Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f473791c-2386-3aa5-86b3-1766c8d9c5a5.roa
File:                     f473791c-2386-3aa5-86b3-1766c8d9c5a5.roa (raw, json)
Hash identifier:          noFfQ5HvEvro1eLnlOsANljxTeJBBfMFMM4D4a8fQMg=
Subject key identifier:   8F:F5:E2:CE:51:9E:00:DE:5A:A5:B1:98:1A:6A:25:A2:AB:19:43:25
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24DFF2A2C1D439C71A488FB0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f473791c-2386-3aa5-86b3-1766c8d9c5a5.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        162.72.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:f2:a2:c1:d4:39:c7:1a:48:8f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=ba441ec3-3c1d-4569-8d38-febcdc8f493e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:15:e1:36:57:b2:39:91:74:74:ab:27:38:1a:
                    35:9d:49:6e:fd:68:9b:33:4e:9c:46:37:24:dd:f1:
                    54:b0:80:ef:eb:c5:02:5f:64:6e:e6:72:8e:89:b9:
                    e7:52:79:e1:76:c9:38:5f:0c:a4:0a:20:cb:cb:05:
                    cd:c0:6d:cc:23:b0:ae:46:ca:d9:cd:4b:81:11:69:
                    24:a8:57:11:d5:46:fc:8e:24:9d:99:10:a0:26:0e:
                    ef:0f:28:df:ef:5e:2e:7a:e6:96:be:b1:57:a9:2b:
                    4e:4c:7a:ca:c4:1b:49:59:59:dd:8a:fc:79:db:e1:
                    3b:d4:f7:e9:9a:b8:43:19:69:8d:d1:70:f8:99:ba:
                    e7:46:37:bc:63:39:e1:49:5a:a7:12:b8:f4:c0:b3:
                    39:20:bd:c4:51:7e:e6:01:fa:8a:44:ee:4e:7c:c1:
                    82:3e:48:6a:82:1e:49:0b:1d:c6:d1:c7:5d:02:bf:
                    fe:a8:9f:13:4e:f4:99:22:cd:52:c8:94:e4:97:24:
                    b0:58:4b:20:03:1c:6c:af:a5:51:65:f3:93:d9:d9:
                    a5:aa:9e:12:d3:c6:5b:01:43:84:f1:b8:c1:d8:a9:
                    ca:60:00:f5:c4:e6:28:d7:f8:60:58:7f:48:56:08:
                    33:f3:67:29:53:0f:81:17:0c:ce:f1:f9:fc:ea:a9:
                    4d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F5:E2:CE:51:9E:00:DE:5A:A5:B1:98:1A:6A:25:A2:AB:19:43:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f473791c-2386-3aa5-86b3-1766c8d9c5a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:9f:3d:a6:08:d7:0e:c6:64:ae:b1:ee:d3:9b:4c:fb:60:1e:
         2b:5b:5e:87:61:3a:30:00:e3:a0:1f:c4:df:2e:49:31:e7:3e:
         ec:23:1e:8e:75:8f:7b:53:4c:74:16:84:57:91:d5:00:c7:40:
         2f:1d:1a:05:4f:e9:93:1a:55:74:59:64:08:30:6d:cd:5a:f3:
         ea:cd:a2:d7:89:11:dc:83:76:5d:51:6c:ec:a4:87:a0:95:f9:
         93:5f:2e:af:96:da:8f:fb:b6:ae:c8:ad:cc:f8:24:e3:c2:75:
         87:47:66:ce:c2:84:1d:be:fc:ad:8e:a0:37:aa:ed:c2:91:31:
         d8:94:d4:07:c4:d3:d8:2e:e6:eb:fc:bc:ad:dd:81:5b:6a:ef:
         20:40:1e:b7:b7:9b:6b:49:3e:07:e5:45:26:ed:16:f5:5d:87:
         b2:4b:34:42:0a:4c:5d:5b:43:88:58:92:e4:27:ad:f5:81:7b:
         69:1d:f6:0c:40:25:20:1e:b2:68:5c:a2:9d:5d:42:44:73:c9:
         93:93:51:87:ac:e2:1b:a5:20:49:08:78:4f:d1:ed:e2:a7:03:
         f5:87:24:07:5b:50:7f:5c:12:ce:35:5b:06:32:b9:bb:8c:7c:
         b4:04:c9:0e:a0:2c:b6:17:50:97:1b:c3:7a:e8:a1:07:53:cf:
         6e:2b:cb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:11:50 2026 by rpki-client