Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0d79ec36-8620-3067-986c-38e60dc2d208.roa
File:                     0d79ec36-8620-3067-986c-38e60dc2d208.roa (raw, json)
Hash identifier:          AirFrQcBL4AfxvAS7HVwoQMZtYOl5251rSdKESv5dBo=
Subject key identifier:   B3:9B:B6:7F:D4:76:84:71:5C:CC:06:63:DE:19:B4:DC:37:2A:DB:ED
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F4983CBBFCEC2E5257CDA3C00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0d79ec36-8620-3067-986c-38e60dc2d208.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        162.72.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:cb:bf:ce:c2:e5:25:7c:da:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4851f127-b9a5-43ee-b30d-5dbadfd9a1d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f7:f9:1b:a8:b1:3a:08:0d:f0:71:8f:58:be:
                    17:e2:06:49:ef:b3:39:75:8c:b8:c8:ae:44:13:53:
                    d5:f2:62:f8:75:b6:fa:64:5b:a7:3d:1a:2f:7c:de:
                    2d:94:50:f8:cd:70:9f:1d:be:ac:0d:f9:0a:91:51:
                    bf:2e:3f:6e:bb:fe:47:8a:b0:0c:e4:21:a0:a6:98:
                    81:61:47:d3:02:65:78:7e:c2:32:dc:51:53:20:81:
                    0e:33:6a:d8:62:53:11:04:85:05:22:d8:25:01:e4:
                    09:60:9d:ee:64:6d:f4:07:55:c6:a9:c1:35:09:d7:
                    ee:54:48:07:4f:e8:ef:b0:36:3c:4d:4d:0a:14:63:
                    de:dd:ef:24:2d:9f:f1:80:29:1f:88:c8:b1:17:15:
                    c9:24:88:76:da:5f:bc:20:2b:91:7c:a6:d4:13:0f:
                    b6:22:55:76:53:9e:d8:c6:78:c5:11:96:8f:6a:a5:
                    17:f4:6f:84:fd:5a:1c:64:1b:9b:83:4e:3f:3b:b6:
                    a8:68:c8:84:e6:19:a3:dd:5b:7b:d5:02:00:bf:0f:
                    0e:60:79:4a:0c:29:78:96:2f:53:c8:06:df:af:24:
                    bf:4f:2a:43:7c:7a:f1:77:b5:95:69:41:23:3f:40:
                    00:37:60:f7:19:c6:bd:ab:31:4f:16:cf:fa:1b:32:
                    74:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9B:B6:7F:D4:76:84:71:5C:CC:06:63:DE:19:B4:DC:37:2A:DB:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0d79ec36-8620-3067-986c-38e60dc2d208.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:4b:34:f2:8b:7f:22:80:1b:3e:1c:e7:cb:38:88:a7:98:31:
         07:5b:71:0a:1e:e3:0b:49:fc:72:46:fb:03:33:45:bf:15:00:
         c2:13:f1:12:90:6a:04:58:db:64:03:9a:e5:10:7a:a9:60:d8:
         08:cf:30:b9:03:df:e8:28:b8:57:ae:4b:72:7b:d3:51:de:f0:
         97:6e:b7:8a:81:48:08:d0:7e:2e:ba:c9:b2:15:bb:f7:a3:f9:
         dc:ee:2c:18:8e:70:8c:6a:40:c0:03:c6:61:9f:99:96:09:cd:
         28:73:cc:1d:a8:71:1d:2b:e1:f0:fd:5f:18:31:2a:68:6e:8d:
         0b:ac:45:dc:92:f0:c2:92:7b:4b:2d:de:88:56:82:a5:b0:60:
         0b:e7:27:ec:9a:2f:c8:2b:c0:1b:8e:aa:7b:42:11:9c:bb:c3:
         47:f1:e1:df:e6:7f:6e:1f:04:c9:63:17:94:e5:d0:8e:de:8b:
         5c:d4:ed:fa:15:99:e5:44:e3:86:34:b4:1e:cc:37:4e:6e:84:
         90:97:51:18:89:d7:06:9b:c8:7e:99:c1:e7:76:bf:67:f9:12:
         8b:29:96:4c:63:b9:33:d2:c2:5f:3f:06:d4:6a:86:fd:09:0b:
         51:6e:f8:34:e9:2b:a2:98:23:31:83:c9:99:6f:51:a9:9b:b0:
         41:14:59:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:33:04 2026 by rpki-client