Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f8bbffb5-df89-3498-a19c-90dc42702ded.roa
File:                     f8bbffb5-df89-3498-a19c-90dc42702ded.roa (raw, json)
Hash identifier:          +yrNjsaFC2GjfFJv5PmCjwZtCVv4kPHzeLJN194BYw4=
Subject key identifier:   C9:56:00:11:11:F4:FE:36:88:B3:30:71:BC:3A:EA:55:8D:35:C2:38
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD8F6D0F7B65087DCA6980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f8bbffb5-df89-3498-a19c-90dc42702ded.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        72.173.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:8f:6d:0f:7b:65:08:7d:ca:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=e99ff68a-c270-48a6-bc55-51eda4012b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e1:90:bd:2f:01:29:51:72:75:1b:92:7e:99:
                    ee:d6:01:b2:1d:b0:1f:39:c2:6e:6c:76:b8:7a:3a:
                    f6:39:f4:ac:0a:0e:a8:28:02:70:15:7c:0a:9d:52:
                    78:10:d1:c8:9f:85:8f:b2:86:01:b4:64:8f:88:3a:
                    c0:02:35:ce:10:25:1b:60:a8:cc:31:a9:24:11:d8:
                    6b:38:8a:86:72:f4:58:04:20:7a:fc:08:80:b1:3f:
                    7a:5b:71:33:28:ea:97:fd:85:80:79:81:4f:04:1a:
                    5c:3e:7e:3d:a6:0a:f7:fe:a6:de:b0:30:49:d8:8e:
                    36:66:ec:4f:6d:35:30:15:2e:b4:f5:dc:6e:1e:14:
                    d6:e1:2e:2b:01:02:73:4d:c6:66:96:f5:9d:3d:54:
                    0e:74:74:28:92:64:c4:b6:d7:21:9e:4d:65:0e:59:
                    e4:1f:87:b8:a0:a1:6f:f4:cd:40:b4:2e:0b:c1:80:
                    18:93:18:5a:09:29:c5:02:cb:db:93:7e:30:82:b6:
                    ac:c7:14:a1:02:63:33:2f:49:7d:aa:b1:07:61:89:
                    70:3d:9b:65:91:24:86:0d:d1:41:6c:de:7c:41:4b:
                    47:44:c2:6b:8a:8a:69:a1:02:37:19:9d:25:1e:7f:
                    9a:a6:35:39:8a:35:92:88:06:83:f9:a3:70:c5:bd:
                    d6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:56:00:11:11:F4:FE:36:88:B3:30:71:BC:3A:EA:55:8D:35:C2:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f8bbffb5-df89-3498-a19c-90dc42702ded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:0f:be:04:d7:f2:10:fa:f1:6f:29:57:1b:f9:82:9e:df:72:
         18:d6:ab:b7:77:c8:14:9a:d8:da:79:31:f0:5f:5a:2d:1a:4e:
         55:b2:75:85:b1:95:89:62:f9:6d:86:e7:64:9b:3c:af:bd:e2:
         c0:3b:3a:06:d8:d7:50:1d:4b:3f:99:93:c8:d2:ac:d2:dc:07:
         e8:23:57:5a:7d:28:37:c7:1e:03:cd:82:c3:aa:1a:b8:76:ea:
         fc:61:78:72:a2:5a:61:3b:98:05:8c:ea:e5:a1:a0:e4:bd:9c:
         2d:c5:a1:94:87:5d:99:b8:4f:5b:49:62:81:60:71:d4:51:60:
         d0:ef:f2:6b:89:59:a9:8c:ce:cf:70:0d:f2:f3:4e:7f:ca:1b:
         ba:48:38:1d:03:c6:4e:b1:55:60:b5:59:9c:ba:4c:16:7b:b6:
         41:d6:f5:61:4d:4f:a2:09:d4:3c:9a:28:9d:e5:0f:16:70:2b:
         e8:fb:81:65:d5:d3:8e:53:b3:89:a0:8b:02:38:78:a5:bb:b4:
         4b:c9:66:d5:54:ee:01:c1:8d:a4:c6:02:6c:42:4c:21:a9:99:
         fd:88:b2:07:42:da:5f:c5:ac:56:4a:0a:d6:05:d1:16:0e:9f:
         c6:86:c2:84:f4:1c:a7:ff:8e:5c:99:1e:74:56:c4:7d:9e:d8:
         07:8e:98:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzY9tD3tlCH3KaYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
ZTk5ZmY2OGEtYzI3MC00OGE2LWJjNTUtNTFlZGE0MDEyYjc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+GQvS8BKVFydRuSfpnu1gGyHbAfOcJubHa4
ejr2OfSsCg6oKAJwFXwKnVJ4ENHIn4WPsoYBtGSPiDrAAjXOECUbYKjMMakkEdhr
OIqGcvRYBCB6/AiAsT96W3EzKOqX/YWAeYFPBBpcPn49pgr3/qbesDBJ2I42ZuxP
bTUwFS609dxuHhTW4S4rAQJzTcZmlvWdPVQOdHQokmTEttchnk1lDlnkH4e4oKFv
9M1AtC4LwYAYkxhaCSnFAsvbk34wgrasxxShAmMzL0l9qrEHYYlwPZtlkSSGDdFB
bN58QUtHRMJrioppoQI3GZ0lHn+apjU5ijWSiAaD+aNwxb3WPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMlWABER9P42iLMwcbw66lWNNcI4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjhiYmZmYjUtZGY4OS0z
NDk4LWExOWMtOTBkYzQyNzAyZGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADwPvgTX8hD68W8pVxv5gp7fchjWq7d3yBSa2Np5MfBfWi0aTlWydYWx
lYli+W2G52SbPK+94sA7OgbY11AdSz+Zk8jSrNLcB+gjV1p9KDfHHgPNgsOqGrh2
6vxheHKiWmE7mAWM6uWhoOS9nC3FoZSHXZm4T1tJYoFgcdRRYNDv8muJWamMzs9w
DfLzTn/KG7pIOB0Dxk6xVWC1WZy6TBZ7tkHW9WFNT6IJ1DyaKJ3lDxZwK+j7gWXV
045Ts4mgiwI4eKW7tEvJZtVU7gHBjaTGAmxCTCGpmf2IsgdC2l/FrFZKCtYF0RYO
n8aGwoT0HKf/jlyZHnRWxH2e2AeOmEY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:27:22 2025 by rpki-client