Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8901afcd-3882-3bd1-ae1b-0f0c3922713c.roa
File:                     8901afcd-3882-3bd1-ae1b-0f0c3922713c.roa (raw, json)
Hash identifier:          VjCPq+BAlaH84Q42DuKAK8xU7n6bePuFQPqJGDWV0yk=
Subject key identifier:   BE:40:34:72:3D:C8:59:84:43:96:59:92:28:FF:85:69:D6:13:C7:0A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0A408C2E6EF7C26B7A900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8901afcd-3882-3bd1-ae1b-0f0c3922713c.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        162.72.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:a4:08:c2:e6:ef:7c:26:b7:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=3188e579-2711-45bb-8020-1c0740604838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a0:78:06:5a:c6:49:4a:fa:c9:d1:b5:d6:56:
                    a6:98:96:67:f3:6d:62:be:3a:05:89:53:ae:f2:d5:
                    f3:97:81:f9:e8:3d:d0:58:4d:fb:db:11:96:8f:01:
                    54:01:e3:e2:53:ae:bc:66:a1:68:56:69:60:78:9b:
                    99:3b:34:6e:2b:6d:bd:ae:64:48:ce:db:2b:6e:e2:
                    ad:5c:f5:a5:70:41:45:4e:2b:98:4e:68:2e:03:88:
                    6d:a8:d8:89:26:18:7c:46:9d:43:aa:62:72:b3:8b:
                    7f:cd:e2:7b:74:64:60:df:79:84:00:79:1a:e4:d9:
                    7b:49:31:4a:a3:d5:db:fb:fe:8b:dd:61:87:83:80:
                    45:db:5a:61:bd:f9:f7:06:a0:cb:e9:be:84:5a:dc:
                    66:23:a2:a9:a9:84:01:30:9e:82:9a:44:f7:a0:2e:
                    23:10:6e:04:8a:80:b3:6b:fc:26:31:d2:68:3a:68:
                    2f:49:c9:89:7e:70:f7:67:bb:cc:d9:fa:58:54:4f:
                    31:36:84:bf:46:99:7c:ee:c8:0d:cc:6f:69:3b:50:
                    b5:24:6f:f8:f8:23:3c:f3:3d:2c:e6:7e:9c:13:f9:
                    42:a3:38:56:92:63:68:24:96:a2:0c:28:0b:07:27:
                    e9:72:3d:6d:08:b9:fd:78:c1:22:b3:ef:9c:a2:20:
                    f6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:40:34:72:3D:C8:59:84:43:96:59:92:28:FF:85:69:D6:13:C7:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8901afcd-3882-3bd1-ae1b-0f0c3922713c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:4b:4b:62:25:22:86:9b:e2:c3:50:db:39:25:de:71:fb:5c:
         75:f3:4c:13:59:1a:bb:3e:e2:f5:75:c6:97:b9:8f:18:0b:c4:
         11:0d:da:f8:4a:13:ff:c8:2c:d9:8d:28:5f:c4:b4:79:a9:f6:
         fb:38:e6:61:3f:43:11:86:2b:1a:16:6e:87:6f:8c:27:e9:e7:
         36:c1:fb:b6:ba:a4:47:3f:5f:a3:e7:f7:d5:88:c7:aa:d2:26:
         b7:7e:94:89:0f:b2:3d:a5:f9:e1:4a:e0:e9:cc:cd:9b:f9:3b:
         87:bb:fc:ba:4a:e0:eb:24:b9:e6:df:31:3d:40:c2:be:f9:a0:
         c2:a7:93:dd:c8:1d:11:21:ee:58:d5:80:a2:f9:fe:c7:fa:59:
         a3:ed:8d:4f:a1:07:34:c8:e7:7d:83:cf:e7:e6:38:cb:78:1c:
         3a:71:d6:88:20:d3:cb:04:3c:e4:c0:c5:69:df:ad:e8:85:02:
         d1:4c:36:27:29:17:00:7a:b8:c4:40:d0:8c:50:13:0f:c5:d0:
         aa:10:1e:98:c8:bd:81:41:1c:01:ab:17:4f:e7:b8:6e:b8:82:
         33:89:23:b3:ec:fa:2f:7c:58:d3:8b:b7:e2:83:09:25:71:91:
         24:47:95:87:49:c1:88:cd:83:0a:27:50:36:b7:9c:dc:1a:42:
         f7:19:c7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:07:42 2026 by rpki-client