Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8619990b-32ee-3543-8527-007c99004f60.roa
File:                     8619990b-32ee-3543-8527-007c99004f60.roa (raw, json)
Hash identifier:          mcWbQVtI9GOQKMNaHQYDxD+uDU0c3cOP8TNxHQk+1lc=
Subject key identifier:   E4:7D:AD:3F:1A:53:D0:3C:1A:47:C9:7F:BF:C2:EE:53:51:AA:2A:D5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F4983BA69AA46DC0AD984EF80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8619990b-32ee-3543-8527-007c99004f60.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        162.72.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:ba:69:aa:46:dc:0a:d9:84:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e1131721-01e4-4e7a-bde6-24d9c250c06e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2d:86:ce:f0:b1:7b:b8:de:30:9e:21:b5:54:
                    9d:37:bb:0e:c3:1c:ac:22:d7:5e:3e:4a:29:aa:49:
                    e7:2a:d9:e5:7f:4b:07:8a:b7:d8:90:ea:bd:12:9f:
                    56:24:ec:33:b2:49:0e:84:66:aa:54:a5:67:53:0e:
                    f0:42:55:ee:61:67:dd:09:6b:ed:7f:ca:5b:66:07:
                    17:4c:39:3d:c4:52:37:43:91:34:e1:02:4f:8c:bc:
                    d2:dc:1e:eb:fe:ed:3b:c0:14:66:5e:d5:05:4b:5a:
                    ca:38:b3:8e:93:c9:cf:a0:98:9b:32:be:06:a8:62:
                    45:3e:91:17:fd:2d:3c:ee:0f:d8:87:8a:7e:d9:64:
                    1f:a9:6a:ad:a6:cb:b9:2c:57:a3:59:a3:cc:52:b0:
                    0a:c1:cf:cf:a5:4c:05:9d:93:27:b4:74:8a:bc:74:
                    02:9d:77:c3:1c:38:12:96:0f:6c:dd:f8:68:0b:0c:
                    b4:24:d3:c3:59:9d:ce:67:48:22:68:ba:c8:ba:70:
                    f3:ea:03:bb:27:41:fe:8a:65:4e:b7:d4:48:da:ed:
                    7c:5d:0f:3b:b4:5f:29:a8:4c:be:6d:c9:a8:6c:3a:
                    77:b4:0a:7d:c8:0a:d3:17:1f:e4:08:63:e6:79:24:
                    f5:0e:35:c1:09:af:5c:c1:8a:f9:e7:08:fe:c7:e1:
                    bb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7D:AD:3F:1A:53:D0:3C:1A:47:C9:7F:BF:C2:EE:53:51:AA:2A:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8619990b-32ee-3543-8527-007c99004f60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:a3:05:a5:41:ac:e7:8a:2d:b6:4c:3c:cd:21:c7:2b:e4:af:
         75:2a:84:c6:11:ab:f1:22:3b:8c:98:df:d8:8d:4b:8f:ce:f6:
         62:89:fa:0d:0e:c7:d0:bf:da:49:cf:e7:79:cc:72:45:4b:8d:
         78:56:89:1e:58:ca:0b:41:c3:0e:53:c3:3e:a6:29:8b:11:97:
         27:ee:56:00:62:0d:45:ee:ae:11:76:ea:af:59:a9:a7:11:db:
         f1:7a:1a:f1:d1:b5:78:de:83:19:9d:b9:1f:42:d9:f4:f1:cf:
         23:af:a8:8d:e3:af:38:66:00:06:71:84:1f:b2:17:d7:69:1d:
         7c:f0:18:7f:32:e9:aa:22:2a:8b:8f:01:18:57:fe:e8:be:d5:
         2f:58:b1:92:f4:03:fa:38:d1:94:48:d8:69:aa:6c:a1:0f:09:
         7f:da:c9:31:79:1c:19:1a:da:5a:32:2f:e1:1e:df:6e:b8:ca:
         9e:ee:43:a2:bb:d7:94:ce:fc:8d:96:16:44:c5:30:5f:1c:2e:
         fc:c2:34:7d:40:98:91:2d:f1:91:8b:2d:62:23:e1:9a:3f:82:
         54:02:47:99:86:b3:2a:84:94:88:68:e6:d4:be:32:7c:57:0d:
         8a:05:f6:a7:67:06:fe:94:1e:10:ff:09:61:17:48:90:24:71:
         a1:43:58:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:26:06 2026 by rpki-client