Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3b0622ac-bce8-3d39-959b-46ca870ed7e0.roa
File:                     3b0622ac-bce8-3d39-959b-46ca870ed7e0.roa (raw, json)
Hash identifier:          ZbdvDLIb0aI6Tr4G9N4OJ/nrp4Jrj+iME8wcTwHll1s=
Subject key identifier:   9F:C3:6C:7B:66:50:A9:06:EF:30:98:96:71:52:E8:3C:1F:25:BE:CA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79FAE9CEEF71D907B20A060
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3b0622ac-bce8-3d39-959b-46ca870ed7e0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        162.72.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:ae:9c:ee:f7:1d:90:7b:20:a0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=192f42dc-375c-47cf-8349-a9239e16acff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:22:86:90:c6:c6:0d:bf:35:da:57:6f:2e:6c:
                    c7:78:e6:63:23:e6:13:5d:c9:56:79:21:a6:bd:79:
                    e9:c1:08:56:9c:2a:43:ff:be:b8:f4:66:0b:9d:7a:
                    ba:ae:c6:e9:22:0e:4b:9d:44:39:c7:98:06:23:91:
                    54:3b:ad:2b:83:fa:79:46:6e:b7:75:95:3f:d2:31:
                    99:f5:f3:0b:1d:d3:d4:d9:df:1c:de:de:e5:7c:61:
                    13:f0:c6:9e:99:1b:fc:ed:be:b6:23:9b:b3:65:32:
                    9d:b8:5a:63:86:5a:2a:58:d2:d3:1f:a5:53:e8:b7:
                    e5:f6:e4:4f:6b:eb:29:da:3b:08:0a:04:db:7e:4f:
                    6b:83:1f:c2:fe:9f:2a:f1:41:6d:64:da:3e:7a:af:
                    bb:c1:3d:31:6f:cb:29:44:11:07:fe:f3:f0:f1:29:
                    87:af:6c:e2:f5:14:cb:f9:c5:ad:bd:1e:2a:63:35:
                    b6:ae:ff:04:d4:5c:15:fb:ca:30:56:04:20:af:7a:
                    17:c0:e4:8c:03:fe:7d:23:ba:ac:2f:c8:2c:ec:c1:
                    28:d4:da:83:31:e3:6c:a7:d9:cd:64:43:79:80:fb:
                    2d:f2:72:e5:d0:34:7e:ca:3c:c5:a5:91:df:1b:6a:
                    3f:e5:58:0c:85:1f:b3:4f:b8:1a:ec:fd:bc:38:42:
                    d1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C3:6C:7B:66:50:A9:06:EF:30:98:96:71:52:E8:3C:1F:25:BE:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3b0622ac-bce8-3d39-959b-46ca870ed7e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:fc:b1:19:11:7f:6b:a6:f1:a0:df:ae:67:60:1d:6a:67:6f:
         59:11:8b:22:fb:3a:fa:ef:e7:6a:a0:e5:61:e1:72:25:e3:94:
         42:08:2e:83:27:af:72:45:16:9a:22:b1:d7:65:e7:0b:8e:42:
         2a:6e:0e:ab:b3:fb:9e:8d:ce:5c:5d:46:34:9c:ae:64:80:49:
         6b:0f:96:7a:44:f9:c9:90:c8:6a:73:a6:12:8a:17:92:78:ed:
         07:f4:7d:a1:d1:5d:c8:bb:de:db:e4:1b:0d:98:39:f4:13:6e:
         85:47:d7:ad:1f:e0:8d:da:ba:65:7b:02:35:f4:6f:e5:4e:b8:
         5f:d0:f3:9e:cc:9b:04:ea:97:87:31:39:5a:d5:db:03:51:f6:
         a1:91:a7:31:8f:62:d8:b8:cc:4e:0d:da:d6:dd:fe:24:85:5e:
         73:7b:fa:33:8e:32:30:d8:9d:af:02:91:6e:dc:35:c0:54:c3:
         43:10:c1:03:87:85:37:ac:f9:a1:2c:44:c8:05:0d:1a:f5:85:
         ed:02:76:8e:ff:a1:e9:0b:c7:52:1a:63:87:b6:03:e7:99:64:
         78:58:c1:91:ae:c7:1d:b6:74:bd:1d:ab:4d:33:41:c1:ed:e7:
         ef:db:40:5c:06:52:8b:2c:e3:e0:75:c7:a8:98:e9:a8:b6:11:
         d1:ba:fa:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:00:04 2026 by rpki-client