Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76ade4c3-aecd-39e9-bf4a-819928a81695.roa
File:                     76ade4c3-aecd-39e9-bf4a-819928a81695.roa (raw, json)
Hash identifier:          7KJerJ6lM6mZZdflRLaVbC7gBPVlv8jTV+UDNE+6vkQ=
Subject key identifier:   1B:79:70:A1:0D:11:6E:CB:7A:F0:25:78:4E:B7:64:5A:FD:BA:53:12
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F4983C44D409AF9B0D2823780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76ade4c3-aecd-39e9-bf4a-819928a81695.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        162.72.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:c4:4d:40:9a:f9:b0:d2:82:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d23207fe-4bba-482a-bdc3-b42acb64afc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:67:3e:58:b6:e9:58:96:36:24:f7:08:f5:0b:
                    d6:e5:ea:15:38:31:83:b5:82:b4:89:07:fa:19:b9:
                    c5:d4:4b:a3:e7:1d:99:9a:52:ce:00:7e:5d:92:76:
                    3a:44:c4:d2:eb:e1:3b:88:48:58:db:67:0a:3d:ea:
                    ec:3a:34:72:5e:d5:c0:b2:d6:77:2f:43:ac:32:d4:
                    10:b6:e7:77:b7:d8:0a:24:65:38:d0:f7:1d:42:7b:
                    21:ae:a3:37:09:22:7f:2d:6e:68:9e:f1:75:de:fb:
                    c6:21:d2:ff:37:4c:a4:e8:2c:45:a9:c9:57:f0:89:
                    24:8c:5e:48:20:42:62:85:b0:bd:a4:94:8d:91:d8:
                    19:30:cb:95:02:f2:c0:23:52:42:18:fe:8a:ad:8d:
                    ef:27:ce:21:ab:b0:78:a0:a7:3e:37:e7:d3:c4:75:
                    e0:2b:0a:d9:dc:46:c1:c1:78:a1:36:70:8b:21:99:
                    2c:4a:4a:48:bc:10:98:37:95:8a:5c:04:22:44:40:
                    72:42:1b:45:92:ed:32:14:2b:e5:bf:ac:83:e4:e6:
                    06:55:25:82:49:92:33:eb:1c:d6:42:9e:3d:16:79:
                    18:f5:1f:b9:fd:21:de:71:f6:60:54:dd:57:38:4c:
                    e6:ba:a8:24:89:a1:ad:a5:98:b6:88:6f:70:a1:71:
                    a0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:79:70:A1:0D:11:6E:CB:7A:F0:25:78:4E:B7:64:5A:FD:BA:53:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76ade4c3-aecd-39e9-bf4a-819928a81695.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:f1:2d:00:0e:c0:80:e5:7c:97:b9:6d:36:d9:e0:49:2d:99:
         33:0e:87:ee:ff:83:a1:65:59:5f:fa:36:79:79:f8:f3:88:79:
         d0:af:3f:34:c3:6e:bd:98:9a:e6:b9:18:d2:c6:55:67:50:c2:
         89:f3:20:60:37:ad:ea:71:51:18:5f:de:dc:47:33:d3:6b:80:
         61:1a:5d:ea:b6:39:60:52:e4:f0:92:61:18:d6:79:2c:8b:00:
         3d:fa:b0:d0:4c:89:be:b2:14:b8:b6:ae:ee:32:5a:c3:69:f6:
         e4:0c:f1:2f:d2:73:fd:00:5c:9a:f7:47:68:79:77:a8:46:8c:
         99:c1:69:fc:5e:42:3a:ca:d3:78:13:cc:a0:e6:e9:af:68:25:
         d6:74:d7:4f:69:dc:71:34:83:58:00:ce:a0:6a:77:1a:f0:7f:
         e4:1a:62:3c:9a:29:23:04:b2:df:89:66:01:00:da:5d:ac:06:
         40:fc:6a:4f:aa:41:44:76:83:63:3d:0c:42:57:a4:82:08:66:
         c1:be:7a:a3:f3:4f:7b:d4:5b:33:f4:33:12:73:1d:8c:14:df:
         d8:43:ed:71:44:6b:52:f2:d4:32:ca:eb:97:75:84:71:d7:d1:
         ea:0d:f5:17:b4:2d:fb:d2:67:b1:35:e0:e1:38:49:76:47:ad:
         4d:13:6c:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg8RNQJr5sNKCN4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZDIzMjA3ZmUtNGJiYS00ODJhLWJkYzMtYjQyYWNiNjRhZmM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGc+WLbpWJY2JPcI9QvW5eoVODGDtYK0iQf6
GbnF1Euj5x2ZmlLOAH5dknY6RMTS6+E7iEhY22cKPersOjRyXtXAstZ3L0OsMtQQ
tud3t9gKJGU40PcdQnshrqM3CSJ/LW5onvF13vvGIdL/N0yk6CxFqclX8IkkjF5I
IEJihbC9pJSNkdgZMMuVAvLAI1JCGP6KrY3vJ84hq7B4oKc+N+fTxHXgKwrZ3EbB
wXihNnCLIZksSkpIvBCYN5WKXAQiREByQhtFku0yFCvlv6yD5OYGVSWCSZIz6xzW
Qp49FnkY9R+5/SHecfZgVN1XOEzmuqgkiaGtpZi2iG9woXGg/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBt5cKENEW7LevAleE63ZFr9ulMSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzZhZGU0YzMtYWVjZC0z
OWU5LWJmNGEtODE5OTI4YTgxNjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokiZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGjxLQAOwIDlfJe5bTbZ4EktmTMOh+7/g6FlWV/6Nnl5+POIedCvPzTD
br2Ymua5GNLGVWdQwonzIGA3repxURhf3txHM9NrgGEaXeq2OWBS5PCSYRjWeSyL
AD36sNBMib6yFLi2ru4yWsNp9uQM8S/Sc/0AXJr3R2h5d6hGjJnBafxeQjrK03gT
zKDm6a9oJdZ0109p3HE0g1gAzqBqdxrwf+QaYjyaKSMEst+JZgEA2l2sBkD8ak+q
QUR2g2M9DEJXpIIIZsG+eqPzT3vUWzP0MxJzHYwU39hD7XFEa1Ly1DLK65d1hHHX
0eoN9Re0LfvSZ7E14OE4SXZHrU0TbA4=
-----END CERTIFICATE-----
Generated at Mon Sep 28 00:11:44 2026 by rpki-client