Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/88c9f24e-1c2c-3981-9d8e-044594855c64.roa
File:                     88c9f24e-1c2c-3981-9d8e-044594855c64.roa (raw, json)
Hash identifier:          Dlf5qyBd4r+7qKADu6+2Ua2h0WGwYpNJtWVpDuGX3qI=
Subject key identifier:   D1:63:7D:91:68:92:20:85:7F:C3:57:96:C8:CA:56:6E:2E:F5:30:8E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0A3E589DB9A66EEF31180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/88c9f24e-1c2c-3981-9d8e-044594855c64.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        162.72.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:a3:e5:89:db:9a:66:ee:f3:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=794a00c7-029a-4411-9de4-a2768be6d271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e9:67:37:3d:af:71:f0:dc:56:7e:19:93:54:
                    cb:cc:a1:aa:1c:c5:7a:ca:b4:24:66:ab:92:a9:0b:
                    a8:03:f3:eb:51:7e:c3:64:68:aa:e3:cd:f2:99:e0:
                    85:de:c1:8f:f9:1d:2f:9b:50:f6:a0:e6:d9:17:57:
                    dd:76:ea:12:e9:13:7d:74:67:d9:01:81:39:6a:8a:
                    e4:60:34:db:81:c3:91:5c:22:4d:bd:23:75:b0:81:
                    bb:a4:ab:86:84:c0:f7:f4:bc:cf:29:b7:82:30:32:
                    ec:35:b7:7e:ab:e9:09:26:51:11:52:97:2f:9b:8a:
                    20:6a:c2:fb:91:0a:3c:88:36:03:9e:b9:8f:04:0e:
                    15:72:ad:e9:d1:18:5f:7d:aa:bc:89:d6:e5:f1:a9:
                    82:99:d8:e7:1a:08:94:e6:d0:76:0f:d1:50:76:21:
                    b7:74:43:2f:09:15:28:8b:51:33:6f:4e:4a:e7:3d:
                    80:cd:71:4e:58:0e:bb:f7:55:59:6b:b9:2a:d1:bb:
                    72:90:c2:7d:c8:33:ad:89:ad:12:91:ff:b1:21:36:
                    b3:d1:79:e9:ec:a3:4d:b0:04:24:69:92:a1:7b:aa:
                    49:59:61:38:54:4c:e6:88:d6:89:1a:dc:c1:07:5e:
                    b0:c1:21:97:0b:a3:d3:59:0e:cf:bd:dd:16:51:c1:
                    46:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:63:7D:91:68:92:20:85:7F:C3:57:96:C8:CA:56:6E:2E:F5:30:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/88c9f24e-1c2c-3981-9d8e-044594855c64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:81:56:04:92:2b:db:58:01:a8:36:bf:f7:e3:88:44:f0:ca:
         f0:82:c7:11:1e:49:12:f4:ef:c9:e9:1e:fd:bb:92:ca:29:80:
         8d:55:4c:d0:27:88:ba:c9:e0:a8:f5:5f:06:25:d0:95:98:4f:
         7f:8b:7b:b8:b8:98:b8:e1:d6:b7:8d:8f:04:89:46:68:88:3e:
         98:07:24:7a:f8:d8:77:d0:0b:94:d6:ca:a1:91:14:f5:d5:2f:
         28:76:d5:ca:20:81:eb:df:57:30:f1:cd:00:4f:db:20:44:f7:
         69:3f:6c:dc:72:ae:94:21:4e:75:0e:63:67:58:cb:3e:d7:95:
         01:4a:07:73:fb:c9:76:4d:21:12:e3:6f:0d:3c:cb:87:09:6d:
         8e:31:f6:3f:9d:91:90:d5:39:4f:6b:b2:b9:f6:f9:a6:e3:59:
         38:fc:4c:bd:2e:d1:ed:33:4d:63:69:65:9e:cf:5d:25:85:33:
         13:f3:30:df:55:c8:04:6c:f5:b9:93:54:8d:19:77:eb:c2:d8:
         91:36:98:09:41:bb:f6:c3:9f:82:91:f8:b4:45:38:d0:ea:d5:
         79:b5:91:8b:ab:13:f8:79:e7:f0:0a:f6:be:d9:45:e5:3f:be:
         a6:19:1e:8f:b6:22:be:7b:f6:5f:14:bd:35:ac:60:44:4a:d2:
         02:1e:2f:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4KPliduaZu7zEYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
Nzk0YTAwYzctMDI5YS00NDExLTlkZTQtYTI3NjhiZTZkMjcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+lnNz2vcfDcVn4Zk1TLzKGqHMV6yrQkZquS
qQuoA/PrUX7DZGiq483ymeCF3sGP+R0vm1D2oObZF1fdduoS6RN9dGfZAYE5aork
YDTbgcORXCJNvSN1sIG7pKuGhMD39LzPKbeCMDLsNbd+q+kJJlERUpcvm4ogasL7
kQo8iDYDnrmPBA4Vcq3p0Rhffaq8idbl8amCmdjnGgiU5tB2D9FQdiG3dEMvCRUo
i1Ezb05K5z2AzXFOWA6791VZa7kq0btykMJ9yDOtia0Skf+xITaz0Xnp7KNNsAQk
aZKhe6pJWWE4VEzmiNaJGtzBB16wwSGXC6PTWQ7Pvd0WUcFGjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNFjfZFokiCFf8NXlsjKVm4u9TCOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODhjOWYyNGUtMWMyYy0z
OTgxLTlkOGUtMDQ0NTk0ODU1YzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokgPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABWBVgSSK9tYAag2v/fjiETwyvCCxxEeSRL078npHv27ksopgI1VTNAn
iLrJ4Kj1XwYl0JWYT3+Le7i4mLjh1reNjwSJRmiIPpgHJHr42HfQC5TWyqGRFPXV
Lyh21coggevfVzDxzQBP2yBE92k/bNxyrpQhTnUOY2dYyz7XlQFKB3P7yXZNIRLj
bw08y4cJbY4x9j+dkZDVOU9rsrn2+abjWTj8TL0u0e0zTWNpZZ7PXSWFMxPzMN9V
yARs9bmTVI0Zd+vC2JE2mAlBu/bDn4KR+LRFONDq1Xm1kYurE/h55/AK9r7ZReU/
vqYZHo+2Ir579l8UvTWsYERK0gIeLzs=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:44:57 2026 by rpki-client