Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/072bdc1b-1cd3-37ce-820c-a7ba9ab68789.roa
File:                     072bdc1b-1cd3-37ce-820c-a7ba9ab68789.roa (raw, json)
Hash identifier:          IIS/yBLZkmdTl9rPofbVM3L9tovcHM3bCtdllimxgrk=
Subject key identifier:   D8:D7:A9:6A:61:57:5D:D9:7E:FE:1F:15:5F:C6:D6:BF:8E:DA:39:C7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDD4420F548D9630E2D980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/072bdc1b-1cd3-37ce-820c-a7ba9ab68789.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        162.72.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:d4:42:0f:54:8d:96:30:e2:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=abb538ee-df7b-4f5b-a695-b2b8fe0aeab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:30:b0:5b:08:c2:56:7b:a9:cf:10:c8:c8:03:
                    98:20:8b:49:fe:f4:73:b2:eb:63:96:ec:67:e4:f9:
                    e2:83:93:a2:de:b6:b2:8d:91:4b:58:f0:e7:ed:45:
                    78:00:0f:6d:19:d8:01:c3:51:9e:df:9f:7e:5d:6c:
                    e8:0c:e3:e7:62:c8:ff:53:5b:9e:9a:c6:d6:98:95:
                    d7:32:31:b7:91:f1:54:23:a7:36:c2:52:06:b2:07:
                    e3:49:4c:4e:b7:f7:5a:ee:49:5b:66:6f:29:a1:39:
                    7f:85:31:d5:37:ef:82:f8:03:d9:f5:f4:5e:42:10:
                    a9:7d:b7:ff:c2:ed:91:a6:de:60:df:e3:80:ca:77:
                    8a:e6:8f:c0:ad:33:62:31:ae:ea:30:25:25:d8:60:
                    5d:d3:37:f9:cc:bb:a5:72:4f:af:fd:7f:14:8e:c8:
                    aa:43:5a:d8:65:9a:78:7e:2a:d9:6c:37:41:2f:ad:
                    49:e1:cf:5b:ed:3c:16:e7:74:48:1c:75:90:f1:08:
                    6e:78:52:0b:16:d7:1a:ab:82:b2:42:79:b0:28:89:
                    d9:ee:93:f6:20:01:79:3d:c6:bd:90:a5:23:4e:02:
                    46:ae:ef:3a:5d:a2:30:e6:bd:30:e2:52:c6:ed:62:
                    c7:07:91:63:9c:32:26:63:bc:30:d1:01:6b:d2:38:
                    0a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D7:A9:6A:61:57:5D:D9:7E:FE:1F:15:5F:C6:D6:BF:8E:DA:39:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/072bdc1b-1cd3-37ce-820c-a7ba9ab68789.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:92:08:e9:67:24:7a:9c:7f:f5:8f:5e:b9:c7:85:64:a3:1e:
         b7:49:2a:05:37:a0:54:f9:d4:6b:ee:05:f6:37:8a:7a:14:c7:
         f3:c4:f6:ca:5f:7a:cc:ea:2a:08:03:2e:52:a9:f4:66:7e:e4:
         d1:22:41:f2:e0:a5:39:c8:6b:84:e3:0d:45:70:f9:55:38:f0:
         d4:e4:dc:72:af:32:ee:ca:a3:ad:22:ca:6b:01:47:7f:a0:e5:
         51:79:ef:8c:05:f4:60:0b:79:f7:25:e8:89:bb:70:15:f6:3c:
         f9:d7:bf:a5:ce:17:b8:38:13:0f:8d:5b:03:7b:92:75:74:df:
         44:0a:8a:76:65:1f:e5:ef:0e:63:b2:e7:b0:a9:ab:37:98:b9:
         80:02:9d:86:2a:a6:32:eb:f4:f2:af:1a:43:bc:75:8d:d7:64:
         a5:bb:a2:ce:14:75:bf:f8:22:ad:e2:8d:aa:26:e1:27:2e:23:
         b1:f8:db:34:cb:23:50:71:be:03:6d:77:7c:1a:a3:02:1c:1a:
         a5:af:d9:e9:77:99:6d:41:24:7b:83:56:87:9e:ed:cb:43:de:
         f2:a7:a6:ee:f1:20:9c:b0:28:5b:9a:e9:82:4a:40:2c:ad:93:
         af:b7:d9:14:ad:de:9d:02:79:21:8d:5a:fa:01:e6:70:98:61:
         ac:a0:d7:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzdRCD1SNljDi2YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
YWJiNTM4ZWUtZGY3Yi00ZjViLWE2OTUtYjJiOGZlMGFlYWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljCwWwjCVnupzxDIyAOYIItJ/vRzsutjluxn
5Pnig5Oi3rayjZFLWPDn7UV4AA9tGdgBw1Ge359+XWzoDOPnYsj/U1uemsbWmJXX
MjG3kfFUI6c2wlIGsgfjSUxOt/da7klbZm8poTl/hTHVN++C+APZ9fReQhCpfbf/
wu2Rpt5g3+OAyneK5o/ArTNiMa7qMCUl2GBd0zf5zLulck+v/X8UjsiqQ1rYZZp4
firZbDdBL61J4c9b7TwW53RIHHWQ8QhueFILFtcaq4KyQnmwKInZ7pP2IAF5Pca9
kKUjTgJGru86XaIw5r0w4lLG7WLHB5FjnDImY7ww0QFr0jgK6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNjXqWphV13Zfv4fFV/G1r+O2jnHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDcyYmRjMWItMWNkMy0z
N2NlLTgyMGMtYTdiYTlhYjY4Nzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokj/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALeSCOlnJHqcf/WPXrnHhWSjHrdJKgU3oFT51GvuBfY3inoUx/PE9spf
eszqKggDLlKp9GZ+5NEiQfLgpTnIa4TjDUVw+VU48NTk3HKvMu7Ko60iymsBR3+g
5VF574wF9GALefcl6Im7cBX2PPnXv6XOF7g4Ew+NWwN7knV030QKinZlH+XvDmOy
57CpqzeYuYACnYYqpjLr9PKvGkO8dY3XZKW7os4Udb/4Iq3ijaom4ScuI7H42zTL
I1BxvgNtd3waowIcGqWv2el3mW1BJHuDVoee7ctD3vKnpu7xIJywKFua6YJKQCyt
k6+32RSt3p0CeSGNWvoB5nCYYayg17I=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:43:56 2025 by rpki-client