Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d275bd98-1101-3a7d-a0ca-ff0661e885fd.roa
File:                     d275bd98-1101-3a7d-a0ca-ff0661e885fd.roa (raw, json)
Hash identifier:          1Y1BdTUxL18FQPRpRX3JthLNxOIOIUyACQ8wrHTmDFU=
Subject key identifier:   28:68:1D:6A:A3:AE:60:F0:44:1B:83:6B:E7:4D:40:C8:0B:9E:0D:75
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24DFF4ABB6CCD7CB1867A4B0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d275bd98-1101-3a7d-a0ca-ff0661e885fd.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        162.72.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:f4:ab:b6:cc:d7:cb:18:67:a4:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=dfb5d2ed-ac52-456c-8600-ceebf3e7f891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:03:f3:73:58:7e:30:67:a0:6a:54:f9:01:e6:
                    d5:54:c0:bc:be:b6:b3:c8:1c:c8:43:74:f6:1a:02:
                    5b:f2:c6:0b:d5:71:d0:e7:44:b8:3b:a9:26:3d:0b:
                    3f:de:d9:c1:65:e8:01:34:1b:3c:d3:1a:63:91:04:
                    48:0d:b6:36:f7:1f:4c:cc:e2:92:fa:c7:17:53:99:
                    03:2d:2e:4f:d0:1c:8d:7c:c3:e3:2d:8c:5e:71:66:
                    18:9c:71:a2:e5:74:bb:e7:a9:ed:dc:8e:94:eb:f7:
                    b1:a5:19:75:c1:4a:ff:23:be:4a:86:08:78:bd:9a:
                    4f:f2:4a:dd:7e:7e:9d:45:ef:4f:9e:57:71:a3:bc:
                    33:35:10:17:6b:1a:11:62:4f:d7:c1:2b:5e:26:fe:
                    29:2e:9b:66:20:e7:8e:b0:04:14:90:c0:7c:db:33:
                    22:c8:14:84:6d:44:87:b1:10:54:89:08:8c:eb:d0:
                    ed:82:42:c6:24:c0:53:c3:6e:ee:36:1e:03:0c:d1:
                    fc:f4:ea:ac:7e:0b:c8:e1:0c:f1:97:96:3a:64:09:
                    7e:ae:e6:82:d1:f9:d7:cb:a1:81:1d:f8:aa:ed:14:
                    96:dc:60:85:a9:77:8a:5e:81:9c:cd:9a:fd:23:37:
                    12:54:71:55:8d:d2:ac:cc:6e:b7:5e:97:7e:8e:6c:
                    36:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:68:1D:6A:A3:AE:60:F0:44:1B:83:6B:E7:4D:40:C8:0B:9E:0D:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d275bd98-1101-3a7d-a0ca-ff0661e885fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:cf:d9:e0:97:34:df:9c:07:c1:97:2d:5c:cf:5c:56:49:ce:
         d3:91:07:2f:5d:0b:37:28:06:d2:43:ad:d7:8d:99:a5:cb:84:
         01:1d:55:e0:69:9d:f7:94:7a:8e:c3:fc:8f:2e:d8:65:24:58:
         d7:cb:e1:b5:b8:e1:7f:5f:50:a9:19:10:83:97:00:c0:24:18:
         e6:a2:27:77:2b:54:95:01:fd:ee:11:be:58:e7:c3:3b:37:31:
         83:61:cc:41:50:10:29:e9:17:29:5e:24:92:b4:0c:b0:db:dd:
         d8:c0:80:0e:2a:cb:e6:3e:8f:0b:dc:e7:d8:c8:b0:c8:f1:92:
         8c:b7:ec:cf:ec:03:c1:c7:f2:6d:3f:ad:e2:51:f3:dc:c0:74:
         a9:94:1c:08:50:ee:fc:ca:05:ee:e7:23:81:94:b8:2f:dd:c4:
         24:70:55:3d:00:76:b2:0c:ff:85:b7:db:50:2d:26:e7:84:ff:
         50:0f:50:25:b9:26:d1:3a:5f:31:5c:69:7c:57:d1:8f:5f:15:
         35:20:e8:c6:9c:ae:3e:d9:a7:94:ce:63:30:1c:45:db:da:43:
         3c:20:ee:e0:23:11:b9:62:be:c9:48:28:45:8a:ab:53:4a:e0:
         ef:66:80:1a:d7:65:ee:23:94:20:a1:2e:db:2a:b5:db:a5:5d:
         39:83:d9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:54:44 2026 by rpki-client