Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c175c71f-55c0-3ad5-bf40-78e096aaf7de.roa
File:                     c175c71f-55c0-3ad5-bf40-78e096aaf7de.roa (raw, json)
Hash identifier:          6eFKxXgY4bXOKl/L3w0uBWjTrBbTNyu91buSoPtY+uE=
Subject key identifier:   CA:66:D0:C0:59:75:A1:18:A3:90:F3:04:13:C3:99:CC:63:CE:02:CE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C0F54091EAEECAA72C580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c175c71f-55c0-3ad5-bf40-78e096aaf7de.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        162.72.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:0f:54:09:1e:ae:ec:aa:72:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=a9b610b5-e25d-4fe8-b6d7-7c0e9b599c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:16:a9:ec:4b:31:87:20:df:6b:7d:e5:07:fd:
                    89:58:22:57:ec:b1:79:93:1a:f3:df:c0:cf:40:c2:
                    cf:32:9f:fc:21:df:47:47:f8:35:27:47:15:d5:3a:
                    14:a7:70:1b:88:af:ea:4b:c1:b9:91:b7:f0:f2:83:
                    af:e8:d6:b3:80:9b:b7:f4:16:d2:d3:dd:0e:be:53:
                    38:d9:2b:31:dd:9b:29:e8:f5:3b:d5:c4:89:31:24:
                    6d:cd:be:e0:32:f5:f3:3c:57:23:03:80:27:a2:af:
                    01:14:72:28:de:20:02:bc:80:03:e1:5a:64:b5:7f:
                    72:33:3b:f0:b0:88:d0:f0:7a:99:18:49:2d:b3:b4:
                    c6:9c:11:54:99:e7:b3:84:76:61:1a:b7:d6:42:2c:
                    22:5a:1f:1d:53:01:db:50:33:de:f1:8e:a8:72:75:
                    8c:b9:0f:84:59:99:a4:25:07:13:69:de:1d:1e:26:
                    f8:08:41:27:29:33:b8:b0:ba:29:4f:b0:3c:cc:6d:
                    ed:1b:ed:66:ad:e1:80:c1:95:18:ed:80:d6:50:da:
                    5b:69:50:20:f2:42:1a:6c:3d:91:01:b7:96:7b:5c:
                    e2:2c:b5:bd:ce:d5:cc:36:04:34:c0:23:67:69:11:
                    ad:10:ee:53:36:87:b6:23:09:26:17:30:aa:e9:c9:
                    e8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:66:D0:C0:59:75:A1:18:A3:90:F3:04:13:C3:99:CC:63:CE:02:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c175c71f-55c0-3ad5-bf40-78e096aaf7de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:ec:90:08:e0:c8:18:fa:26:72:5d:1e:b5:29:d8:8e:80:9c:
         79:bd:56:0f:7a:1b:16:1b:b7:e1:6f:d9:ba:68:a9:01:b7:96:
         2d:bc:0e:e2:bc:71:11:e0:0b:89:5b:da:df:c2:18:e5:9b:35:
         5e:5b:1c:08:31:6b:31:dd:68:dd:25:40:28:3a:c0:b0:ac:b6:
         cb:57:c1:03:6d:42:f5:dd:9c:1d:71:14:0d:98:40:f3:aa:5e:
         74:c7:bf:19:da:c1:ff:52:b9:a3:59:7a:51:52:fc:a4:f9:33:
         79:4a:08:56:a4:cb:e7:9f:48:93:4f:07:a1:5e:48:76:8d:7d:
         94:1c:9f:e7:fe:64:fd:6e:7b:ac:64:af:f9:83:30:dd:69:32:
         43:4d:09:07:ff:9d:73:92:34:35:e6:fa:98:5f:57:fd:a6:c3:
         c0:74:e8:53:97:77:4a:9b:87:b9:96:c3:fb:9e:a5:08:df:29:
         52:cb:d7:86:90:31:95:64:7b:0e:8d:3e:89:77:a1:ea:34:22:
         31:9e:60:77:94:94:c1:f3:4d:bb:dc:d7:c6:d4:31:d7:58:47:
         1d:a3:64:7f:35:9e:ff:e7:13:d9:96:14:d7:5b:01:61:ad:54:
         39:f6:f8:6b:df:a5:05:cc:f4:ab:4e:fb:6a:d0:8c:57:97:ae:
         ee:80:1c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:24:29 2026 by rpki-client