Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cbafcd90-c368-3b7d-9ab5-557523944091.roa
File:                     cbafcd90-c368-3b7d-9ab5-557523944091.roa (raw, json)
Hash identifier:          58wmtDLpiXJG6gHeySxpQZ0u/9W+GpdhePEqd1xVWSE=
Subject key identifier:   E2:B3:76:3A:67:E0:B0:9E:C5:F4:7B:EA:07:0D:10:5D:D8:79:9F:D4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDCC2174C3F6D84F41AF40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cbafcd90-c368-3b7d-9ab5-557523944091.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        162.72.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:cc:21:74:c3:f6:d8:4f:41:af:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=d92cd0c3-8335-4556-8f2c-334d904ba754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3c:1b:f1:ff:ef:14:e0:a5:37:57:24:91:7f:
                    5a:cb:27:12:a3:b8:69:65:89:49:68:a3:41:ed:99:
                    fc:ae:ef:0a:7b:ca:90:19:da:66:83:bb:8a:3b:c4:
                    b6:ed:98:20:e3:ba:46:d7:f9:04:e5:e7:16:e0:d4:
                    57:75:77:05:79:8d:03:b0:ff:26:b2:de:ad:b8:df:
                    74:dc:8d:72:80:fa:18:2d:a0:00:3f:5e:e9:8f:04:
                    e9:f4:16:c0:40:e7:d3:f1:03:b3:02:83:ba:e2:77:
                    9d:49:8a:ed:c0:46:88:ee:c9:e0:da:8c:27:0f:cf:
                    51:2c:10:59:e0:4f:bb:d6:c9:98:1d:0d:c8:dc:98:
                    ab:30:c7:62:62:6c:80:ff:d0:44:4b:25:9e:cc:dd:
                    6b:8f:3e:b5:b7:c1:98:e6:28:7f:48:4e:9a:b3:89:
                    31:81:a4:c3:5e:1a:a2:b6:ae:21:73:a5:5d:79:e5:
                    0c:fd:06:1a:da:8d:cd:65:69:af:25:56:15:52:13:
                    0f:b7:17:0e:af:3d:81:e0:e8:35:a4:b5:37:be:75:
                    52:6a:6c:9b:85:cd:6f:b8:d9:ee:10:5f:db:25:e7:
                    53:c8:f1:54:c9:6a:a5:8e:e8:09:19:53:58:23:12:
                    49:52:c8:a7:e3:cc:f3:0e:c4:ed:34:22:6a:73:76:
                    b2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B3:76:3A:67:E0:B0:9E:C5:F4:7B:EA:07:0D:10:5D:D8:79:9F:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cbafcd90-c368-3b7d-9ab5-557523944091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:72:71:55:c4:ff:61:72:b4:46:a6:98:f1:05:81:a6:43:5e:
         88:6a:e3:82:69:49:e4:7e:c2:72:93:da:42:54:e0:af:30:20:
         b5:c9:bf:f5:05:5c:bd:7a:52:fa:84:3f:df:d8:4f:87:aa:42:
         9b:98:ec:29:bc:9e:09:36:1b:e5:da:84:3a:f8:4f:72:80:be:
         95:22:71:19:81:7b:09:23:4b:c2:93:21:a2:7b:20:ca:9c:93:
         bf:12:29:9b:0f:b4:89:8e:39:fa:5e:b7:6c:bd:82:02:82:67:
         07:0b:45:f1:17:dc:6a:fd:38:b8:52:25:45:79:c9:1e:d8:b8:
         46:7c:df:fb:56:18:b0:e0:b4:2f:34:0b:37:15:b4:7a:55:20:
         c6:3c:53:f3:c9:1f:17:b4:4e:e1:8f:ac:a1:85:fe:d0:54:37:
         ee:88:01:f1:db:ba:52:29:de:26:d7:97:c0:15:35:d9:69:f0:
         63:77:77:fb:1c:cf:ad:f8:a7:e7:f3:cc:b5:3a:57:3b:08:2a:
         a9:5f:20:b1:3f:cf:d0:38:22:7b:6f:ce:df:e0:bd:fa:e8:7a:
         2b:76:64:f9:74:d9:3c:96:56:d6:68:3a:2b:30:ac:22:cd:b5:
         4d:88:29:48:28:9f:90:8d:72:fb:ae:b8:9f:38:0e:9c:5a:41:
         07:77:da:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:53:23 2025 by rpki-client