Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53f1bce3-1980-38cd-84b2-c92e91cd7ab5.roa
File:                     53f1bce3-1980-38cd-84b2-c92e91cd7ab5.roa (raw, json)
Hash identifier:          F+5bC30vsPIrd1UjwsCKgUXQ9gVDGichAPiKRuqw0mw=
Subject key identifier:   F0:D6:EB:18:0D:C5:7E:7E:FB:FD:34:4A:89:24:7D:9D:91:22:14:BC
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F497B076B4A68EA6410A3F980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53f1bce3-1980-38cd-84b2-c92e91cd7ab5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        72.173.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7b:07:6b:4a:68:ea:64:10:a3:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1bd4065f-5a3a-41ef-8aaf-0e448f4e0c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:93:6e:5c:9a:75:c9:d9:1a:b3:b1:88:32:ae:
                    cd:54:c9:64:03:cd:1a:66:2d:a5:2a:dd:50:60:8e:
                    0b:53:e4:86:f1:55:29:e2:72:4d:6b:81:62:c1:f6:
                    1d:89:62:5c:66:b9:26:99:11:b6:a7:ae:83:dd:41:
                    da:10:2b:bc:97:d8:ca:d3:fc:ae:56:cb:fa:d9:92:
                    2b:74:88:51:fe:64:d5:90:3f:f8:56:6f:78:94:2b:
                    61:0d:5d:6a:f8:7e:51:78:3c:ed:56:ff:66:93:99:
                    99:9d:a5:a4:11:42:34:42:f8:a3:c7:7f:58:62:7e:
                    b7:01:c3:05:c8:06:e4:f9:45:fe:39:9f:b7:a9:90:
                    54:41:7a:49:28:49:f8:b5:eb:e3:c3:fd:2b:3a:ff:
                    83:11:2c:de:3a:96:9d:53:2f:17:fc:c6:56:f0:57:
                    fa:70:43:3a:fe:cf:cc:fa:0d:9b:17:92:9c:9d:1a:
                    53:01:cf:e8:7c:ca:98:bd:89:41:4d:57:4a:2c:77:
                    53:20:e3:da:f8:5d:55:16:c0:4f:4f:b5:02:c0:c7:
                    df:80:8c:60:c4:3d:35:1d:40:ae:59:5b:1e:4d:e9:
                    69:f0:dc:a2:4c:4b:a7:1e:70:4b:29:97:25:58:7d:
                    d4:56:d0:a8:70:f4:5f:ce:88:0b:6e:c7:71:7b:53:
                    b0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D6:EB:18:0D:C5:7E:7E:FB:FD:34:4A:89:24:7D:9D:91:22:14:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53f1bce3-1980-38cd-84b2-c92e91cd7ab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:1e:80:30:4b:68:1f:83:a5:f1:e9:69:7c:96:30:d2:8f:4a:
         cd:81:8b:60:b8:c7:69:74:21:95:f9:34:70:a4:2f:23:a5:4b:
         7d:5a:6c:9d:fb:34:cb:17:3d:10:e5:7c:f0:29:1f:a3:0c:1d:
         da:00:6b:26:5b:a1:a0:3a:29:7e:77:ac:c2:99:f8:ba:ba:02:
         ea:15:cd:c1:d8:4a:2e:4b:ed:d0:f3:fd:59:20:a3:c8:e3:8b:
         bf:8a:81:7d:d2:94:42:55:24:af:48:42:2b:ce:1b:6b:bb:01:
         15:a4:99:82:4f:99:41:90:7e:61:c9:a7:b5:46:d4:9c:f7:33:
         c7:49:31:c3:38:22:93:06:fd:5c:10:dc:fb:8a:36:d8:c0:b3:
         88:eb:ec:f1:bd:d8:7e:2b:21:4f:fa:22:fa:71:22:9a:b9:6d:
         b0:6c:1e:39:d4:56:9a:b1:6d:07:f2:f2:07:1b:58:bb:50:89:
         67:c9:e9:2e:4f:da:f2:e8:1a:5b:7e:b1:30:85:85:af:b6:b9:
         0c:68:69:26:73:b5:7f:42:a2:02:c0:fd:17:1e:95:4b:c0:21:
         6b:54:14:c8:9d:e0:28:00:4c:da:18:69:a8:80:02:25:1a:7f:
         cd:69:6d:aa:93:ed:e5:21:5c:01:81:0d:83:e9:d9:6e:e5:69:
         d2:53:da:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:56:06 2026 by rpki-client