Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f462840-048f-3a53-965c-3c39a086805d.roa
File:                     5f462840-048f-3a53-965c-3c39a086805d.roa (raw, json)
Hash identifier:          cuWHsvz7E47JErtxraoeku/ZMs4p5tlKn0yuH2a1zQE=
Subject key identifier:   79:42:5C:FA:74:6B:BB:E2:95:27:C8:4B:51:12:4F:DA:E6:98:AD:CA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0A3BA2460BBABB2919BC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f462840-048f-3a53-965c-3c39a086805d.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        162.72.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:a3:ba:24:60:bb:ab:b2:91:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=335b30b4-4173-4e3c-9aae-96c0c68b6179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0a:78:8b:13:c3:a0:8a:d7:54:fc:41:cc:95:
                    4b:a7:d0:01:2f:3a:e4:75:4f:14:91:ec:7a:ae:53:
                    ab:aa:4b:e3:e1:80:bc:8c:fc:4d:d0:7f:43:ae:bf:
                    92:d9:02:cb:b1:04:ae:35:2c:3f:66:7f:00:3e:5f:
                    c7:cc:cc:f1:4e:00:02:e0:bd:2e:bc:99:9c:d5:7f:
                    5e:7d:fe:06:a0:af:84:2e:6f:36:27:ff:1b:bb:48:
                    e2:0a:b5:7f:fd:ad:27:be:96:23:07:a4:7d:7c:27:
                    b1:e5:1c:4a:dd:1c:88:98:1e:54:a7:45:1d:fa:de:
                    7f:4f:61:9a:ce:82:c7:57:99:14:57:ef:61:7b:78:
                    93:c9:96:95:22:5e:e4:f2:84:9b:c4:0b:23:7d:c0:
                    b3:23:b1:cd:59:76:1e:ad:dd:f2:b5:e9:3f:23:7c:
                    51:6e:6e:5f:19:65:5c:ed:99:fe:33:c0:9b:72:e2:
                    6e:26:3f:f5:57:2f:29:cb:a7:97:77:14:ba:39:31:
                    14:90:73:86:bf:ca:aa:f1:b9:99:99:b7:f5:5e:ce:
                    5d:e0:7e:04:fb:53:4d:63:41:0b:5d:9d:45:b4:01:
                    ae:4e:85:4f:e6:d3:31:7b:f2:05:b2:5e:f4:e8:a3:
                    4f:d2:ec:dd:40:18:91:de:34:12:ee:0c:4f:85:38:
                    d2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:42:5C:FA:74:6B:BB:E2:95:27:C8:4B:51:12:4F:DA:E6:98:AD:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f462840-048f-3a53-965c-3c39a086805d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:fb:76:20:00:86:5d:bd:c3:14:36:5c:46:43:1e:70:0d:26:
         d9:6f:c4:e6:e2:3e:a8:59:f4:96:e2:2e:90:f3:5b:ff:f0:41:
         be:8f:fe:87:5c:66:1c:59:1b:8d:ad:37:fa:2a:2b:1b:e5:af:
         e8:16:cb:55:c9:b1:b1:2c:85:fc:08:07:c8:57:49:ce:77:2b:
         8c:65:b2:1f:eb:37:c2:21:3a:4b:25:0c:98:72:79:d1:be:c0:
         87:16:7e:09:f0:1d:94:1a:fe:d8:83:b8:0e:1f:eb:a4:e4:aa:
         86:09:7e:3b:55:7e:52:97:a7:f6:f4:5a:bc:57:01:ed:43:6f:
         bb:58:43:cc:a1:07:21:55:fd:5e:6f:7f:1b:aa:ec:26:76:ba:
         a9:44:e5:52:2e:0d:0c:7c:be:f7:01:5b:fb:cc:00:9d:0f:14:
         74:6e:b1:ed:c5:32:de:f5:1e:55:32:6c:ca:0f:9a:67:83:e7:
         a2:f8:a4:30:00:2a:11:92:4d:02:2f:2d:f8:a8:55:22:74:c1:
         2c:26:69:0b:cf:0c:49:7f:7f:de:3f:0a:18:26:e3:fb:ad:57:
         02:d5:fc:45:47:d7:d3:b2:33:96:90:35:9f:04:22:17:b9:04:
         52:b6:5e:fa:d3:73:08:b6:2b:74:62:fe:ca:a0:2c:81:cf:f4:
         db:b1:d7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:11:57 2026 by rpki-client