Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/11384d96-66e6-3d83-a96c-01e7c209cd5f.roa
File:                     11384d96-66e6-3d83-a96c-01e7c209cd5f.roa (raw, json)
Hash identifier:          e7EwzBV10Rev/o+pObrgEjN+n5pX/GXTCIkuQTuebcc=
Subject key identifier:   FE:90:CA:FB:8F:5E:7B:B9:75:6E:6B:CC:DC:A8:D4:55:B2:F9:75:39
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F497B7C3D5C72C6DFD6B5BD80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/11384d96-66e6-3d83-a96c-01e7c209cd5f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        162.72.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7b:7c:3d:5c:72:c6:df:d6:b5:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=835c364d-46aa-40e6-8a49-c95ed13d48f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5a:51:0a:f2:05:80:98:a5:6a:41:df:5e:73:
                    04:be:49:06:f0:79:96:d5:79:75:90:e1:db:f1:98:
                    30:df:61:3f:5e:5e:9e:4d:72:1f:cf:f0:88:33:61:
                    c8:8e:34:01:34:15:3e:89:c8:c5:fa:ea:fc:dd:71:
                    10:80:50:3f:47:37:93:45:e7:88:f1:2d:5d:2e:2a:
                    5e:e0:1f:de:00:42:47:e4:09:05:18:85:f6:94:f4:
                    79:15:09:d8:02:db:f1:a1:d8:8e:11:92:ba:02:55:
                    d8:d2:e8:fb:8d:93:55:68:33:d6:a8:09:4b:e2:83:
                    a1:41:ab:e8:6b:01:d0:cd:86:d5:b2:db:4c:3b:0d:
                    3a:45:a4:b1:9a:07:23:b3:f0:9d:c5:6e:df:fb:63:
                    73:42:2b:1f:4d:4a:74:df:70:5e:3f:58:ed:95:08:
                    52:cd:79:30:e0:a5:b6:b0:42:c9:f6:fc:c5:cd:3d:
                    88:19:4c:f8:9d:19:b2:f9:f8:68:a1:53:53:0d:e8:
                    b3:dc:d5:a6:87:37:6c:0f:7f:ef:50:88:94:a0:0e:
                    d9:75:b9:0e:23:5b:71:cc:f5:d0:e0:f0:95:6a:76:
                    02:04:26:17:0e:b9:3d:9d:c9:0d:7a:eb:e3:4f:c0:
                    71:ed:39:c2:29:1d:6d:d4:b3:54:53:c5:26:c2:d1:
                    c0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:90:CA:FB:8F:5E:7B:B9:75:6E:6B:CC:DC:A8:D4:55:B2:F9:75:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/11384d96-66e6-3d83-a96c-01e7c209cd5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:ba:70:1e:75:a1:ac:69:50:f3:56:a3:25:b0:f2:6f:41:9c:
         f2:33:74:91:e0:a3:9d:19:ec:7b:0a:9f:a5:c6:bb:3f:10:a2:
         aa:de:b6:e5:52:6b:36:43:fc:d0:e7:b2:ce:4c:c2:d3:f1:74:
         ee:2c:1f:95:13:92:66:6c:34:92:af:f7:83:bb:f0:43:5c:c9:
         ef:cd:93:6c:bc:5d:bd:8f:b0:77:d0:8a:05:dd:c7:75:fc:0f:
         2a:0a:92:e7:9b:79:48:5e:5f:90:49:c8:3e:4e:67:09:6e:82:
         77:8a:c3:d7:51:13:7f:93:fc:7c:69:17:f1:f4:bf:a8:c8:b2:
         19:16:67:65:ab:17:dc:d7:15:7e:2d:7b:b8:99:a3:e6:39:b2:
         6c:9a:2a:53:24:bf:4e:e0:eb:cc:25:14:e4:10:5e:6e:08:13:
         0c:e1:96:e5:7a:cb:f4:48:1c:6b:77:70:3a:e1:e9:07:e4:91:
         2a:a3:ca:93:2e:d4:50:bb:ce:24:6f:52:4f:fe:c1:01:b4:fd:
         1c:d0:0d:45:f8:c4:63:95:9c:0e:f6:90:9b:95:67:88:e2:bb:
         08:0c:14:48:6f:5c:2f:c1:a9:cc:34:4f:fc:66:91:4a:7b:f0:
         b8:57:c2:dc:e0:49:51:34:c7:d5:80:69:81:ec:87:d6:93:0a:
         24:cb:29:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:53:15 2026 by rpki-client