Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a63abb99-b809-3a1c-ba68-3d3704a944e5.roa
File:                     a63abb99-b809-3a1c-ba68-3d3704a944e5.roa (raw, json)
Hash identifier:          nBWqrOQN3V/f1iVxTyJcv+AmYcaSIrpEYLT3N3vi+og=
Subject key identifier:   80:BD:84:92:A1:38:95:0E:CE:E7:00:F2:79:61:9F:99:0D:F0:8C:60
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B91417DE5CACFB93E1EC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a63abb99-b809-3a1c-ba68-3d3704a944e5.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        162.72.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:91:41:7d:e5:ca:cf:b9:3e:1e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=1b44f194-3b1b-4952-89fd-27768b44cb68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b7:54:82:1c:59:81:6a:da:f3:85:3b:9a:24:
                    01:13:60:d2:6e:36:b4:bf:95:98:5a:01:75:47:de:
                    8c:b4:27:23:6d:7c:d4:1c:98:ed:c7:a0:a2:4a:1f:
                    03:03:73:b5:58:df:69:f5:e4:f3:43:53:8a:ed:ab:
                    45:c5:df:7d:51:0a:da:ae:71:e5:3b:d7:0e:ec:7d:
                    c3:15:06:b4:57:a8:90:0a:68:40:2a:b3:44:46:51:
                    9f:8e:e5:74:5d:8d:56:c3:b1:6a:70:b3:e8:58:df:
                    d7:4f:ac:7c:1d:dd:92:d1:94:c4:a8:d4:2b:3d:1a:
                    36:74:01:08:ca:93:05:0d:79:a8:c5:ba:16:52:b8:
                    63:56:06:64:e2:ca:6e:64:19:82:b7:4a:2c:4f:b5:
                    b6:d3:e7:da:48:72:f3:b6:e0:77:c4:39:ff:4b:b1:
                    1d:ae:f6:02:03:03:53:45:ff:4d:d9:a6:9a:87:a7:
                    6e:6a:39:20:25:4f:19:f0:ea:10:53:54:17:88:95:
                    e1:7a:e9:00:91:35:10:c8:b7:d4:7a:ea:1e:d9:86:
                    15:3d:a9:99:b5:ba:8d:02:9b:83:58:8e:49:fd:d0:
                    38:59:50:b0:b3:12:c3:cc:66:aa:de:a8:2a:c9:b6:
                    af:92:20:01:e7:e1:d5:2e:dd:2c:ea:e1:93:7d:aa:
                    2d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:BD:84:92:A1:38:95:0E:CE:E7:00:F2:79:61:9F:99:0D:F0:8C:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a63abb99-b809-3a1c-ba68-3d3704a944e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:7a:4e:5c:2b:a8:0a:bc:18:65:be:c4:e5:f0:28:0f:11:0e:
         5d:0d:59:ee:bb:89:f3:d2:31:e6:46:fd:44:6d:0b:f1:ad:e0:
         9d:2d:31:ce:3b:3e:07:18:0f:45:9e:6b:28:c9:9a:33:26:5d:
         5f:c0:e2:db:84:07:0e:20:b2:44:ac:49:cb:c7:56:2f:c1:68:
         d7:fc:20:3a:73:99:b6:d3:eb:9f:90:59:07:07:f1:68:9b:00:
         60:7d:d3:16:b6:a6:b5:bb:f2:7e:f7:73:28:3f:92:d0:df:a5:
         f7:af:6e:38:26:39:ad:1f:cc:90:43:76:f6:40:99:20:56:2e:
         46:0c:05:5e:09:20:7d:04:7b:21:17:2a:b8:a8:7a:78:fb:d8:
         98:45:f0:fe:6a:64:5c:9a:31:dc:55:f7:0f:c1:9b:78:96:58:
         c8:2f:dd:9e:3e:46:de:e6:cc:10:b6:3d:de:61:7b:60:41:d9:
         fe:f9:90:31:b7:18:52:42:b2:0a:ef:8b:3d:8f:f9:07:ba:22:
         24:14:40:83:c6:2b:c4:88:37:b0:48:c6:73:09:1d:83:ef:85:
         ab:67:d3:4f:f3:0f:36:7f:74:b6:ee:38:f2:fa:bd:2a:5e:ae:
         7c:81:a5:40:36:02:7d:6c:4d:93:95:40:17:de:8c:0c:56:e2:
         4f:e3:7c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:46:44 2026 by rpki-client