Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aaf57fb6-ab7d-3127-ac8d-c41a6010f479.roa
File:                     aaf57fb6-ab7d-3127-ac8d-c41a6010f479.roa (raw, json)
Hash identifier:          S/Q06Q2PukKL1/3ft3/JN4YQKBrLM+FyTWZiFtEtTtQ=
Subject key identifier:   1B:84:95:CE:DF:50:E6:14:93:2B:C9:51:8F:16:5C:64:35:4D:60:80
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCD53B30EBB5C52A911780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aaf57fb6-ab7d-3127-ac8d-c41a6010f479.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        72.173.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:d5:3b:30:eb:b5:c5:2a:91:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=daffc73d-e637-4f81-8e1f-e73b34b3463d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c5:e3:8e:a8:19:1d:66:de:1d:b3:1e:2a:81:
                    8c:cc:c4:1a:cc:7a:21:c4:8e:be:71:3c:3c:0d:9b:
                    d4:8d:37:70:6f:19:45:c1:4c:57:0d:bb:ad:6e:a6:
                    c8:10:d8:fc:0d:a9:df:8b:3e:e1:ca:f5:3f:08:90:
                    09:51:b3:21:b7:7d:2d:1e:81:99:2b:58:21:b1:ce:
                    a1:40:95:03:18:99:a7:43:10:41:77:e4:6a:20:7b:
                    25:5d:43:88:07:00:1d:0d:6e:a1:2a:d8:95:94:7f:
                    69:e3:bc:c0:e9:7b:a8:6f:6f:23:08:36:3d:04:27:
                    00:3f:ff:f8:e7:97:d1:19:0b:f4:b6:78:36:bb:88:
                    95:0e:fc:58:ae:6f:89:1f:fa:88:e8:cf:af:a6:fd:
                    a5:27:c9:2c:d4:8f:63:6c:ca:96:2f:81:96:44:a1:
                    77:1a:0b:a1:45:0f:04:7c:41:ba:01:db:34:0f:6a:
                    77:1c:b2:66:60:06:85:94:e0:55:fe:be:79:16:ed:
                    10:4f:50:75:1c:d0:8e:7a:81:f7:ad:09:59:88:50:
                    23:85:b3:4f:80:38:4d:45:2a:3f:7c:7f:9e:5b:c8:
                    8a:75:71:de:c0:15:24:d3:43:21:d7:5c:df:3a:84:
                    cd:2d:1e:33:f6:27:46:41:4c:54:f3:54:7d:67:e2:
                    c6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:84:95:CE:DF:50:E6:14:93:2B:C9:51:8F:16:5C:64:35:4D:60:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aaf57fb6-ab7d-3127-ac8d-c41a6010f479.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:cf:3f:5e:ab:72:bf:d7:ab:70:28:d8:7d:97:a7:b3:ab:6c:
         ec:28:af:d8:70:1d:28:31:5c:c0:2c:e2:ac:d8:0e:3b:a2:55:
         46:f1:b3:e9:6c:e2:bf:d9:39:64:e9:5c:88:2c:0f:13:37:2a:
         10:6d:b8:07:e8:d8:5c:5b:91:25:2e:03:be:fc:67:0d:d5:d8:
         3d:10:db:32:ee:fd:d5:b9:01:4e:6e:cf:51:9e:d7:ec:c4:73:
         2c:ca:60:a0:6d:f5:e2:ce:80:47:92:60:d5:f2:13:11:6c:e4:
         30:51:ea:0b:27:16:74:d6:83:73:22:ef:91:10:ac:aa:10:5f:
         c6:bf:96:c8:f2:ff:78:9a:45:ee:39:fb:e7:15:ac:64:d2:f4:
         a8:dd:10:3b:3d:ac:97:a6:61:1b:34:03:6c:3f:9f:11:eb:6b:
         23:9c:97:b2:ff:f7:bf:a9:68:3b:ef:b8:36:ba:f6:9b:a8:12:
         0a:a0:a2:0b:b6:ae:4c:f6:6e:80:ba:41:fb:e8:59:ed:5d:fb:
         f2:98:19:dc:f4:94:39:13:77:78:be:63:dd:88:9d:ea:24:12:
         7d:90:53:78:70:5e:4b:b5:fe:d9:b2:ba:c8:b8:a3:c6:01:45:
         ae:c7:44:14:ae:f4:55:73:42:84:7f:31:d8:a7:5e:14:85:36:
         2f:4e:52:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:19:55 2025 by rpki-client