Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6f272479-a6bb-3976-9640-897faa49f8da.roa
File:                     6f272479-a6bb-3976-9640-897faa49f8da.roa (raw, json)
Hash identifier:          DHrODo9Br2WCpxguk9LGd5dQRCK63gNyLiNopmmd3hI=
Subject key identifier:   58:63:E5:D4:55:DE:FF:53:2E:AD:3E:19:EC:EE:AF:AD:A0:1D:C8:FB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDCD80C51FFF20BC486300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6f272479-a6bb-3976-9640-897faa49f8da.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        162.72.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:cd:80:c5:1f:ff:20:bc:48:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=f7a0e91b-2d5d-4d24-b9e9-7544f0356453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4a:f5:39:1f:20:7b:cc:3a:4f:e1:ce:27:96:
                    a6:a1:9b:42:e4:e3:c0:57:41:04:9b:8b:18:fe:7f:
                    86:db:fc:45:46:75:ef:3d:75:cc:86:60:db:74:72:
                    a2:84:99:30:97:a1:91:74:4b:79:4e:ef:8f:fe:5e:
                    02:fa:61:cd:4b:84:4b:ac:ce:46:a2:36:de:53:0d:
                    37:e8:6a:a4:83:cb:88:67:a5:67:b9:c3:7f:a5:76:
                    42:b6:25:fc:19:58:fe:1b:90:f0:10:0e:20:8c:b2:
                    84:86:23:67:81:56:18:d6:60:bb:1a:36:05:7b:04:
                    84:84:61:41:87:b8:aa:91:ca:f9:26:e6:d1:ee:ae:
                    91:a8:9d:49:a5:78:f5:ad:e1:bd:33:07:b4:74:8f:
                    19:73:8d:15:cd:73:d4:08:30:8d:ad:8d:8f:21:1e:
                    da:ca:0d:95:21:5f:72:47:4f:98:11:59:70:ba:7f:
                    98:3d:46:77:e3:5e:41:c7:ee:7f:70:74:9b:61:79:
                    32:cf:1e:2b:b2:4d:3a:7e:d7:45:1b:e6:ca:57:fe:
                    36:94:2c:91:25:08:02:cb:cc:c2:7a:77:ea:07:8a:
                    55:1e:c9:cb:c2:bf:f2:11:e6:9c:42:13:f2:fe:de:
                    41:af:ef:ea:ab:8e:21:a4:e8:80:81:1d:ec:81:17:
                    28:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:63:E5:D4:55:DE:FF:53:2E:AD:3E:19:EC:EE:AF:AD:A0:1D:C8:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6f272479-a6bb-3976-9640-897faa49f8da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:8f:ee:78:38:66:ea:d9:fb:28:7d:bd:d9:16:ac:d6:7c:50:
         8d:6e:b7:b1:32:d7:27:90:6d:6c:1f:ef:f0:88:49:e2:9b:9f:
         c8:c4:9f:3f:64:10:6e:72:a7:6d:bd:83:f2:b6:16:a9:68:e2:
         10:bb:93:2a:af:27:24:52:06:36:db:78:b6:76:03:1a:09:54:
         65:c1:a8:bd:3b:83:d6:32:80:05:69:3f:30:ab:a1:78:43:43:
         4b:ee:86:7b:51:1e:5b:bd:4e:d0:22:26:6c:06:5f:c4:de:7d:
         8a:c8:44:99:a0:f3:87:99:09:23:bc:af:4c:b9:75:55:59:03:
         e9:6b:f7:56:92:9d:14:67:d8:61:b8:45:e6:06:c7:81:9d:d5:
         14:76:8a:d9:b9:d0:78:c3:98:31:65:9a:21:f4:d2:be:91:24:
         fe:e7:0b:2e:80:c0:5c:5e:20:f4:37:8b:b7:3c:2b:b8:2d:5c:
         f7:f6:a6:29:03:a2:5b:86:03:d6:fc:1a:af:88:f6:69:c8:dd:
         24:fb:0d:d0:73:a7:23:db:9c:cb:09:ae:d7:79:a5:5c:44:2f:
         2d:09:01:91:a1:50:5a:9a:e5:83:48:ce:34:0d:47:a2:e6:2b:
         e1:d5:ea:1b:84:cb:a8:a8:70:d4:46:06:28:c0:13:ba:60:1f:
         9b:45:6a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:53:19 2025 by rpki-client