Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0af0af65-ec7c-3e4a-971f-f9d097296c5e.roa
File:                     0af0af65-ec7c-3e4a-971f-f9d097296c5e.roa (raw, json)
Hash identifier:          FpfRhKxNr16O4aux1QLTLQCbZcQSleWjOmWYqKPmdDA=
Subject key identifier:   A5:18:78:E1:50:89:D0:B0:AC:BC:D3:C7:8A:9C:12:F4:44:A9:DC:55
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C0F762F74E7EEE238ED00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0af0af65-ec7c-3e4a-971f-f9d097296c5e.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        162.72.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:0f:76:2f:74:e7:ee:e2:38:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=3dab01cb-20e7-446b-b11c-6f75512c9980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:06:a8:65:8f:ed:57:e5:84:19:b3:45:a3:1f:
                    aa:64:1a:d3:c2:ff:72:c1:2d:8b:08:e2:ea:ee:d6:
                    92:83:00:41:e4:e4:34:93:1f:53:63:b9:21:2a:c9:
                    7f:ca:d1:30:ce:47:e8:d6:7c:f8:98:37:3c:dc:09:
                    21:20:f2:60:84:b8:5f:e0:4d:2c:be:ed:41:83:64:
                    7a:50:8d:92:c3:dd:0b:2c:93:a0:40:08:64:18:41:
                    79:f8:83:0a:6c:3f:5f:42:79:ec:4c:a3:ad:2b:8a:
                    41:59:84:2c:52:39:89:c7:f7:69:6d:ff:eb:09:a2:
                    1d:08:18:f5:68:0a:e5:ea:23:c3:8a:27:96:15:4f:
                    c5:3a:ec:4d:e2:61:06:55:29:76:7d:75:77:7b:c9:
                    12:b9:4b:0e:12:c0:ba:dd:4a:a1:6e:d5:3d:2a:18:
                    ef:eb:41:ae:da:a8:93:f4:f7:56:fa:0a:04:b2:82:
                    fa:3b:50:b0:5d:24:89:90:ab:b4:92:c8:4b:f3:90:
                    80:9e:d1:92:05:fb:a7:b9:48:36:2a:7f:d3:20:8c:
                    a2:03:79:b4:a0:89:c1:a2:fa:63:ae:d8:fb:62:a4:
                    02:91:70:c5:f9:48:a6:ea:53:99:1d:c6:cf:28:37:
                    f5:ef:2f:c6:01:6f:88:66:78:5c:d3:42:7d:32:40:
                    e8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:18:78:E1:50:89:D0:B0:AC:BC:D3:C7:8A:9C:12:F4:44:A9:DC:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0af0af65-ec7c-3e4a-971f-f9d097296c5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:b1:0f:1c:11:59:a1:68:ef:b9:a6:68:df:5b:e7:32:47:ff:
         6d:aa:f3:52:89:73:59:11:43:19:41:d1:68:b0:f3:4b:6e:d9:
         b6:f2:8d:6f:14:0b:94:8b:97:13:0c:03:48:e7:37:e7:bd:de:
         a4:55:4f:44:a3:a2:af:ba:67:20:df:2c:a4:8e:69:84:a7:76:
         ab:a0:36:cd:36:96:4f:31:01:a2:3e:7d:c2:d9:21:3d:42:51:
         49:c8:68:24:89:d9:82:0f:a2:3b:83:73:af:11:0a:c0:2a:e7:
         54:9a:83:8b:bd:ea:fc:04:e1:31:76:8b:af:df:76:6b:be:da:
         73:49:b5:58:b0:ae:ff:4f:15:72:ea:37:be:7d:5f:8c:c6:ab:
         c9:a2:a5:fc:db:f1:97:7e:cd:ad:29:10:6d:d2:07:9f:e1:c7:
         88:d4:4e:22:b9:de:a6:2f:9e:49:41:1e:a6:24:1f:9f:c2:7d:
         52:9b:34:2e:f2:e4:0d:83:b1:04:0e:36:77:6e:63:6a:23:ee:
         19:ab:dd:fd:c3:53:26:f2:5d:99:cf:d5:42:86:47:a2:e0:26:
         75:d0:5b:dc:9e:33:c7:e3:92:28:5f:e0:a7:15:8f:32:0c:2f:
         3f:23:90:0c:6c:0a:8a:43:cc:8f:5b:18:e3:47:9a:d7:b3:d8:
         0b:87:df:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:45:38 2026 by rpki-client