Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2e369edd-b7fe-36d8-beb9-882787be76a5.roa
File:                     2e369edd-b7fe-36d8-beb9-882787be76a5.roa (raw, json)
Hash identifier:          MyjNE8zLL0dNOZHEDi2wtPdkymBqEAWMxJgjaNxlMAk=
Subject key identifier:   47:65:F5:6B:92:1D:3F:92:77:83:9A:40:A5:50:C6:AB:10:B2:90:99
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDD3CA3E79D3D8938FEE00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2e369edd-b7fe-36d8-beb9-882787be76a5.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        162.72.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:d3:ca:3e:79:d3:d8:93:8f:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=c11663d4-87f0-43cf-b44e-eecb979b7421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6a:3a:96:56:60:eb:c4:83:3e:3a:2e:bc:88:
                    59:7b:da:21:7d:2f:7a:24:6b:b9:0b:5c:cd:d6:5f:
                    b7:3b:25:e6:c9:2f:72:20:5d:c7:35:20:6c:70:da:
                    6d:38:61:16:ab:5f:59:6f:5a:35:79:c0:ce:0a:94:
                    02:8f:5d:20:76:bf:e3:e0:ef:ef:50:bf:cb:c2:de:
                    66:c2:b5:96:f1:e8:cc:50:d1:80:10:1c:e5:2f:38:
                    56:e7:42:3e:1b:c5:81:41:5b:01:e8:0c:aa:63:89:
                    19:cc:2e:ef:7f:04:26:d8:0d:8b:df:64:ea:3e:20:
                    bd:c9:eb:48:70:dc:19:fe:c9:b4:9d:1b:2d:e9:aa:
                    72:e8:9b:29:06:ae:1c:1a:25:94:6f:d8:ca:36:e8:
                    87:64:3c:18:59:b5:04:84:a0:30:4b:a0:af:c7:48:
                    84:f3:4f:42:3d:1f:79:4b:70:08:36:9d:5b:2c:53:
                    be:65:76:cb:41:35:86:c7:ae:9b:bd:90:17:46:9e:
                    28:46:2e:9f:1b:9a:75:f0:6a:2c:db:17:ff:ac:50:
                    2c:ef:e3:e5:a7:4c:79:2e:72:d7:dc:ae:00:e7:f1:
                    f2:b0:a0:2d:89:83:41:2e:7e:7f:48:fd:d2:7f:15:
                    9d:97:b1:19:24:32:91:78:1e:ce:ae:ac:6f:ab:4c:
                    19:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:65:F5:6B:92:1D:3F:92:77:83:9A:40:A5:50:C6:AB:10:B2:90:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2e369edd-b7fe-36d8-beb9-882787be76a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:f2:91:3e:16:dc:0c:a0:4c:65:17:28:12:f4:ee:3f:cd:ce:
         c7:6f:a9:87:08:47:23:d9:ec:34:a6:d4:74:39:70:04:aa:84:
         0a:3f:c2:3d:61:e3:e7:c8:80:89:ad:90:ce:b3:2f:17:39:e5:
         7c:e1:f4:6e:82:38:0f:fd:fc:74:d5:82:1d:32:b3:b6:d1:2a:
         32:d8:d7:2a:27:d4:78:cc:7b:31:3c:76:b3:41:52:62:fa:3a:
         f5:45:f3:30:43:78:cb:18:a0:5d:cf:b3:ff:57:3b:ce:10:37:
         8a:e0:3a:3b:50:54:5e:e3:88:ac:71:fe:58:e2:a1:54:d6:16:
         f6:c5:77:eb:5d:36:f5:d0:58:df:1b:ca:fa:05:62:42:dd:e4:
         ac:01:74:a1:2a:f1:75:d5:7a:64:2c:af:70:2c:12:dd:64:95:
         e0:c6:9d:90:12:1b:31:89:e2:2c:04:8e:e2:51:8b:41:99:fa:
         5e:88:f0:2a:7c:53:74:6d:c8:5a:56:a0:57:01:3a:1d:4c:5b:
         ad:25:f0:81:33:e3:74:70:e3:51:95:b3:62:f4:1a:73:72:77:
         ba:19:72:81:04:0d:49:7d:b3:67:16:3f:0e:71:6a:1b:5c:8a:
         26:99:44:26:2c:e8:a5:f5:4c:2f:d4:84:ba:3c:eb:f9:ef:b4:
         66:c4:dd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:43:21 2025 by rpki-client