Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f462840-048f-3a53-965c-3c39a086805d.roa
File:                     5f462840-048f-3a53-965c-3c39a086805d.roa (raw, json)
Hash identifier:          vIDVwy6wMHDqXefmf36j/xU5KyR+y0DBgCuPFlEI5x8=
Subject key identifier:   D7:EE:38:8C:05:A8:7E:42:B0:CB:6B:49:56:08:DE:23:B7:1A:55:80
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F4983B48F41C193F105A220A0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f462840-048f-3a53-965c-3c39a086805d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        162.72.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:b4:8f:41:c1:93:f1:05:a2:20:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=14268f7b-0cec-481b-a742-f19f63abd2d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9a:0c:63:b8:4c:b9:62:bf:f9:d3:07:7c:d9:
                    87:50:00:ff:2f:49:00:4b:07:43:24:a3:ab:a7:d5:
                    86:c4:0e:76:fd:76:6d:98:e5:1a:54:69:b7:25:54:
                    e6:1d:74:1b:91:72:1a:c4:c0:54:a1:eb:85:c5:d4:
                    79:c7:40:c9:fd:fd:7c:6a:d3:70:b1:d7:9d:06:f9:
                    bc:84:14:dc:19:b9:e2:38:12:0e:4c:30:93:c1:20:
                    aa:d5:8a:9c:39:41:64:a5:fe:04:e9:e6:4c:fb:31:
                    1a:e8:44:e4:b2:6b:51:04:d0:6b:e8:7f:06:28:6d:
                    57:e6:7a:16:aa:06:e1:20:1d:0e:9a:46:51:87:f6:
                    97:63:c4:1e:96:0b:09:33:94:2e:53:94:3c:09:18:
                    35:63:58:c1:dd:11:16:51:6b:e1:d2:7d:79:ad:31:
                    e2:49:52:32:d6:22:b2:7a:10:f3:06:fa:99:ae:32:
                    78:41:85:34:1c:3c:da:94:a2:8f:17:e5:31:6a:71:
                    e4:a4:da:11:c2:9f:44:f5:38:62:e4:71:64:4c:a8:
                    a9:72:8d:c3:8a:84:29:d4:7d:46:89:21:2a:ca:d1:
                    9b:f9:8b:32:b7:78:d3:3c:5e:45:60:c5:9d:d6:cd:
                    95:d4:c1:a5:82:45:b0:6d:96:1f:a9:2a:26:13:9f:
                    d6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EE:38:8C:05:A8:7E:42:B0:CB:6B:49:56:08:DE:23:B7:1A:55:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f462840-048f-3a53-965c-3c39a086805d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:82:c6:5b:54:8e:e3:a5:c2:8c:d5:c8:9e:b3:fa:3e:f2:41:
         4f:4e:b1:62:76:58:4d:63:95:60:59:14:a4:aa:99:b3:95:a8:
         33:16:e3:13:ba:b7:ab:d8:f1:9b:e7:6d:2b:17:91:e8:b0:05:
         ef:46:4a:33:8d:4a:59:dc:a5:37:c7:53:99:3f:7e:82:0d:d0:
         2c:2f:1c:af:69:5f:93:f0:95:ab:79:db:ca:9b:64:52:25:e2:
         c1:c5:3d:7f:9f:60:4d:e7:33:d1:4d:ae:df:66:a4:a6:37:3f:
         dc:6c:de:d5:9d:24:24:a5:39:19:8d:30:77:e4:41:47:4d:28:
         b4:8c:3c:8d:0a:46:02:d3:81:4c:28:26:2c:d6:58:8b:9a:fd:
         cd:c2:58:ef:07:33:63:26:35:d6:4a:78:65:22:a5:f2:db:85:
         10:3a:d7:1f:f7:95:47:4d:fd:39:9a:bf:4e:95:90:51:c6:c1:
         53:bb:f3:56:ef:eb:90:39:82:b4:c0:46:5b:e1:72:4e:76:77:
         f5:ba:c5:c9:8c:a6:aa:da:01:62:9f:30:37:f7:76:f8:ff:f3:
         eb:c7:2b:22:fd:ec:2e:20:83:a8:6b:95:a0:ae:c5:2c:0d:87:
         02:a5:9c:02:f7:1d:24:62:fd:62:e1:56:2c:1e:a4:da:0e:04:
         94:5e:1f:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg7SPQcGT8QWiIKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MTQyNjhmN2ItMGNlYy00ODFiLWE3NDItZjE5ZjYzYWJkMmQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5oMY7hMuWK/+dMHfNmHUAD/L0kASwdDJKOr
p9WGxA52/XZtmOUaVGm3JVTmHXQbkXIaxMBUoeuFxdR5x0DJ/f18atNwsdedBvm8
hBTcGbniOBIOTDCTwSCq1YqcOUFkpf4E6eZM+zEa6ETksmtRBNBr6H8GKG1X5noW
qgbhIB0OmkZRh/aXY8QelgsJM5QuU5Q8CRg1Y1jB3REWUWvh0n15rTHiSVIy1iKy
ehDzBvqZrjJ4QYU0HDzalKKPF+UxanHkpNoRwp9E9Thi5HFkTKipco3DioQp1H1G
iSEqytGb+Ysyt3jTPF5FYMWd1s2V1MGlgkWwbZYfqSomE5/W3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNfuOIwFqH5CsMtrSVYI3iO3GlWAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWY0NjI4NDAtMDQ4Zi0z
YTUzLTk2NWMtM2MzOWEwODY4MDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokgMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAISCxltUjuOlwozVyJ6z+j7yQU9OsWJ2WE1jlWBZFKSqmbOVqDMW4xO6
t6vY8ZvnbSsXkeiwBe9GSjONSlncpTfHU5k/foIN0CwvHK9pX5Pwlat528qbZFIl
4sHFPX+fYE3nM9FNrt9mpKY3P9xs3tWdJCSlORmNMHfkQUdNKLSMPI0KRgLTgUwo
JizWWIua/c3CWO8HM2MmNdZKeGUipfLbhRA61x/3lUdN/Tmav06VkFHGwVO781bv
65A5grTARlvhck52d/W6xcmMpqraAWKfMDf3dvj/8+vHKyL97C4gg6hrlaCuxSwN
hwKlnAL3HSRi/WLhViwepNoOBJReHw4=
-----END CERTIFICATE-----
Generated at Sat Oct 10 06:11:14 2026 by rpki-client