Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8dc4bf02-1dc2-3c49-bfd9-017e5d5c6601.roa
File:                     8dc4bf02-1dc2-3c49-bfd9-017e5d5c6601.roa (raw, json)
Hash identifier:          0lkmJzim/vRA6uoGpqNcQemD006w/yWjvfLeUi0+ODE=
Subject key identifier:   2A:18:A9:02:44:92:C2:83:4F:FC:C7:93:02:38:49:94:09:2E:EA:9E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79E0964E62C043C2A4994A0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8dc4bf02-1dc2-3c49-bfd9-017e5d5c6601.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        162.72.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:09:64:e6:2c:04:3c:2a:49:94:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=114e4bcf-3061-4eff-91d2-b8e86cac9953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:43:17:0c:19:8e:d4:90:54:8b:58:63:04:c1:
                    87:03:a8:5f:14:53:9a:f4:73:dd:f6:f9:c7:f3:59:
                    8d:f2:24:ea:58:b8:b1:f5:0f:0c:ac:a5:8c:f3:b3:
                    51:7b:b9:6c:cf:3e:8c:66:5b:d6:a3:e2:26:e8:b5:
                    0e:86:f6:34:79:45:2a:60:2f:ab:6b:c3:30:0a:07:
                    97:81:e1:3e:70:74:4a:f9:06:0a:96:64:56:d8:51:
                    99:68:b4:71:ce:94:c0:d8:d7:47:a7:25:44:86:1f:
                    f0:0c:4c:97:ed:3a:0f:a6:70:44:c3:5a:9d:f1:25:
                    b6:10:c6:67:f7:b7:90:90:7b:41:9f:b0:e5:b2:28:
                    cc:1a:f2:4e:b8:e2:25:50:83:63:57:df:1e:f1:0b:
                    78:78:aa:0e:1d:05:e8:79:6a:34:59:22:a9:82:31:
                    9e:92:e5:ea:85:7e:95:b5:72:c8:fc:cd:d4:73:24:
                    b3:5f:a4:5b:48:64:55:71:01:7c:86:ae:f9:79:45:
                    c3:18:5d:92:af:14:9c:65:72:9a:13:09:65:05:72:
                    f9:89:5b:89:02:2c:88:0d:ab:97:c1:db:12:95:25:
                    e6:fa:b5:d7:a1:b2:b5:c1:ff:b8:7f:31:05:6a:5b:
                    5d:88:78:ec:ac:e1:11:8a:dd:d9:2d:42:5f:9c:69:
                    5e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:18:A9:02:44:92:C2:83:4F:FC:C7:93:02:38:49:94:09:2E:EA:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8dc4bf02-1dc2-3c49-bfd9-017e5d5c6601.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:45:f8:5e:67:0f:6b:44:18:e2:7b:8d:3e:24:c8:9e:75:d9:
         23:a0:ef:6c:69:ee:de:d2:f5:12:87:04:9d:98:52:aa:61:71:
         e3:64:66:88:be:9b:5e:46:3f:41:45:5f:79:c4:8f:2f:7d:8e:
         58:97:eb:9f:2d:bf:98:0a:e1:12:72:0d:d3:d6:7e:df:21:19:
         c5:19:4b:02:a0:9f:6f:4a:6d:94:77:3f:f1:00:3a:50:ac:bb:
         33:b8:1d:f6:ee:37:7d:1a:30:0b:c4:a6:ec:11:08:86:10:91:
         60:3a:40:ed:4c:f6:12:d6:49:26:7a:40:53:ef:11:a5:7f:4e:
         06:6d:02:a2:76:79:07:67:cd:e2:b4:26:e3:d5:4a:79:b3:c5:
         d1:4e:b0:5d:00:14:89:5a:ef:08:91:42:6d:ac:b1:08:f0:60:
         1a:aa:52:f8:e5:cc:7f:14:3b:0e:f7:47:17:8b:00:a0:7d:76:
         35:c4:14:16:e0:69:81:c9:8f:f8:dd:9e:65:ed:88:8b:34:cc:
         75:5d:cd:32:47:77:bf:24:d9:05:41:eb:4b:4d:e9:7e:a6:e0:
         01:11:3b:47:21:d5:fa:92:83:35:6b:13:a3:45:45:a3:f7:c6:
         99:ea:9d:79:92:92:87:49:da:ba:12:2b:66:91:52:5d:00:ef:
         7c:4e:7d:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnglk5iwEPCpJlKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MTE0ZTRiY2YtMzA2MS00ZWZmLTkxZDItYjhlODZjYWM5OTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEMXDBmO1JBUi1hjBMGHA6hfFFOa9HPd9vnH
81mN8iTqWLix9Q8MrKWM87NRe7lszz6MZlvWo+Im6LUOhvY0eUUqYC+ra8MwCgeX
geE+cHRK+QYKlmRW2FGZaLRxzpTA2NdHpyVEhh/wDEyX7ToPpnBEw1qd8SW2EMZn
97eQkHtBn7DlsijMGvJOuOIlUINjV98e8Qt4eKoOHQXoeWo0WSKpgjGekuXqhX6V
tXLI/M3UcySzX6RbSGRVcQF8hq75eUXDGF2SrxScZXKaEwllBXL5iVuJAiyIDauX
wdsSlSXm+rXXobK1wf+4fzEFaltdiHjsrOERit3ZLUJfnGlevQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCoYqQJEksKDT/zHkwI4SZQJLuqeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGRjNGJmMDItMWRjMi0z
YzQ5LWJmZDktMDE3ZTVkNWM2NjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokjyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALJF+F5nD2tEGOJ7jT4kyJ512SOg72xp7t7S9RKHBJ2YUqphceNkZoi+
m15GP0FFX3nEjy99jliX658tv5gK4RJyDdPWft8hGcUZSwKgn29KbZR3P/EAOlCs
uzO4HfbuN30aMAvEpuwRCIYQkWA6QO1M9hLWSSZ6QFPvEaV/TgZtAqJ2eQdnzeK0
JuPVSnmzxdFOsF0AFIla7wiRQm2ssQjwYBqqUvjlzH8UOw73RxeLAKB9djXEFBbg
aYHJj/jdnmXtiIs0zHVdzTJHd78k2QVB60tN6X6m4AERO0ch1fqSgzVrE6NFRaP3
xpnqnXmSkodJ2roSK2aRUl0A73xOfZg=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:56:12 2026 by rpki-client