-427b-a252-f73c33d30066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3d:2f:41:a1:1b:4c:6b:3a:ee:e4:5a:35:ac:
                    2e:09:8f:2d:07:c8:91:de:d9:86:a5:33:60:01:3c:
                    30:2a:1d:cf:35:90:4f:24:7e:bf:4b:a2:4f:f4:c7:
                    9b:ce:71:9c:13:bf:a3:a5:13:f6:f4:2e:b3:62:12:
                    be:0b:36:4d:ba:f3:6c:80:d4:d6:72:87:6b:0a:19:
                    00:4a:9d:f4:1c:9c:a1:0e:59:51:f6:29:23:a8:50:
                    2a:88:69:ce:ef:82:2c:e7:f5:c1:57:f0:76:b1:8a:
                    e7:a5:fd:ba:ff:5a:7d:dd:db:89:93:6e:ed:a5:09:
                    de:c1:89:97:38:e9:50:88:75:55:80:28:cb:89:64:
                    6e:21:4a:db:18:23:8d:30:40:7c:eb:28:fc:29:e5:
                    40:15:d2:3c:5b:37:50:fe:80:53:01:9e:85:87:e8:
                    62:ac:ff:74:af:58:d2:8d:a3:ea:20:08:34:1a:d9:
                    8e:aa:06:fd:8b:96:f8:71:d9:98:bd:7f:1f:80:c8:
                    9f:e7:ab:89:74:fe:14:53:94:d2:3d:fa:da:e4:0f:
                    82:bd:5a:cc:bf:87:02:77:ed:97:f8:08:f3:4e:3d:
                    d1:18:8f:bb:11:f8:88:ab:ba:02:dc:18:bb:54:5f:
                    60:ed:c8:75:a4:9c:e4:e1:ef:23:66:c0:4a:f5:76:
                    65:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:30:A5:D2:0C:79:82:7A:92:AD:DB:CE:A6:62:1B:0D:5C:17:E6:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b315d729-0940-300a-b640-bd59dc4b8411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:c7:d6:0d:90:e8:c9:9c:d3:ea:84:f5:42:72:65:52:71:b9:
         23:27:28:8a:6f:ba:c3:1d:6b:39:a9:99:de:85:b0:fe:c7:c3:
         a0:c1:0a:e6:30:e8:e6:43:04:07:c3:67:99:aa:34:10:98:48:
         29:fd:ab:24:e5:39:25:df:58:37:00:b9:fd:5d:9d:08:67:14:
         74:f3:5b:08:eb:24:35:5a:49:d5:56:82:a7:f8:e2:a8:28:3b:
         08:a6:2f:f1:ea:38:d1:c1:bf:81:9d:74:93:4a:bd:08:b8:51:
         e0:9b:e6:60:4d:2f:63:00:cc:98:1f:ff:8a:85:af:ee:01:5c:
         6a:50:ec:5a:c7:8b:22:b2:2c:38:8c:c7:85:62:d9:51:a9:6a:
         c7:ed:91:b3:9b:bb:64:54:52:9a:15:32:4d:a4:35:31:89:5a:
         fe:d6:99:ea:d1:98:8c:8b:62:95:f9:01:27:3e:b6:64:f5:23:
         2d:6d:24:7d:7d:2c:ad:8f:ce:b6:0b:aa:34:c9:be:c1:19:1e:
         f8:cb:34:c5:d4:18:ed:98:cd:11:0d:b9:48:42:3a:59:2a:e7:
         d7:d1:30:b9:0f:98:a6:8d:53:9d:ff:39:a2:9c:b9:52:67:b3:
         53:3f:6c:4a:18:20:5a:c9:94:8e:25:e0:bf:8d:60:a1:bf:d2:
         9e:0b:34:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:08:32 2026 by rpki-client