Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/75a7f983-7b8f-346d-8810-002807658837.roa
File:                     75a7f983-7b8f-346d-8810-002807658837.roa (raw, json)
Hash identifier:          i/BGUE5JPz35M13QPI0lCy+3yKS56/3531fW8a78T/4=
Subject key identifier:   43:7E:83:55:0B:22:F7:3C:2A:22:A9:F0:01:6F:A2:FA:14:07:32:A9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F4983B3B77EE18BD5644AC6A0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/75a7f983-7b8f-346d-8810-002807658837.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        162.72.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:b3:b7:7e:e1:8b:d5:64:4a:c6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8c520460-7b23-4f69-9d99-ddaef8d6e5b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:34:00:8b:8d:df:51:78:4f:6c:5c:be:c5:05:
                    e2:bc:9b:6c:5f:90:61:76:99:18:66:82:af:ba:1f:
                    b0:bc:0f:af:41:5a:5e:4d:1c:1e:aa:13:9f:e7:c2:
                    0a:6f:66:dc:6e:e9:24:4d:b1:e1:d6:fb:32:6e:fc:
                    a2:98:b2:7c:a0:58:72:a7:dc:31:68:49:c6:9b:6f:
                    ed:9c:20:fb:85:9d:ac:7d:71:9c:6e:10:c0:34:58:
                    b5:ff:28:0e:87:be:9a:ce:29:00:bf:da:13:e5:83:
                    69:c0:d2:3d:c2:47:1d:76:a6:98:52:95:09:41:80:
                    04:fb:74:ed:57:89:71:b6:c7:b1:b5:75:da:d8:fc:
                    59:8f:0c:f2:5f:4a:74:a9:e7:fe:95:b3:c5:14:bf:
                    c6:5c:1c:79:93:40:3a:4c:97:83:a7:ca:b5:31:57:
                    b0:30:d6:f6:3c:2a:76:9a:76:28:b5:c5:2a:be:cb:
                    f4:2b:25:6f:1f:6f:81:89:65:96:08:17:79:e8:87:
                    d8:8d:39:d7:72:59:2c:a6:ce:93:99:1a:26:a3:cf:
                    50:93:69:ac:8f:5e:60:5e:6d:d2:71:65:eb:08:6b:
                    14:e2:e6:02:65:b7:00:b8:43:52:2c:30:89:41:74:
                    9e:cd:c9:c6:df:02:03:89:e4:25:4b:e4:3c:53:07:
                    aa:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:7E:83:55:0B:22:F7:3C:2A:22:A9:F0:01:6F:A2:FA:14:07:32:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/75a7f983-7b8f-346d-8810-002807658837.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:2d:1b:5e:70:53:ff:e9:5b:f6:32:ac:7d:be:b7:58:4e:43:
         db:a5:63:17:1c:5c:ef:0c:b6:f2:ae:ab:e5:1d:1a:82:56:81:
         5c:fa:25:23:b6:6c:11:0b:b0:60:0b:51:33:84:be:bc:fc:1c:
         9c:2d:8f:5c:f8:51:a4:4d:87:15:95:61:a0:ba:aa:7d:27:ab:
         b1:31:c3:3a:90:60:a1:4f:04:50:c7:9c:a2:b7:c3:bf:9f:24:
         88:e5:56:09:ee:40:5f:ed:80:94:f7:27:24:51:0c:d2:c6:19:
         7d:4c:28:25:5f:c0:de:27:d4:72:90:7f:67:f5:ae:0c:75:6f:
         46:3a:5d:e7:1f:b0:83:19:81:af:69:fc:07:e0:53:b6:1a:c4:
         b2:45:74:a6:e0:1f:e2:be:e3:3b:eb:96:8d:83:c8:3d:8c:57:
         62:a0:ce:56:26:d6:1e:f4:af:3a:02:6e:7d:df:fb:25:2c:84:
         91:c2:79:d5:bc:84:0c:e4:81:73:1e:40:89:41:13:74:65:a4:
         71:fe:3c:98:8b:d8:82:4d:43:fe:35:63:cf:4d:81:3f:15:1b:
         f2:82:60:dc:92:d8:90:2d:a8:2b:0d:e9:79:c4:68:75:a6:ca:
         be:43:a0:a1:ad:cf:13:af:78:6b:2a:33:bb:c7:21:c9:f0:ff:
         49:39:d4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:51:46 2026 by rpki-client