Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b80d47d5-4854-3f7a-bcdf-9c400d7cb19d.roa
File:                     b80d47d5-4854-3f7a-bcdf-9c400d7cb19d.roa (raw, json)
Hash identifier:          BZAwya3G+RhebfxawHKV4s/B75QIjYeFzXY5LJbbe+k=
Subject key identifier:   8E:26:59:1E:A7:26:27:99:C9:1A:45:EA:2C:17:A2:F0:52:86:1E:AA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79D8E35D219B33DC19F2200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b80d47d5-4854-3f7a-bcdf-9c400d7cb19d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        72.173.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:8e:35:d2:19:b3:3d:c1:9f:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b03b2f0a-5b60-4798-930d-cc86a7398cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:33:4e:ba:3f:68:4e:2a:db:63:c4:c2:58:a7:
                    99:3a:0a:f7:a8:3c:99:f9:72:65:9e:d4:fd:b7:59:
                    6c:57:dc:dd:96:c1:ed:b0:9d:bf:4c:2d:6c:95:7b:
                    f0:f6:4e:0d:d3:c9:e4:e7:97:25:b7:b9:4c:46:b3:
                    9a:87:51:a1:be:76:fd:65:1f:00:a6:26:97:94:ef:
                    14:36:02:98:20:af:03:24:8c:36:3a:18:ba:ce:d8:
                    0c:48:4d:49:74:a7:ab:ec:5c:d1:76:6c:82:70:9c:
                    76:a9:17:a9:c0:ea:37:16:6a:f0:be:00:9d:74:0c:
                    fa:5a:fc:81:6e:37:f0:1f:1c:e7:c0:8a:5b:55:9f:
                    f2:ef:c8:62:09:6d:40:5f:ab:1e:46:64:98:dc:5d:
                    0c:cc:e4:41:a7:f0:55:6e:67:bd:11:7f:4d:e1:d7:
                    9f:bb:9d:a4:44:6e:1a:35:d3:7c:82:57:46:79:12:
                    14:a3:a7:b9:2f:91:9a:fa:f1:bd:80:76:bb:b1:f8:
                    1e:47:da:56:7e:dc:bf:69:5d:a0:3c:8d:dc:d7:dd:
                    3d:fa:3b:5b:9b:bf:2e:34:5f:a6:24:30:3f:fe:93:
                    d9:c6:b0:7b:b1:b1:51:f1:ae:03:75:fc:05:c9:e6:
                    ab:ea:d7:fb:60:19:f8:3b:21:2a:9e:b3:89:51:51:
                    f5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:26:59:1E:A7:26:27:99:C9:1A:45:EA:2C:17:A2:F0:52:86:1E:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b80d47d5-4854-3f7a-bcdf-9c400d7cb19d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:b8:dd:9c:12:03:7a:78:07:7d:2b:09:d9:f2:bc:f0:d6:d1:
         c9:20:91:b2:1b:4a:ab:3f:14:1d:38:7f:0b:8c:aa:2a:24:94:
         db:bb:a4:50:42:80:2e:cb:2e:01:48:16:3f:40:0d:3c:ed:f8:
         32:07:b4:b9:9c:5c:15:78:20:f1:57:5b:7b:34:42:be:b6:33:
         1d:f2:b7:82:7d:7e:af:84:7f:e6:a1:37:ac:5c:a7:4c:7c:a4:
         34:1d:bb:5e:f8:a4:7a:0f:1f:51:bc:df:44:c8:ce:ce:73:af:
         ae:62:7b:d5:2a:8b:0e:cc:c4:61:38:66:5f:67:c4:0f:b1:44:
         26:85:bb:fd:2f:b8:49:00:a7:b0:3f:9b:96:9d:0d:c5:02:74:
         43:37:da:92:2a:48:77:7a:b3:12:24:ce:db:73:e8:29:ad:f7:
         08:f5:de:40:94:a0:90:e6:9c:c4:dc:5a:f5:ac:28:3f:0a:c7:
         e2:f2:e4:98:d2:f0:1e:25:e9:1f:45:5f:fe:a7:89:e0:f3:d0:
         4f:23:7b:ac:c1:9b:23:ec:05:37:bd:5b:92:72:11:15:65:35:
         2b:d3:23:8e:45:5a:3a:6d:30:9e:68:9d:e0:28:b0:03:70:83:
         4a:3b:0e:b0:aa:67:e0:3d:c9:fd:02:89:6b:4c:1b:f8:0c:a6:
         fb:66:8c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:55:34 2026 by rpki-client