Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/606425c0-53e1-3247-a621-4872ab78837d.roa
File:                     606425c0-53e1-3247-a621-4872ab78837d.roa (raw, json)
Hash identifier:          JO6bdtM/24n+UBorA/QJHBrKjHMYGjUT1To5ZZQHrIY=
Subject key identifier:   E8:D4:FD:AE:92:EB:23:5C:B1:77:AC:B9:34:58:EC:16:44:AA:D9:53
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0AAA1648ED7A884A4C2C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/606425c0-53e1-3247-a621-4872ab78837d.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        162.72.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:aa:a1:64:8e:d7:a8:84:a4:c2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=58358588-19f1-42b1-9f0e-db6605152a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5a:3b:53:4e:24:22:92:26:54:ce:53:37:e9:
                    b1:7e:c6:f0:c9:f8:19:55:f9:00:ae:dd:51:d6:41:
                    32:62:28:27:ee:fe:2b:8c:12:69:9b:8d:3d:67:29:
                    da:30:8f:cd:07:c2:c8:aa:02:56:7a:7f:bf:13:68:
                    c9:92:46:7d:c4:62:c1:e3:d3:67:26:84:e1:31:e3:
                    fe:03:26:72:6e:57:05:f6:78:2b:75:69:6b:85:a5:
                    77:db:a5:ac:47:a0:87:ca:b1:f3:5e:35:81:dd:87:
                    5e:54:64:7e:56:41:d7:d2:8a:60:10:dd:7d:8c:6f:
                    ac:69:c6:90:87:38:28:47:73:28:57:81:8e:e9:77:
                    35:ef:01:0e:1d:4f:5d:f0:b7:3e:d5:77:2d:3b:cc:
                    14:72:68:75:f6:1e:3a:89:ce:1e:eb:02:b9:ed:df:
                    c3:88:dd:dd:6e:36:d2:92:e6:87:ed:5d:69:12:78:
                    27:c0:eb:e7:9e:c5:df:3c:03:b3:f5:80:8d:7d:ec:
                    64:5d:b5:5f:a9:c2:40:3b:b2:61:fc:cd:14:3e:35:
                    6b:48:5a:e6:e9:bc:5d:c7:6c:78:81:35:2e:4a:8e:
                    d8:71:a4:e9:fd:62:fd:5b:0f:53:c8:a6:d4:c0:73:
                    34:48:8f:f0:f0:4c:d9:bd:40:ea:25:89:10:72:fb:
                    cb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D4:FD:AE:92:EB:23:5C:B1:77:AC:B9:34:58:EC:16:44:AA:D9:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/606425c0-53e1-3247-a621-4872ab78837d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:b0:18:d8:66:09:d0:22:9a:0b:a2:54:17:c2:89:0e:69:c7:
         e2:cd:a7:53:2a:cf:4d:c6:2c:f8:d2:6a:aa:2f:67:96:03:2e:
         63:59:c5:87:49:5c:3c:cb:bf:ad:1a:98:de:9f:9f:2b:0b:38:
         6e:66:77:0b:79:ea:6c:99:69:04:d3:a7:4b:4e:f9:df:22:c5:
         04:98:ce:a3:7e:55:3f:34:7d:ce:86:f4:a8:b9:83:49:66:e1:
         b6:dd:d1:f2:ca:1e:ec:54:89:b0:4f:23:ec:d3:95:41:d5:6f:
         ed:84:61:79:ce:81:ae:d0:f7:99:30:a4:69:24:62:75:29:67:
         00:93:1c:86:a4:1b:58:0e:c6:e6:a4:a9:c7:5b:b3:33:ab:60:
         c3:9d:4f:a8:dc:05:2e:3a:d5:8d:7c:1c:3d:08:b8:5e:96:f8:
         0d:6e:8b:d8:13:64:ac:7e:de:fd:7d:b5:40:2f:68:21:c3:78:
         f4:a1:ae:b0:02:cc:29:be:85:a5:b6:2d:92:bc:40:1f:64:bf:
         1d:e8:a7:5e:93:cc:7d:f5:9b:70:ad:6c:20:39:59:f5:b6:1b:
         6c:85:72:3d:60:e2:0f:93:2f:d1:02:5d:9a:61:e0:75:58:d4:
         c6:75:44:94:9b:e7:23:17:a0:ad:1c:ce:06:45:c8:40:51:d8:
         a1:f7:df:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:53:07 2026 by rpki-client