Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c175c71f-55c0-3ad5-bf40-78e096aaf7de.roa
File:                     c175c71f-55c0-3ad5-bf40-78e096aaf7de.roa (raw, json)
Hash identifier:          KHEfykproCFP7In1VCgYF1Rb7iUT/eMs6PG0tz8vltc=
Subject key identifier:   65:AF:7F:1E:C2:BC:72:A3:EE:90:FC:DF:E4:47:8F:A0:50:F0:57:69
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0A6A8692458F443796740
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c175c71f-55c0-3ad5-bf40-78e096aaf7de.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        162.72.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:a6:a8:69:24:58:f4:43:79:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=8cf25e89-e457-4bfc-88cb-299b9e3f1e8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e6:a5:56:4b:53:94:09:be:75:1f:1b:cf:7c:
                    2f:14:1e:96:72:61:be:e6:56:f2:b0:e3:f7:1e:ff:
                    76:93:e9:f7:46:32:71:6b:fc:e1:22:23:0a:1f:cf:
                    e0:2d:b7:f2:ca:66:3b:34:24:71:f2:f9:3e:5c:fe:
                    52:a2:a4:79:2b:98:d6:05:37:4c:b9:7c:47:06:c1:
                    9f:25:d3:69:78:41:68:23:f2:b5:b1:3d:41:36:55:
                    16:78:f7:38:f1:fd:2d:13:9f:3e:46:88:e6:79:2c:
                    d8:2b:e4:a5:f3:85:b0:58:42:fc:3f:f7:49:16:16:
                    6e:76:61:13:d0:d0:10:f0:3b:8a:2d:11:97:51:39:
                    e4:b6:9e:de:44:90:cf:7a:e2:d2:0d:64:c7:b7:db:
                    cd:2b:d1:f5:f1:9d:a9:f0:b4:ac:0d:24:d3:57:57:
                    3d:5b:da:49:fc:dd:f0:fd:61:d6:ea:f4:f9:a4:a7:
                    dc:3a:c8:f9:fb:10:b1:6f:b2:ad:06:ea:58:46:35:
                    66:ac:d9:11:56:62:7c:8b:b1:d5:4b:05:45:a7:49:
                    c3:d0:8f:6b:a8:14:b1:28:ab:a0:c2:ae:62:18:49:
                    42:16:e7:81:65:64:46:a5:f9:78:71:52:9f:39:ff:
                    88:60:47:34:c6:72:e4:52:04:6c:b3:84:f0:b2:cc:
                    d8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AF:7F:1E:C2:BC:72:A3:EE:90:FC:DF:E4:47:8F:A0:50:F0:57:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c175c71f-55c0-3ad5-bf40-78e096aaf7de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:92:b2:43:78:d1:c0:80:c7:7e:57:74:b9:fe:88:d8:8c:3f:
         ef:f8:5c:b8:38:5a:b7:68:7c:cc:f3:c3:68:0d:cc:f2:56:e2:
         d1:90:41:61:eb:85:f5:ab:5e:cd:23:81:cc:11:9f:77:1d:55:
         f5:08:1e:d2:c7:3e:e8:a6:ea:8b:22:b5:50:20:ad:26:e2:2f:
         3f:bf:7e:d2:61:05:01:d4:b3:49:ad:48:cc:b4:39:7b:72:24:
         3b:43:b5:3e:de:37:21:04:c2:a5:19:4f:75:da:67:63:63:0c:
         d2:51:39:f1:f4:05:f3:ef:13:d7:9d:15:54:90:02:3a:bb:58:
         a4:1f:03:f7:11:5d:d8:87:ff:6a:7b:d4:26:b6:af:06:54:52:
         ed:fd:06:a0:f1:95:50:23:30:39:43:46:ab:ce:04:61:66:17:
         05:5a:a9:14:cd:9a:98:30:ce:4d:cd:7f:c3:0c:aa:2f:78:7c:
         90:a0:2a:2a:f9:c6:86:56:8f:1b:b2:c1:d5:cd:72:82:b0:66:
         39:18:42:e2:14:1b:4b:05:69:d4:e1:58:a9:34:4d:68:1d:23:
         3b:f3:88:24:0e:43:96:b5:ab:ee:14:b9:ef:2f:55:62:33:29:
         08:0c:03:71:78:3f:ed:81:cb:0e:53:bc:e4:4a:90:d7:55:86:
         21:ec:e3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:52:31 2026 by rpki-client