Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4aacfed2-f47c-3353-bc33-6815e7bcdc5a.roa
File:                     4aacfed2-f47c-3353-bc33-6815e7bcdc5a.roa (raw, json)
Hash identifier:          LAhmL9VBTTvb+UGUCw4YFJueX9/xA8qO/l341p6Nibc=
Subject key identifier:   AD:5A:BF:50:2E:D3:88:E8:43:DC:35:4B:E4:E3:1A:A2:93:8D:6E:18
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C0EE11346191EF679348C
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4aacfed2-f47c-3353-bc33-6815e7bcdc5a.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        162.72.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:0e:e1:13:46:19:1e:f6:79:34:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=c1acd7ee-0058-4458-9d1e-178c79601501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:02:fd:99:69:e3:34:f7:de:2f:a0:11:5d:47:
                    f8:cf:ad:7b:b2:f9:80:e3:2d:bc:85:ee:86:29:f5:
                    be:0a:77:ca:21:59:30:26:e3:88:3d:8c:64:b5:7c:
                    a0:e9:d3:10:46:b8:73:f1:d5:4d:8f:73:49:b4:7d:
                    33:f0:04:63:b9:a5:fd:e5:8c:ea:45:05:9e:4f:bc:
                    bc:85:9a:46:2c:5c:03:2d:00:d5:c7:d7:bb:56:26:
                    89:a2:2b:4b:f5:8c:3e:70:a3:05:09:a4:97:17:e1:
                    aa:1c:cf:be:03:f9:72:d6:ad:a1:8d:f8:6e:b2:92:
                    cc:94:6d:78:74:ef:6b:da:81:c1:84:24:d9:51:72:
                    df:6f:25:42:ff:67:d9:0c:bb:9c:f2:ed:c4:22:95:
                    f6:7d:b3:08:25:be:e1:80:a0:16:fc:4a:1f:62:82:
                    5a:11:54:31:c9:46:2d:55:10:23:7f:6d:6f:00:15:
                    9e:c6:0d:ca:1e:03:0f:c1:ba:4f:69:9e:6d:e2:bb:
                    79:c0:e0:12:47:15:fa:d9:db:a0:34:69:16:9f:9c:
                    d0:b3:ea:2c:24:e9:48:b1:2f:f8:f2:4b:c2:27:a3:
                    94:a0:42:7d:cc:64:78:b4:a5:fd:e2:a3:54:aa:0f:
                    08:d5:42:7e:9f:98:58:78:03:69:5d:02:a3:eb:ec:
                    c6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5A:BF:50:2E:D3:88:E8:43:DC:35:4B:E4:E3:1A:A2:93:8D:6E:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4aacfed2-f47c-3353-bc33-6815e7bcdc5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:dc:59:bc:74:ba:1e:c3:b0:eb:fd:69:aa:5b:86:f2:21:14:
         3c:63:95:b9:4f:a3:cc:57:2f:72:82:f7:06:09:97:25:72:8c:
         c9:3b:3a:63:50:c6:4a:f8:35:87:13:fc:b3:ce:93:13:2c:ac:
         52:3a:5b:e2:a0:26:b3:b0:4e:f1:af:d1:03:74:58:8a:1a:21:
         19:36:a5:57:e9:3a:70:f9:b3:15:5b:c0:9a:73:df:be:e4:d0:
         cb:8e:b3:f9:37:1f:d1:43:a5:99:04:b9:51:d4:a2:b6:01:0e:
         d9:a2:99:f2:b8:4c:46:9f:05:e0:d6:0b:8e:5c:d5:33:5a:b6:
         6f:24:67:1d:10:26:09:29:38:78:50:e0:62:ad:a3:33:bc:e4:
         50:73:c9:a3:49:d9:58:d5:21:3a:a9:80:33:55:40:3e:1d:9f:
         06:87:db:6a:44:10:90:4a:5a:93:dc:2f:c0:f0:02:24:f0:73:
         db:37:e0:8d:25:0e:91:c6:6f:ee:4d:b8:2b:e2:30:df:08:33:
         66:68:fc:54:1d:5f:39:32:cb:b4:cd:3b:2e:62:38:ba:d9:77:
         eb:6a:b4:21:14:7a:38:03:5e:dc:aa:21:ea:06:7e:d3:61:df:
         9a:03:73:97:80:94:cf:20:f4:ad:13:0d:7b:49:89:5b:44:9d:
         9a:3e:3d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:34:16 2026 by rpki-client