Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce1d6dbd-c80e-35bf-a6b1-5eb445c82945.roa
File:                     ce1d6dbd-c80e-35bf-a6b1-5eb445c82945.roa (raw, json)
Hash identifier:          6wL+zFPJC1jGtcZz+sXDbzZ7AGP7DEiJ8CBIN1SofOc=
Subject key identifier:   EE:6C:E4:AE:DE:94:3F:BA:F5:04:33:A1:69:FF:B9:29:6E:E1:A2:A8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F498332A899199F36900C00DC
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce1d6dbd-c80e-35bf-a6b1-5eb445c82945.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        72.173.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:32:a8:99:19:9f:36:90:0c:00:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8020b301-3a9c-4b59-88ab-3f1b46083633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ba:e4:7b:67:48:1f:df:b1:5a:d5:e6:56:4d:
                    b8:7f:0c:54:65:e6:39:aa:83:a5:d2:3a:3d:d2:a8:
                    d2:c2:44:3e:b2:e4:fc:0c:2e:95:1d:7e:3c:1c:47:
                    62:af:b5:9d:be:a7:92:28:0c:04:24:5e:4b:92:fb:
                    60:83:5e:16:2f:6e:7b:9f:be:b9:55:98:d6:d2:1d:
                    49:c7:3c:b5:67:0d:a5:45:84:14:88:79:a7:08:a4:
                    db:7b:b0:a3:21:29:42:a2:07:06:8f:c5:68:c4:58:
                    8b:aa:51:11:76:19:27:3e:cb:7c:b6:b7:b9:a1:49:
                    c1:de:26:cb:43:56:e5:4c:93:54:90:c1:2a:1d:1f:
                    da:4d:b0:cd:2f:7f:83:01:38:3c:21:38:da:1f:3e:
                    4a:54:f5:17:6f:c9:17:b2:2e:56:58:cf:c2:f7:d5:
                    b3:8d:59:aa:45:0e:81:63:fc:68:61:82:de:dc:44:
                    40:e0:b6:5d:e9:33:37:6a:c1:35:80:71:40:a1:42:
                    cb:c8:a1:c5:a9:f5:43:6c:16:18:3c:48:46:e0:2e:
                    bb:f9:41:c5:d5:3f:c7:cf:8f:5c:bf:0b:43:71:15:
                    17:9d:aa:0d:d3:63:82:39:97:d6:f0:37:89:13:40:
                    ba:db:f7:31:b5:16:86:72:71:26:88:7b:df:bd:26:
                    e0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6C:E4:AE:DE:94:3F:BA:F5:04:33:A1:69:FF:B9:29:6E:E1:A2:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce1d6dbd-c80e-35bf-a6b1-5eb445c82945.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:63:21:cd:5a:b3:ab:a0:e8:2c:3d:e2:3a:a3:3b:74:6c:8d:
         10:9e:7f:8c:86:85:5f:3e:36:a7:f5:28:ab:a4:49:eb:9c:51:
         22:19:4d:8a:77:bf:d8:03:9b:9a:06:f3:25:6b:1b:00:22:7b:
         18:8e:c3:bd:75:95:8c:d0:77:5b:23:77:69:52:a6:f6:03:fc:
         ce:2b:75:6e:96:c8:c2:71:0e:46:39:3d:b0:23:22:af:b3:db:
         4d:61:d8:97:68:1c:d7:1e:15:89:18:a2:af:23:b3:ac:d5:fa:
         b4:84:b8:62:74:e2:17:cd:3e:ac:f2:f7:da:66:d6:1e:0a:0c:
         02:2e:22:bd:06:80:e8:99:50:14:11:ef:58:86:be:82:6a:cc:
         dc:ac:e3:75:ff:e8:3d:34:7d:b3:f9:bf:35:ba:7f:de:dd:3d:
         43:25:ca:c9:b9:7a:f6:41:83:53:4a:0b:3d:f7:d2:47:5a:42:
         85:99:bd:50:32:cd:ad:2d:67:f8:25:05:ae:7b:8d:6d:ac:b5:
         71:eb:9a:70:22:7c:70:86:17:e2:f7:0c:ca:22:ac:36:b4:ee:
         80:0c:8b:43:4e:61:1a:a2:ec:41:c3:82:b7:27:1e:2a:71:07:
         8d:f3:1d:ee:91:80:83:1d:e0:d4:2c:d5:2b:be:f6:83:5c:b4:
         c5:cb:95:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:27:45 2026 by rpki-client