Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/616b5961-4fa7-3ff3-9b4f-57f474a11841.roa
File:                     616b5961-4fa7-3ff3-9b4f-57f474a11841.roa (raw, json)
Hash identifier:          84Y9RHj8LkLbBRlJHSqxT5YhwhRjmVpBmo1Ek8qBmiw=
Subject key identifier:   85:4E:93:E2:D6:21:04:38:1B:76:9F:64:6C:8C:75:CB:29:96:87:33
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79E00BA1C533B4128A86400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/616b5961-4fa7-3ff3-9b4f-57f474a11841.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        162.72.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:00:ba:1c:53:3b:41:28:a8:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=23a005fa-7a10-418b-a63d-ced4ac6b4401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4d:ba:7a:1b:f1:dd:e1:3f:6e:5a:16:ee:ea:
                    ee:cb:62:fb:b0:bf:5b:dd:74:41:f0:6a:5c:09:f6:
                    9d:c4:6a:71:6c:9c:3c:81:72:e3:8f:77:c8:a9:ef:
                    8e:41:86:59:10:ae:89:6a:d0:b3:bc:ae:16:54:32:
                    ed:ab:56:32:77:90:7e:b0:fb:16:91:f6:d4:30:db:
                    29:b2:c0:36:7c:46:e5:4e:4a:cd:51:64:7a:9a:c9:
                    6c:e4:37:fb:b5:de:4c:9e:ab:ca:14:63:9d:7f:b2:
                    7e:e0:f8:86:0d:8f:de:f1:7a:a2:38:a1:bf:ce:b4:
                    8d:b4:6e:85:be:11:68:b7:b1:b1:d6:11:b3:69:63:
                    10:e3:1d:43:0d:5d:cf:4b:b3:fe:16:68:2a:06:fd:
                    d1:f0:4d:67:03:a0:ce:9a:9e:81:18:16:06:bb:db:
                    58:ed:3f:55:f7:bc:1a:a8:75:75:3b:5c:dd:73:8f:
                    d2:4f:14:8d:6a:2a:6a:4e:6e:38:cb:fa:d1:11:22:
                    7d:63:9b:5e:1c:83:9e:a5:b1:71:a5:63:7b:f7:e5:
                    14:a8:26:bb:9c:2d:7d:b0:78:9e:43:fe:55:2b:b2:
                    4a:76:6c:0a:67:a4:50:87:5a:0f:0f:cd:10:b1:d0:
                    7c:4f:c2:1f:57:d2:53:72:cb:2f:8e:a5:6f:9e:bf:
                    11:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4E:93:E2:D6:21:04:38:1B:76:9F:64:6C:8C:75:CB:29:96:87:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/616b5961-4fa7-3ff3-9b4f-57f474a11841.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:42:06:44:d1:01:1f:8a:ec:ad:48:b9:ae:31:fc:f0:99:c8:
         56:e1:40:c9:18:1b:05:32:7c:fd:ed:5f:10:f1:4b:e7:38:b3:
         f3:cd:94:11:7e:18:fc:cd:71:2a:4e:c9:1e:75:95:4f:1b:c0:
         aa:19:17:bd:fb:1b:95:27:01:95:ec:cb:01:f2:ec:42:27:3c:
         54:24:ec:96:db:22:2b:9b:0b:50:44:d5:f9:c5:49:8f:5c:07:
         b3:cd:0b:1a:29:30:5e:e4:fe:e1:da:3c:de:0f:e4:c6:ca:01:
         13:f1:23:91:54:4e:e7:be:32:e3:c8:cc:70:05:8f:f9:a6:6c:
         67:95:7d:5b:65:b4:58:40:73:f7:cd:cd:7b:b8:fb:ce:d2:52:
         b9:12:d8:ca:b0:c9:c6:d3:33:b3:29:ae:68:0c:3c:3d:46:b0:
         2a:99:b3:77:3a:c8:21:4e:16:04:2a:4f:4d:cc:e7:f9:5a:8b:
         e3:04:19:49:94:3e:cb:0d:15:ad:02:2b:90:6f:12:8f:a5:70:
         95:ef:a3:75:0a:1c:5b:8d:62:c2:a6:3c:e6:2e:67:42:79:6b:
         55:70:0a:5b:7e:40:96:07:b1:6a:8f:c0:42:20:4d:31:cb:95:
         dd:3a:d7:3b:be:4d:0e:58:c2:91:32:7d:8c:63:be:15:42:aa:
         f6:84:db:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:43:41 2026 by rpki-client