Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f473791c-2386-3aa5-86b3-1766c8d9c5a5.roa
File:                     f473791c-2386-3aa5-86b3-1766c8d9c5a5.roa (raw, json)
Hash identifier:          nLNUjUedbBF1k2gyn0t6KAj4iNS4+55r5sq77LXmwU0=
Subject key identifier:   F5:6F:AD:D4:A5:C0:3A:2B:E0:89:AF:81:DF:F5:49:60:08:29:35:93
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B90F62BD5A381A5CEAF80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f473791c-2386-3aa5-86b3-1766c8d9c5a5.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        162.72.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:90:f6:2b:d5:a3:81:a5:ce:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=8e1fde86-1094-4416-becb-117b38221cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:50:c6:f1:97:82:d3:ef:87:6c:4e:e3:94:73:
                    c2:05:b6:58:7d:fe:1a:ac:81:ad:64:ed:12:bb:3f:
                    3e:8c:45:4e:56:ee:55:ed:0d:3c:07:33:66:ee:a2:
                    cb:68:11:b7:f9:a9:f9:9e:83:68:bf:b2:63:7a:26:
                    ca:06:25:55:47:c7:85:17:51:c2:f8:94:2e:1a:5e:
                    dd:d2:08:3d:6d:5c:54:7d:19:4c:6b:0f:ce:fa:8c:
                    1c:ed:30:13:2f:86:5d:73:f5:c7:0d:05:64:2c:ad:
                    9a:33:e0:dd:25:89:5c:38:fc:73:fa:f5:8b:3d:4d:
                    a5:24:c0:fc:76:0d:eb:64:76:10:d8:dc:e7:22:55:
                    b6:44:dd:d9:27:16:e5:4e:eb:21:35:4e:a5:a1:c9:
                    c5:74:75:fd:e9:b8:f9:1a:c1:4e:b3:f1:16:4a:e2:
                    6b:81:47:e6:96:98:2f:80:f3:a7:27:14:dc:38:1d:
                    61:52:36:2e:af:88:7a:05:c6:ce:4a:04:b0:5c:5d:
                    31:f5:70:cf:bc:be:2e:44:ac:a5:82:94:74:63:38:
                    86:78:57:da:16:c2:36:6c:2b:a1:46:aa:a1:16:e7:
                    a7:4f:97:50:8b:86:0e:6e:04:e3:d2:b9:a2:bc:c9:
                    ce:dc:f7:6d:eb:c0:91:fc:5f:53:5b:e6:bd:ed:34:
                    fa:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6F:AD:D4:A5:C0:3A:2B:E0:89:AF:81:DF:F5:49:60:08:29:35:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f473791c-2386-3aa5-86b3-1766c8d9c5a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:aa:02:62:b0:5f:5a:16:e3:2d:5e:96:7d:a4:8f:82:60:f5:
         95:31:2c:22:a9:bc:d7:8b:76:5b:f1:c3:e9:16:15:d6:59:66:
         b1:99:f5:60:a9:9f:62:6d:67:a6:34:08:5f:0e:85:2c:f9:13:
         61:10:cd:73:e8:d7:37:f0:3f:79:e1:9e:26:42:8b:34:d7:94:
         17:51:fa:2e:c0:0f:48:26:17:bd:36:e3:9c:82:a9:f4:2a:ef:
         7f:d7:4f:23:fc:45:d4:4c:08:ac:a7:4f:75:dd:de:44:4d:35:
         d6:b0:2e:ec:ff:ba:e4:b3:ce:37:da:83:64:83:43:59:2e:c6:
         18:0c:66:03:0b:59:1f:cc:fd:41:5f:ee:22:35:88:bf:db:09:
         d2:e3:4a:18:71:4c:09:94:3e:83:e2:07:d0:c7:5d:d6:df:6b:
         c0:f8:e9:41:22:d7:b9:75:0e:11:46:7c:1a:76:9a:81:92:98:
         1f:fd:41:1b:ef:94:56:c5:b8:35:29:95:82:9e:b0:b0:a1:e2:
         59:b3:80:e3:f1:61:67:81:b1:22:23:b4:48:6f:be:c0:cf:ab:
         ee:60:d5:64:ae:e8:86:f0:31:55:da:2c:1c:4c:8c:10:15:92:
         ad:6b:9e:58:05:28:a1:9b:75:ab:b4:a6:41:24:ba:cb:5c:b7:
         08:5b:3e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:23:04 2026 by rpki-client