Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a075d9a6-0847-3cfe-a202-526dec364124.roa
File:                     a075d9a6-0847-3cfe-a202-526dec364124.roa (raw, json)
Hash identifier:          UCi2TYF7Wcj4s4ReJ3BOHzNdgA1SM6/hVmpG6p6BdDY=
Subject key identifier:   3D:20:3E:C0:68:E5:9A:03:A1:41:A3:1A:3D:78:67:F3:B7:BD:63:5F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD91D450F280F98BCD8948
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a075d9a6-0847-3cfe-a202-526dec364124.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        72.173.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:91:d4:50:f2:80:f9:8b:cd:89:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=271342fe-851c-4df7-8c5c-f921f1f0c184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:44:7e:5e:30:e5:37:ba:c7:ab:ee:45:30:82:
                    5a:42:0e:e8:c1:ea:80:09:95:8b:16:67:ee:ee:b7:
                    c0:ed:5e:4a:9d:54:c4:32:dc:94:be:0a:31:57:9c:
                    08:45:3c:99:1b:d0:0b:d7:bf:88:7c:dc:58:dc:07:
                    e1:d8:29:c1:fa:e5:15:ae:41:50:8b:1b:33:02:68:
                    1c:c0:45:21:0e:d1:83:e2:2e:44:77:7e:91:5a:03:
                    a4:85:c5:e1:69:a6:ca:ac:70:8b:1a:83:5b:20:0a:
                    9f:69:7b:65:e9:31:a0:4d:3e:83:dc:48:22:db:5b:
                    aa:2f:fa:6f:2d:32:81:f7:27:dd:59:d2:5b:4d:35:
                    8b:95:8a:7c:e0:e8:a1:71:c0:76:dc:85:22:ac:3b:
                    89:06:cb:c8:42:9a:db:4c:29:e9:f5:a4:de:6c:3f:
                    8c:5d:ff:86:ac:c7:39:84:da:c6:b7:87:3b:19:31:
                    07:df:da:e4:d0:44:f0:78:60:16:be:c0:0b:13:36:
                    ad:01:6a:fa:b4:24:5e:91:b0:d8:b5:33:dd:d2:ae:
                    6f:37:94:5d:62:c8:55:04:11:59:57:e8:5e:aa:c6:
                    c9:23:4e:25:f2:e9:11:53:53:d5:2a:50:ca:17:8f:
                    7b:0d:56:a8:7c:a1:1a:e9:a1:ef:62:89:be:20:ce:
                    2c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:20:3E:C0:68:E5:9A:03:A1:41:A3:1A:3D:78:67:F3:B7:BD:63:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a075d9a6-0847-3cfe-a202-526dec364124.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:83:e7:4d:1a:b3:e0:cc:c8:a0:ee:01:18:5c:58:48:eb:68:
         2c:ac:aa:d2:2e:1d:2b:4f:e4:90:0d:b8:65:92:35:b3:d9:b1:
         46:aa:17:65:55:19:2b:7b:19:d0:fc:6d:15:81:52:9a:d7:54:
         d9:f5:24:b0:98:56:55:35:96:9d:20:4e:79:a2:14:6e:1b:33:
         7e:42:86:ea:b8:a1:86:5b:cc:11:5f:33:ed:7e:d5:fd:8c:60:
         69:88:35:83:67:ea:08:10:4d:c1:da:c1:69:76:e4:21:76:db:
         76:27:08:92:8c:2a:60:57:97:6f:19:b3:49:ce:db:8e:89:7a:
         f7:8e:09:93:3c:d5:fd:a4:80:4a:b5:aa:69:c1:00:14:c2:1c:
         ac:fa:2b:87:27:09:60:15:32:fa:66:3c:3b:90:fa:42:88:09:
         d5:bd:f4:66:89:c2:00:17:e3:13:70:a8:f3:0f:9d:61:dc:f6:
         56:9f:bd:3d:fb:ca:93:0a:95:23:62:9f:62:02:b4:2d:af:0e:
         c6:f6:a1:e3:e0:e2:39:56:bb:90:d9:df:fd:6f:c6:5e:20:73:
         d4:de:26:65:ac:75:80:4b:48:ba:5a:71:38:a0:c9:22:3f:33:
         9d:02:c0:8b:9b:da:59:5e:32:9f:c8:3a:73:35:d8:16:2a:8e:
         ef:29:48:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:05:57 2025 by rpki-client