Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6a6c47b1-6914-3f93-9257-6c771815d8d7.roa
File:                     6a6c47b1-6914-3f93-9257-6c771815d8d7.roa (raw, json)
Hash identifier:          UW8bQ0AujbgV5YI9kRdedJpZXkbXYxazcG7+DxdOkpo=
Subject key identifier:   B9:50:26:BB:1A:1D:19:12:6E:8C:D7:B8:67:FD:29:57:97:15:E6:A1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24DFB88E0C76CA5D6FBD3A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6a6c47b1-6914-3f93-9257-6c771815d8d7.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        72.173.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:b8:8e:0c:76:ca:5d:6f:bd:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=35645bec-9848-46a2-8814-a556cbd3bf53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9f:10:05:b0:29:89:f7:e6:b4:41:69:86:73:
                    dd:4b:0f:04:0f:5f:60:ed:ce:12:d8:f0:0f:c9:79:
                    5b:ff:fa:79:1f:7f:87:e3:cc:29:23:5b:28:3a:44:
                    ec:d6:df:87:00:b5:f5:f9:e3:76:4b:6c:ef:0d:ef:
                    04:29:5d:4b:e0:d5:8b:9f:4c:82:db:83:5f:7c:68:
                    34:8a:e2:2b:26:3a:bf:8c:44:ef:20:3d:63:db:53:
                    54:2b:a9:03:a9:6d:ea:42:09:13:77:3f:0c:12:e2:
                    a9:b0:d5:70:24:5a:79:01:69:7b:57:91:09:f6:d3:
                    7d:50:03:0a:f1:da:1a:b4:e0:ea:57:62:50:2b:05:
                    86:12:1c:18:a8:4c:84:11:4c:a3:d2:45:4e:e9:62:
                    9a:48:c9:8b:5d:a6:4c:aa:97:c0:29:ba:94:24:dd:
                    f9:d2:e4:2d:4c:e0:91:47:d8:85:45:26:f4:f4:79:
                    4b:6b:24:21:36:92:35:11:17:4d:78:ab:60:aa:3e:
                    d5:d0:2f:86:98:76:54:a0:4f:b2:d0:c1:d0:ea:c1:
                    44:5e:43:26:38:2a:8a:47:eb:b3:e6:09:90:d4:86:
                    85:e4:7d:8e:71:6c:f5:13:8d:4d:db:92:64:51:7b:
                    d6:17:a5:a0:33:db:eb:66:d7:2c:f5:35:74:4e:47:
                    95:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:50:26:BB:1A:1D:19:12:6E:8C:D7:B8:67:FD:29:57:97:15:E6:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6a6c47b1-6914-3f93-9257-6c771815d8d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:aa:e7:94:7c:dd:ac:98:37:96:bd:a8:3d:c0:a8:54:9c:a0:
         4d:81:02:32:f3:bc:6c:4a:0e:e6:ae:63:8d:92:1b:40:74:1f:
         44:38:97:83:8e:97:2d:5a:2e:4b:88:d1:c0:da:40:1d:b3:0e:
         74:15:ea:22:0c:bc:bb:46:3e:05:9b:da:32:63:18:7d:9f:6e:
         70:ce:c1:4c:80:47:4e:b5:ea:a2:f7:f8:8d:22:e4:8d:c3:a1:
         2c:ad:6d:f8:e1:b6:32:a4:bc:93:e3:8e:48:60:05:4a:74:f0:
         4b:df:37:e0:7e:80:3a:be:81:75:24:8b:15:65:29:04:dd:03:
         49:61:f7:81:d6:0f:d5:03:e8:42:3c:aa:e8:44:39:cc:95:38:
         f2:a0:dc:44:ec:3f:75:f4:1a:34:81:21:12:28:35:89:46:96:
         9c:73:cf:51:e8:95:d0:85:6d:b8:08:86:31:bf:65:cf:90:68:
         ec:78:71:07:cc:66:0e:1e:f5:4e:17:f6:f8:c8:25:ff:7f:ce:
         8a:c3:76:eb:28:19:e0:c0:2b:9c:75:64:d6:88:a8:2f:c4:69:
         aa:62:4f:3a:16:9a:c3:58:12:3d:11:d1:1a:fd:f1:8e:c0:40:
         6e:3d:50:e3:0a:e5:31:35:2e:8e:c6:10:8c:5d:08:ec:32:c2:
         3b:3c:61:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k37iODHbKXW+9OgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
MzU2NDViZWMtOTg0OC00NmEyLTg4MTQtYTU1NmNiZDNiZjUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJ8QBbApiffmtEFphnPdSw8ED19g7c4S2PAP
yXlb//p5H3+H48wpI1soOkTs1t+HALX1+eN2S2zvDe8EKV1L4NWLn0yC24NffGg0
iuIrJjq/jETvID1j21NUK6kDqW3qQgkTdz8MEuKpsNVwJFp5AWl7V5EJ9tN9UAMK
8doatODqV2JQKwWGEhwYqEyEEUyj0kVO6WKaSMmLXaZMqpfAKbqUJN350uQtTOCR
R9iFRSb09HlLayQhNpI1ERdNeKtgqj7V0C+GmHZUoE+y0MHQ6sFEXkMmOCqKR+uz
5gmQ1IaF5H2OcWz1E41N25JkUXvWF6WgM9vrZtcs9TV0TkeV5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLlQJrsaHRkSbozXuGf9KVeXFeahMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmE2YzQ3YjEtNjkxNC0z
ZjkzLTkyNTctNmM3NzE4MTVkOGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK04MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGGq55R83ayYN5a9qD3AqFScoE2BAjLzvGxKDuauY42SG0B0H0Q4l4OO
ly1aLkuI0cDaQB2zDnQV6iIMvLtGPgWb2jJjGH2fbnDOwUyAR0616qL3+I0i5I3D
oSytbfjhtjKkvJPjjkhgBUp08EvfN+B+gDq+gXUkixVlKQTdA0lh94HWD9UD6EI8
quhEOcyVOPKg3ETsP3X0GjSBIRIoNYlGlpxzz1HoldCFbbgIhjG/Zc+QaOx4cQfM
Zg4e9U4X9vjIJf9/zorDdusoGeDAK5x1ZNaIqC/EaapiTzoWmsNYEj0R0Rr98Y7A
QG49UOMK5TE1Lo7GEIxdCOwywjs8YYg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:10:00 2026 by rpki-client