Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3d650202-3348-363f-b277-79a12d0f59cc.roa
File:                     3d650202-3348-363f-b277-79a12d0f59cc.roa (raw, json)
Hash identifier:          vuO1ZW86aA3ScifiRKufLCpdWYWDBq/k+BwMRCVfoFs=
Subject key identifier:   FE:0B:1D:E9:25:FA:19:0A:1A:BA:00:E6:2A:D8:77:DF:10:3D:14:8A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F497B7C59941C9E8AE4ABA780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3d650202-3348-363f-b277-79a12d0f59cc.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        162.72.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7b:7c:59:94:1c:9e:8a:e4:ab:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=04c1d6be-5d16-4685-93d8-67647d65e537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:08:a4:28:79:bb:89:e9:de:45:09:07:d4:5a:
                    6b:d7:b5:5e:b9:9b:ed:1a:af:b6:f2:5c:73:6c:e2:
                    5e:ee:3d:ce:9b:cf:8e:61:e6:2d:20:4f:ad:23:71:
                    8a:99:7d:73:f5:c7:eb:51:cf:74:9d:71:9b:6b:99:
                    c9:40:9c:f9:47:77:18:cf:68:04:85:f3:f3:d9:71:
                    27:4e:ba:22:8d:ca:46:f0:18:0f:82:17:d6:3c:7b:
                    75:00:1c:a6:a4:07:d9:e4:3d:22:26:79:f6:87:9d:
                    0c:70:a8:c8:ec:51:83:24:55:e7:44:77:1f:b2:42:
                    a7:8a:7d:4e:6b:2f:90:28:e5:d0:04:63:66:12:d1:
                    a7:6b:73:46:e1:ca:b7:fc:91:f2:e7:aa:7c:00:4d:
                    51:46:c7:6c:c5:21:83:06:c9:2c:2a:af:cf:6e:ba:
                    e2:b6:0d:b1:60:9c:69:3f:80:50:86:62:04:1b:13:
                    69:19:01:47:57:f5:94:d9:9f:93:ad:d7:32:17:ed:
                    1a:73:4b:17:7e:62:63:e4:20:e8:2c:18:9e:29:b7:
                    d5:a5:7a:ee:75:05:3e:6f:85:ca:4f:19:5a:58:33:
                    37:41:70:3f:20:e4:f8:56:c4:ab:b0:ef:0b:1e:9b:
                    2c:4a:12:9d:7d:7b:7d:33:1e:4c:12:22:55:e0:dd:
                    bf:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:0B:1D:E9:25:FA:19:0A:1A:BA:00:E6:2A:D8:77:DF:10:3D:14:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3d650202-3348-363f-b277-79a12d0f59cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:57:06:b0:84:0f:79:01:0c:e4:c7:94:1d:bf:01:06:7c:26:
         4a:71:a1:97:0d:f3:89:9e:47:fa:66:cb:46:40:e6:24:8d:34:
         b8:cc:fd:89:df:8e:40:7b:d7:bc:cf:cc:2c:fa:bd:db:c5:31:
         03:e5:ba:aa:12:31:5c:3c:b4:88:36:10:2f:d6:59:ec:e7:cb:
         3e:0e:2d:9c:b2:1d:f8:8b:b0:b7:41:52:55:50:96:ca:80:de:
         7c:5d:67:d2:75:20:70:dc:43:6b:da:65:a4:a2:80:77:93:7f:
         0c:4d:01:47:fd:70:fc:ff:9c:e7:e1:c5:4a:63:88:39:d5:16:
         9f:81:ce:41:86:a2:eb:57:ca:3d:48:fb:9f:dc:e4:87:de:86:
         13:e9:89:95:d9:5c:19:4e:d1:57:e3:38:69:2c:0f:df:78:c5:
         be:2a:cc:ce:b8:6a:a7:30:81:3b:d5:bc:7b:c8:78:30:02:08:
         9a:0e:b0:07:0b:32:9a:ed:71:32:4d:a0:66:b8:7e:de:6c:67:
         cb:c6:8f:8d:ba:be:1f:73:d7:ea:fb:bf:2e:20:57:ec:20:b1:
         03:fe:03:7e:3f:04:47:67:6a:4d:45:be:73:96:e6:98:9d:ac:
         83:ec:59:31:da:cb:4c:52:8f:11:f2:71:77:4a:8a:58:1e:b4:
         69:56:60:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:29:45 2026 by rpki-client