Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c2d77490-928f-3f3e-9931-e32e8035382b.roa
File:                     c2d77490-928f-3f3e-9931-e32e8035382b.roa (raw, json)
Hash identifier:          q9/mn87s/Er3qNiA5HbnAtJdaJQLD/pMxN5r60BIguY=
Subject key identifier:   37:7E:BE:70:5C:9B:30:0E:7F:FE:CA:F6:61:85:68:5F:60:06:08:39
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79F20A799C99E1D69BE0980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c2d77490-928f-3f3e-9931-e32e8035382b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        72.173.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:20:a7:99:c9:9e:1d:69:be:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=959c276b-6924-4edf-b1a8-fecde25cdc5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e7:46:4e:7a:f5:5b:b0:6b:71:60:ed:33:7d:
                    af:67:ee:9d:0f:98:d3:76:80:31:af:20:46:c4:4a:
                    7a:41:d1:94:08:e8:3d:24:f3:19:ca:ca:92:84:a7:
                    37:ff:be:49:a3:0c:53:7e:dd:f3:bb:97:b5:2e:8f:
                    ed:93:e2:23:a7:70:89:73:ad:93:93:85:a4:b7:bd:
                    50:28:29:8d:a2:dd:bb:01:48:31:59:a4:c8:46:5d:
                    ae:a3:5c:f0:70:50:9a:f7:6b:64:1a:05:0c:a6:ea:
                    2f:f7:6a:55:1a:87:4a:92:35:e0:d8:e8:5e:40:ca:
                    3f:ce:2a:71:1a:1b:b2:93:52:db:8b:3a:9c:28:66:
                    91:b3:1d:51:e7:85:92:74:1e:be:2f:f7:c6:dd:a3:
                    cd:89:84:68:d7:5b:e2:b3:b9:1e:61:a8:b8:d1:f8:
                    02:d4:42:9b:7c:26:c4:82:eb:bf:48:c1:ce:f3:95:
                    61:5a:46:f6:92:1b:72:58:c1:ab:ea:9a:eb:1a:cd:
                    11:f6:62:d9:ac:56:92:9b:ae:2b:d4:93:e7:0b:f3:
                    2f:97:3f:9b:bc:31:1f:46:e8:1d:e2:a7:85:ae:04:
                    e6:7f:d7:49:62:ff:7d:60:3c:ee:b1:aa:48:93:bf:
                    8c:53:7d:87:ff:19:51:0b:0d:2a:48:21:ae:56:c9:
                    55:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7E:BE:70:5C:9B:30:0E:7F:FE:CA:F6:61:85:68:5F:60:06:08:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c2d77490-928f-3f3e-9931-e32e8035382b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:aa:f7:b3:9a:7e:d5:fc:9f:ae:0d:e8:25:50:92:38:9d:79:
         04:31:af:8f:af:e1:b7:91:95:23:f2:a5:9a:35:a4:c1:ef:e4:
         79:39:15:21:47:35:31:3a:12:16:6a:0c:38:77:c8:6f:73:9c:
         d0:ff:49:e2:ca:9b:41:dc:64:18:0a:41:d3:da:a5:22:3d:8f:
         2d:31:6c:b6:42:6b:d9:c8:45:90:c3:af:08:43:1d:12:67:b1:
         c6:5f:81:d2:3e:19:7f:9b:a8:5b:7b:fe:73:ce:b1:90:d9:d3:
         4f:05:52:d9:ec:4c:1c:5c:19:97:ad:5d:16:0a:ad:59:03:c2:
         34:b4:c7:b4:3c:ad:ba:0b:d8:70:e4:19:3c:33:f0:f1:48:2e:
         c7:1b:d9:1e:a6:8b:5a:51:cb:64:39:37:92:53:f9:81:65:18:
         9e:be:34:db:2d:2e:6b:0d:76:5a:3a:d4:d0:c7:93:cf:c1:d0:
         44:5c:3d:6a:ba:ca:41:26:31:75:d4:57:97:ca:1f:4a:a6:48:
         b4:f6:91:96:00:48:e5:33:52:a2:3b:b0:d7:63:43:10:7e:b3:
         84:65:50:45:5e:11:9d:f8:c5:d6:93:80:35:5d:97:99:f3:d6:
         fa:eb:90:c7:e9:e5:60:47:01:41:16:1c:b9:e6:32:a1:e7:43:
         5b:68:1c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:55:37 2026 by rpki-client