Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a7118b9a-b083-31a6-b642-a5a26910db4e.roa
File:                     a7118b9a-b083-31a6-b642-a5a26910db4e.roa (raw, json)
Hash identifier:          4XmHiZdJyKNXhwvs96lUwN+DIx7G7I/wUT3yGhiLdF4=
Subject key identifier:   C6:50:69:8B:91:11:A5:CD:3B:AE:F2:76:36:21:9B:BC:7D:86:E7:A6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C12050EC82376FFAC9F00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a7118b9a-b083-31a6-b642-a5a26910db4e.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        162.72.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:12:05:0e:c8:23:76:ff:ac:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=88bc6405-4e5e-4583-a4f6-ac9c82fe9836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c0:dc:92:5c:6e:53:74:b3:8b:ba:1e:83:6b:
                    43:ce:98:29:3a:5e:40:7b:78:be:95:e4:df:68:e9:
                    db:aa:34:7d:fd:2f:21:89:19:35:51:c8:d2:19:e2:
                    df:6b:bb:98:7a:60:06:59:6b:a0:42:b5:0d:6e:89:
                    80:a0:35:4c:c2:0e:f5:74:81:80:c6:37:94:71:01:
                    32:5e:55:27:5e:01:80:ee:20:3f:91:49:99:57:d0:
                    b8:0c:df:21:ab:a9:7e:82:06:77:c2:8e:79:22:26:
                    64:b6:b0:bb:22:81:51:89:f4:82:0c:dd:c7:22:ff:
                    6c:8d:22:1f:bc:7a:3a:73:02:f5:81:42:70:8c:77:
                    61:23:a7:73:0e:e7:ba:51:ee:ca:fa:2e:72:0d:d1:
                    ac:44:42:44:b3:d6:cc:6b:ad:9b:25:51:ca:62:ff:
                    48:1e:b6:1a:d8:09:a5:14:6c:35:5c:5c:12:9f:fa:
                    5d:06:fd:94:12:32:8b:bc:d7:e1:ce:e7:29:0a:d5:
                    00:f9:ad:b2:de:2c:5c:45:35:f2:69:7f:2c:52:37:
                    84:2e:fe:7f:51:8c:65:c7:1b:a6:af:93:c4:f0:be:
                    f4:c6:ba:7e:1e:76:5d:f1:0a:69:d2:24:c8:95:98:
                    18:cf:35:f9:b8:76:e3:9c:f5:6d:ed:55:fe:53:f9:
                    21:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:50:69:8B:91:11:A5:CD:3B:AE:F2:76:36:21:9B:BC:7D:86:E7:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a7118b9a-b083-31a6-b642-a5a26910db4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:95:df:bc:7c:15:46:33:e6:77:1f:8f:72:b5:00:89:4e:ea:
         cf:29:db:f9:da:2d:1c:6c:39:45:58:98:a3:d8:49:fd:71:c3:
         36:4d:b0:06:54:6f:a8:8b:0c:fc:23:d3:49:78:76:92:81:bf:
         fc:24:a5:de:19:80:c9:0f:56:60:96:0e:39:56:90:5c:56:36:
         c0:08:5c:09:e9:1b:ad:af:df:50:50:aa:11:6c:41:63:31:be:
         5a:57:90:c4:db:15:c9:2e:24:23:41:27:cf:d9:a1:be:3a:1d:
         95:f8:0e:33:f4:ba:26:df:53:d1:a0:78:5e:5d:8b:8f:20:94:
         b6:70:27:ed:20:6d:c6:76:b1:a8:47:ac:06:eb:90:c2:f5:10:
         53:0b:cc:06:ec:33:73:85:24:6d:f8:4b:74:dd:86:5c:84:6e:
         4f:74:76:8d:13:8c:cc:a8:36:0b:19:1f:1c:2a:86:ef:0b:bc:
         83:c6:34:ff:2f:66:41:f4:c7:6a:20:c2:bc:84:8a:fc:42:46:
         94:86:d3:c4:8c:cd:a4:33:0e:03:fd:ba:12:a1:88:47:18:a4:
         2d:f6:c1:2d:48:91:56:5b:8f:e2:ac:df:11:34:47:bf:47:61:
         4a:bd:2d:50:88:4f:64:b4:69:b2:8c:36:17:d5:ca:04:49:98:
         43:e0:78:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnBIFDsgjdv+snwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
ODhiYzY0MDUtNGU1ZS00NTgzLWE0ZjYtYWM5YzgyZmU5ODM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcDcklxuU3Szi7oeg2tDzpgpOl5Ae3i+leTf
aOnbqjR9/S8hiRk1UcjSGeLfa7uYemAGWWugQrUNbomAoDVMwg71dIGAxjeUcQEy
XlUnXgGA7iA/kUmZV9C4DN8hq6l+ggZ3wo55IiZktrC7IoFRifSCDN3HIv9sjSIf
vHo6cwL1gUJwjHdhI6dzDue6Ue7K+i5yDdGsREJEs9bMa62bJVHKYv9IHrYa2Aml
FGw1XFwSn/pdBv2UEjKLvNfhzucpCtUA+a2y3ixcRTXyaX8sUjeELv5/UYxlxxum
r5PE8L70xrp+HnZd8Qpp0iTIlZgYzzX5uHbjnPVt7VX+U/kh8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMZQaYuREaXNO67ydjYhm7x9huemMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTcxMThiOWEtYjA4My0z
MWE2LWI2NDItYTVhMjY5MTBkYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokikMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJyV37x8FUYz5ncfj3K1AIlO6s8p2/naLRxsOUVYmKPYSf1xwzZNsAZU
b6iLDPwj00l4dpKBv/wkpd4ZgMkPVmCWDjlWkFxWNsAIXAnpG62v31BQqhFsQWMx
vlpXkMTbFckuJCNBJ8/Zob46HZX4DjP0uibfU9GgeF5di48glLZwJ+0gbcZ2sahH
rAbrkML1EFMLzAbsM3OFJG34S3TdhlyEbk90do0TjMyoNgsZHxwqhu8LvIPGNP8v
ZkH0x2ogwryEivxCRpSG08SMzaQzDgP9uhKhiEcYpC32wS1IkVZbj+Ks3xE0R79H
YUq9LVCIT2S0abKMNhfVygRJmEPgeA0=
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:25:30 2026 by rpki-client