Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/30915cbd-858f-3c08-9ed3-5fdb6f1e3a1f.roa
File:                     30915cbd-858f-3c08-9ed3-5fdb6f1e3a1f.roa (raw, json)
Hash identifier:          w/lHn1a1QOh5Y5I1sk6zeVNGem35j+DjqlMBKTkFYFs=
Subject key identifier:   9D:1B:A5:B0:DB:A0:3E:8E:FB:76:20:9C:3C:E9:16:53:CC:92:99:15
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F4983CC7112B198A2F41C2DE0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/30915cbd-858f-3c08-9ed3-5fdb6f1e3a1f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        162.72.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:cc:71:12:b1:98:a2:f4:1c:2d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9f4eb8e2-3f6c-46a4-80d3-a370f4c103c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:52:d1:02:ff:6d:6c:d0:ff:40:38:2e:f9:38:
                    c0:cd:1c:ad:69:3b:90:a4:df:4b:88:53:cb:56:d3:
                    9f:8e:df:5b:23:04:44:9a:2d:2a:20:81:af:db:b3:
                    8d:22:40:10:99:b0:25:ad:84:b3:9a:6a:20:85:8e:
                    a3:ef:97:1a:d0:49:d9:d4:6f:61:2b:3b:04:72:a2:
                    27:f2:a3:04:b6:4a:2f:b2:a6:be:11:5c:5d:a3:11:
                    d2:b6:67:95:18:47:f6:3e:90:ba:c4:c6:4f:fe:35:
                    9d:f8:a9:d7:db:ea:d9:30:f7:ef:1d:f4:49:69:3d:
                    fa:86:3b:8a:d7:d7:f4:09:1d:47:32:12:c5:d7:ad:
                    41:58:c6:21:47:c2:3a:09:b8:e8:eb:3d:d0:45:e1:
                    5e:60:55:2a:a4:36:54:9c:1a:a6:da:e3:a8:22:2a:
                    78:97:44:4e:58:27:69:b3:03:4f:80:d4:a1:7d:05:
                    12:5f:dc:79:1d:12:e6:bd:61:af:eb:94:5d:ea:a9:
                    27:76:62:04:91:61:84:2a:c2:2a:d6:68:41:e5:8d:
                    5b:a5:cf:ef:8c:93:02:84:18:dc:89:25:d1:cc:b8:
                    38:2c:66:e2:8d:78:a4:6e:4f:6d:cb:9d:59:b1:b0:
                    b9:7a:2f:d7:60:f1:2a:d9:bc:4e:0f:db:51:59:4a:
                    b3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1B:A5:B0:DB:A0:3E:8E:FB:76:20:9C:3C:E9:16:53:CC:92:99:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/30915cbd-858f-3c08-9ed3-5fdb6f1e3a1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:a1:4c:0b:da:a8:79:57:22:ad:13:16:62:24:19:ba:45:c2:
         27:7b:ee:62:ba:52:a9:65:b2:54:83:21:90:38:db:11:8d:00:
         ec:02:f2:79:c4:de:ef:85:15:ce:d1:a1:31:4f:15:9a:e3:2f:
         c3:d0:5a:46:c7:33:be:f7:d6:e4:eb:08:5f:0c:c3:64:57:55:
         38:3e:e3:ed:87:f1:88:30:fa:99:12:fe:24:3d:ad:e2:ef:97:
         27:32:36:8d:ce:82:fd:b1:ec:5d:1b:32:1c:92:50:04:20:a8:
         f4:27:c5:5a:70:5a:29:0b:82:ad:23:54:fd:6c:30:18:9e:c4:
         bd:ca:d2:78:e6:63:6f:56:38:c6:78:aa:3c:ed:21:35:5c:b3:
         8a:e5:d9:e0:76:a8:e3:1a:fa:70:23:85:5a:f1:5a:24:d8:5e:
         53:23:ed:cf:08:6d:b7:bf:a0:be:52:f5:12:f8:70:e3:e6:45:
         e2:ee:8d:61:72:ec:45:f4:73:bf:55:a4:20:9a:b5:a9:d7:ff:
         ba:71:98:2c:ff:d8:bb:70:96:b3:9c:84:56:bd:bf:29:f0:0c:
         5b:ff:f0:03:f8:e0:5f:2d:7f:9b:65:2c:ba:fc:11:f2:75:d0:
         a4:8c:57:df:cb:1d:0e:46:f1:0d:cc:fd:66:cd:db:62:e3:dc:
         b2:c2:f4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:51:22 2026 by rpki-client