Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8696df8-29e7-39ef-b1ee-b24b64bddd67.roa
File:                     d8696df8-29e7-39ef-b1ee-b24b64bddd67.roa (raw, json)
Hash identifier:          UuJIEcqvTvOYkvBW5rhk1O3eKOkbxlAN818Fr/dRuuo=
Subject key identifier:   3B:99:2E:44:34:69:56:25:32:59:D3:EE:F2:9D:69:F2:15:BA:8C:3A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79F184222D0FDE25DC2EDC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8696df8-29e7-39ef-b1ee-b24b64bddd67.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        72.173.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:18:42:22:d0:fd:e2:5d:c2:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=122c1f3f-1512-4e0a-82ea-590fd368fca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:85:11:18:72:30:4d:b6:5d:d1:7d:cb:fe:2a:
                    5b:54:78:a6:9c:72:70:81:f2:37:53:3c:d9:a4:89:
                    e4:b1:aa:78:fe:fb:ec:bd:fc:5a:2a:ea:c0:2d:31:
                    7d:8f:e6:ee:62:f5:ed:ae:1a:b9:f1:27:b6:66:b4:
                    c9:08:14:3a:24:0e:0b:90:97:d1:42:34:e7:d8:9a:
                    f8:38:7f:c2:dc:e6:2e:39:55:5d:33:ea:d0:2b:89:
                    b4:fc:97:91:42:fc:b0:66:2b:d2:22:b0:c4:d4:6e:
                    11:d7:12:fd:64:0d:92:ed:2e:53:71:e6:41:ee:99:
                    8a:8e:9f:54:33:64:bf:88:5f:ff:33:b5:1d:a8:fa:
                    7a:a6:b1:b8:c1:ad:54:b8:9c:ab:94:71:ce:45:48:
                    89:41:a1:42:25:43:4a:3e:60:b8:90:d7:80:66:b6:
                    71:18:e0:89:bc:6f:ab:58:29:01:fa:5b:4e:ed:22:
                    1c:60:0f:d6:0d:5b:dc:20:48:ed:8b:46:f2:c8:6f:
                    8a:e1:42:39:ff:86:ea:58:a6:f8:71:e9:47:3a:17:
                    de:ef:fa:55:98:10:48:01:74:09:f2:84:e8:c8:85:
                    55:e0:fc:6e:20:92:ea:33:c4:3a:40:b0:62:52:73:
                    b4:c3:79:05:c0:0a:69:97:d8:59:13:8a:03:c4:67:
                    98:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:99:2E:44:34:69:56:25:32:59:D3:EE:F2:9D:69:F2:15:BA:8C:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8696df8-29e7-39ef-b1ee-b24b64bddd67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:e8:57:ec:43:7b:5a:24:96:4b:c9:12:f1:5d:54:71:a8:fa:
         bb:12:4e:2f:16:3a:d3:8f:1d:f7:fc:ed:19:16:da:3d:db:de:
         56:01:5c:e7:8b:1f:32:07:c2:5e:54:f9:31:75:2b:75:73:d1:
         2a:aa:73:8b:a7:f3:cd:67:5b:5e:46:17:4a:71:87:ab:64:84:
         f3:36:66:3c:60:38:f8:5c:70:5d:99:3b:64:c3:be:a5:ab:38:
         d1:6d:e9:a3:99:b0:44:9d:54:6f:07:5e:fb:bf:5b:49:20:1a:
         40:bc:d8:45:f5:78:83:d7:a5:14:6b:c2:0a:25:c3:19:d6:54:
         b2:f7:77:38:31:d4:81:c4:20:96:12:d8:95:68:7e:48:ac:07:
         8b:6f:f6:ba:4d:fe:45:7e:34:39:36:1b:85:e2:c6:76:48:91:
         77:bb:29:ea:da:57:a3:4d:60:f8:b7:c0:1c:ab:9d:2e:c1:29:
         ca:71:14:e4:6f:6e:95:19:63:df:72:97:d9:c3:c4:65:22:1f:
         42:6b:ff:db:b6:ef:bb:aa:2f:1f:83:f4:45:a5:c1:80:f5:30:
         26:ad:ca:7f:f1:4e:d5:da:3b:d7:8f:6e:54:80:ae:d4:5b:4e:
         b2:d4:3f:bd:07:94:2d:29:6a:36:2d:9e:4e:36:fe:08:17:43:
         bc:4f:74:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:04:53 2026 by rpki-client