Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c3d075a-0b3a-39b2-b8cc-dfd4904829c5.roa
File:                     3c3d075a-0b3a-39b2-b8cc-dfd4904829c5.roa (raw, json)
Hash identifier:          CvEXSINMx1rk77kxG4Gr3ZFm/nroCGmyObZNIAPQQUg=
Subject key identifier:   58:CE:5A:B6:AB:35:51:55:A7:02:3D:49:95:CB:15:9F:A7:85:D4:B5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E066F68E3381021EA743C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c3d075a-0b3a-39b2-b8cc-dfd4904829c5.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        72.173.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:66:f6:8e:33:81:02:1e:a7:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=7f379544-6c2e-4f11-8526-31d16db682bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:39:b9:02:1e:74:f3:eb:c1:6f:06:1d:8d:2a:
                    f0:d4:4e:5e:de:f1:f5:55:fc:1f:81:ad:9b:91:94:
                    1d:1b:b1:a5:8f:2e:f0:7d:07:f0:58:4d:ab:c9:e3:
                    45:fa:e7:f6:af:fd:97:20:29:0d:0b:f7:12:16:b2:
                    7b:f1:e3:9c:c1:e3:f3:5a:0c:f7:26:a4:c1:08:bc:
                    63:93:ef:81:96:71:c3:c8:3a:b3:ed:dd:e2:44:a9:
                    3c:d3:32:2a:b1:a0:09:b1:a0:d7:26:d8:15:df:b9:
                    28:57:bb:ae:6c:25:35:3b:dc:ee:3f:e7:3e:3e:c7:
                    29:82:3e:c9:1a:81:11:30:d9:20:44:0e:47:fd:3a:
                    30:68:a3:13:c1:dc:97:1e:84:bb:1b:8b:da:41:1d:
                    9b:fe:d3:5f:d0:6b:ba:4e:b1:8e:eb:aa:07:43:b0:
                    c2:38:72:4f:be:5a:e9:ad:aa:de:53:be:b2:0b:02:
                    c6:20:a0:7b:c5:e7:e8:84:51:dc:41:51:f3:4c:4a:
                    ea:2a:d6:d1:10:c2:f5:4a:12:80:e1:a4:1c:62:5d:
                    e4:8a:df:d4:b4:82:0b:54:07:cf:66:a4:f1:87:e6:
                    6d:a1:8d:56:ff:d5:b2:8c:ae:3d:c8:bd:95:04:97:
                    1e:b8:f6:70:5b:f5:bf:7a:44:da:40:fe:b7:20:20:
                    a2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CE:5A:B6:AB:35:51:55:A7:02:3D:49:95:CB:15:9F:A7:85:D4:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c3d075a-0b3a-39b2-b8cc-dfd4904829c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:0f:84:ab:db:99:a7:88:89:ce:fa:7d:63:7d:62:dc:f3:7f:
         38:e3:d9:ad:55:22:9c:4d:06:5d:7e:7f:95:fd:1c:4a:5b:af:
         4b:d5:32:ce:29:05:fe:2a:d7:7b:05:ad:43:b8:c4:d4:ab:e6:
         d7:10:5f:f2:fd:a7:ed:9a:b5:cc:9d:61:6d:78:28:8b:82:de:
         57:ef:4d:0d:4f:85:ca:1b:a7:71:3f:62:7f:55:5e:73:31:39:
         fd:14:79:f6:e3:f3:2e:5d:d6:f3:5c:e2:0c:23:cb:09:8b:ac:
         db:69:b3:b7:79:d7:d7:52:f7:9d:c0:d0:c1:5e:ab:24:ed:90:
         4c:15:61:aa:32:4d:87:97:d1:51:5d:13:b6:cf:10:37:76:f0:
         8c:a1:65:6c:37:39:78:b4:65:8a:f9:ad:05:ea:2e:96:5c:3e:
         2e:ec:23:39:3c:69:c7:5b:61:8c:f9:fd:c2:b9:12:bf:13:08:
         ae:33:47:61:85:22:4c:6e:53:02:33:a3:bd:c1:f9:d5:e4:79:
         13:2c:66:84:5e:9a:92:25:a4:df:00:1f:86:f4:75:70:70:52:
         74:67:40:44:33:bf:7b:58:4a:6b:08:e3:66:76:38:b8:59:ff:
         37:83:8d:e5:d3:55:3b:f1:d4:0f:54:53:8a:51:66:e0:23:d1:
         10:94:b4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:28:28 2026 by rpki-client