Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69a9d065-ea1a-3e4d-9644-aaaa60bf0497.roa
File:                     69a9d065-ea1a-3e4d-9644-aaaa60bf0497.roa (raw, json)
Hash identifier:          U5os1bGXpCbUO6yIVXqr/7hkLqMxyLh4chhW7IKhbSE=
Subject key identifier:   D0:25:C9:98:D2:91:89:1E:8B:43:C3:DA:B3:2E:43:4B:D5:97:8A:94
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B8FB7EA335F00A80AD400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69a9d065-ea1a-3e4d-9644-aaaa60bf0497.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        162.72.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:8f:b7:ea:33:5f:00:a8:0a:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=17c12242-a5b9-4273-93eb-ce27142301bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:41:0b:24:95:9f:33:0e:ef:ec:9e:f5:e0:c7:
                    53:b6:f4:b7:f9:72:ae:ae:4a:0c:8d:d4:07:fc:e7:
                    7c:02:04:8e:0d:d3:a9:2d:95:af:cb:96:ef:7b:38:
                    8c:41:e8:50:87:0c:49:22:97:17:81:a1:e8:7e:4b:
                    d6:da:89:d3:d1:8d:56:f7:73:59:ec:7d:83:d4:5a:
                    2c:f9:28:54:61:0e:85:66:e8:da:76:55:84:a1:40:
                    93:a4:f6:60:96:fc:cd:14:6b:ff:91:6c:1a:bd:07:
                    24:66:48:4a:70:46:b5:59:86:6b:ba:48:55:40:24:
                    94:71:7d:29:70:2f:c9:f0:b4:c9:25:55:e7:b2:02:
                    b4:ab:37:29:fb:cc:e4:b0:df:66:7d:56:4f:bd:5a:
                    5e:0d:49:d2:4e:8d:9d:45:b7:5a:19:59:83:4b:09:
                    ad:8e:b9:f8:86:62:1f:2d:87:60:47:15:ac:6e:c5:
                    b7:c3:6b:9e:f3:fd:3e:f8:55:0c:1c:7e:55:fa:96:
                    2a:ea:69:96:aa:ec:07:30:79:fd:a4:47:c5:6e:41:
                    06:59:23:0b:a5:e6:2f:da:6a:6d:d3:91:a5:07:e3:
                    75:b7:9a:86:66:01:04:a4:c1:a7:ef:69:4c:ca:e9:
                    a6:8b:50:ce:a3:b4:88:8b:40:1a:46:fe:c2:0b:74:
                    63:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:25:C9:98:D2:91:89:1E:8B:43:C3:DA:B3:2E:43:4B:D5:97:8A:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69a9d065-ea1a-3e4d-9644-aaaa60bf0497.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:bd:61:52:e7:d3:3e:aa:27:70:70:5e:d7:a2:96:dd:96:ab:
         68:85:df:ed:e7:3a:f8:3f:0f:db:30:03:bb:5e:33:43:e5:16:
         d6:4d:9c:00:14:ec:7a:ad:70:cf:e7:27:59:77:9e:51:6b:2c:
         0d:33:4b:d8:b0:72:b7:61:9e:c6:a2:4c:2f:2d:81:53:0b:a2:
         69:79:03:03:1b:ba:a5:88:62:10:2e:a3:f5:cb:54:85:af:55:
         25:72:eb:42:c4:31:37:3d:76:9e:c7:9a:e4:61:21:13:fc:d8:
         60:c7:63:c2:43:e6:60:4a:12:2c:02:e8:e7:30:0c:ed:fd:b3:
         79:50:20:6e:88:71:0b:fa:f7:f3:ab:c1:61:7e:d4:a5:64:99:
         f5:4e:14:b5:1e:a8:b9:27:fb:4b:13:25:91:3f:cd:67:48:8c:
         da:d4:4a:f4:75:cd:e3:60:27:d3:c0:a8:ad:4f:12:ca:44:9e:
         7a:4d:e2:05:34:eb:95:fc:32:ab:a4:42:5f:46:e2:f0:b7:8b:
         75:4e:c5:39:96:bf:26:22:dd:d8:10:f1:af:c1:17:a6:9c:0a:
         84:91:f5:4f:65:83:ea:08:30:3c:a8:7b:8c:10:6f:b5:72:e9:
         37:f9:cd:51:4b:b1:b4:be:da:56:18:15:20:cb:f7:76:8b:d0:
         e7:9c:17:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:24:00 2026 by rpki-client