Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9484b5b3-dc5f-3c66-bfad-b09256e8edf9.roa
File:                     9484b5b3-dc5f-3c66-bfad-b09256e8edf9.roa (raw, json)
Hash identifier:          pyhO861/K2tRB84JpuGm4N3e1NOVhs/TnxQuvQD8A1k=
Subject key identifier:   C0:64:37:97:06:43:B2:02:CB:DC:73:9F:AB:28:02:8E:81:B4:50:13
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCD95F89E0FED73EE0CB80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9484b5b3-dc5f-3c66-bfad-b09256e8edf9.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        72.173.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:d9:5f:89:e0:fe:d7:3e:e0:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=fcfd5f57-2c0c-4754-8176-4426640a53ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cd:fb:c5:44:ff:04:a8:c3:d0:52:51:64:44:
                    82:07:3f:af:9d:81:92:33:3c:cc:da:89:e4:64:ed:
                    32:b8:c9:ae:8a:f7:14:f2:5e:b2:7a:20:16:80:47:
                    f9:2c:90:4a:00:1b:74:3a:3b:dc:7e:c9:d8:82:15:
                    80:3b:83:ae:2e:d1:af:24:bf:2b:77:95:3a:2a:60:
                    73:4b:38:82:ef:04:3e:49:b2:f5:32:90:83:1a:7c:
                    be:3e:d4:5f:46:49:13:8a:6f:9c:cd:71:64:30:55:
                    28:2c:7d:ba:66:d5:8a:d9:b9:b2:ca:ca:22:a3:dc:
                    c0:78:b5:9a:ca:cb:46:50:8d:e1:88:8d:3d:ec:8b:
                    ed:95:1a:b1:24:7c:e7:f6:54:35:94:29:e5:35:60:
                    1f:40:79:e4:e3:64:4c:27:64:57:db:5e:1f:82:63:
                    0c:2a:f5:fd:9f:ad:5e:cd:4f:00:c0:ce:34:5d:a6:
                    8a:35:0d:2f:ff:33:67:11:30:03:9b:8d:04:f7:c0:
                    40:67:60:84:17:af:1c:42:1d:ca:a7:ba:33:3c:5a:
                    b6:c0:e4:88:15:86:09:a3:8d:f3:d4:fe:31:a4:f0:
                    3a:5a:6a:78:4c:42:0c:12:23:6a:c6:ee:f5:5a:cf:
                    c8:34:92:9f:4f:60:4b:b0:29:8a:f0:81:df:ab:d3:
                    e9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:64:37:97:06:43:B2:02:CB:DC:73:9F:AB:28:02:8E:81:B4:50:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9484b5b3-dc5f-3c66-bfad-b09256e8edf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:c4:1e:58:5b:5e:f1:8e:35:8e:0c:ec:b2:2b:7e:14:5a:06:
         cf:49:88:0a:3f:16:aa:20:21:f4:b5:c4:4c:e3:b0:1d:97:8c:
         a8:1b:61:f2:8a:b0:31:58:b7:80:5b:10:9e:f2:aa:3a:6b:28:
         4c:ef:68:af:5a:89:5d:9b:2c:fe:ec:4d:04:06:90:77:01:02:
         39:a7:11:6a:dc:99:ce:f2:7a:6d:9b:f6:26:f0:4f:1b:38:3f:
         43:25:37:c2:07:0b:85:c5:fb:19:f7:c9:dd:3c:2e:e5:30:64:
         90:14:53:9f:7f:08:b3:21:c7:5f:fd:5e:f8:08:4e:e0:b9:04:
         3f:1a:53:76:aa:7c:02:8b:21:c6:42:8f:de:0b:25:48:08:78:
         7b:34:ec:9d:90:44:4c:1b:4e:e0:c7:3b:ed:19:d7:15:d8:2b:
         74:6d:29:2c:dc:5f:24:9e:1d:6d:e8:ff:09:9e:42:e0:53:60:
         cc:ba:2e:28:64:e3:3a:a6:00:72:5a:2d:18:c5:6f:ba:b7:65:
         25:8a:b6:26:f4:d6:05:da:9b:2d:0f:a3:fe:31:2a:23:21:82:
         be:6e:97:7d:fd:e6:8d:84:e5:5f:0c:d2:f8:64:cb:53:6e:08:
         2e:25:17:c4:8d:24:d7:ff:26:63:31:a3:38:b2:fd:c8:45:94:
         1d:31:28:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:05:34 2025 by rpki-client