Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aba35759-eadd-3b75-9e40-6dbf1b355795.roa
File:                     aba35759-eadd-3b75-9e40-6dbf1b355795.roa (raw, json)
Hash identifier:          uy1AyyZ0rlY1RNRf9umOpOY118ofmqHIn2S5Y7qZqcE=
Subject key identifier:   40:41:10:5D:C8:52:96:67:DF:4C:97:04:52:92:A3:BE:A9:24:4C:9A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79FAAD889DAC0F524BACF00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aba35759-eadd-3b75-9e40-6dbf1b355795.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        162.72.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:aa:d8:89:da:c0:f5:24:ba:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6a53b3fc-741a-45c5-b2dc-12e569c7dc8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b5:5a:4c:60:bc:6b:fb:46:a7:93:c4:42:ee:
                    e7:69:18:f9:0a:e2:ab:0f:8c:25:f2:f4:52:2d:d5:
                    dc:3a:9e:73:95:74:38:1a:ab:1e:3d:d4:19:4f:5b:
                    73:c3:b0:78:37:47:c3:35:3d:25:f2:cd:47:00:e9:
                    e6:e1:b1:34:5b:3c:d2:77:39:8e:79:4a:62:18:69:
                    00:6d:98:c9:52:8a:af:a7:91:48:70:fa:c7:6d:ac:
                    29:57:ad:a9:ae:92:fd:a7:9d:c1:a8:25:22:5c:74:
                    03:34:aa:7c:78:35:d5:af:ce:2e:f0:88:bd:ca:85:
                    82:01:a4:1a:4f:65:55:69:6f:c0:1d:71:20:1f:fe:
                    ad:8a:8b:e5:81:a9:69:72:25:f6:37:dc:ce:35:fa:
                    8b:80:ae:b2:92:8d:cc:c7:c3:ff:37:f7:97:5d:42:
                    32:1a:10:c5:be:da:47:24:94:cd:50:fa:9c:a4:af:
                    cd:3d:5c:2d:49:9f:54:83:c9:b3:0f:0a:13:8e:fc:
                    a3:49:c1:8d:39:56:37:4c:ff:3f:fb:a9:43:39:88:
                    89:b8:a1:51:e6:12:85:14:dc:90:92:b1:b0:5a:f4:
                    a2:d0:bb:c3:74:80:ed:74:bb:97:b0:f4:53:8e:35:
                    14:8b:2d:a6:ce:16:93:bf:03:cb:30:cf:64:5d:24:
                    76:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:41:10:5D:C8:52:96:67:DF:4C:97:04:52:92:A3:BE:A9:24:4C:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aba35759-eadd-3b75-9e40-6dbf1b355795.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:41:7e:22:f7:b3:7b:a3:63:3a:51:5d:3f:7e:75:ba:3f:6d:
         84:e8:6f:2d:01:65:aa:cb:12:d5:fd:b2:28:bd:f2:8e:38:08:
         3c:19:8f:d7:7c:16:26:a2:b2:1b:c2:7c:70:ab:57:9f:94:ba:
         ef:1a:bc:41:6c:40:14:fd:95:87:bd:9d:37:f8:46:a3:b1:18:
         83:22:97:be:d7:f8:1a:be:5e:a7:8e:5b:6b:36:35:6f:cb:69:
         bf:4e:f3:dd:15:83:aa:32:f1:ef:7c:c5:90:0e:37:a4:c3:2e:
         79:09:ba:b4:4c:cd:94:ae:d6:41:ce:84:2d:4d:15:4c:17:91:
         86:e1:81:aa:82:7a:81:6f:86:e3:07:1f:89:44:b0:13:6b:25:
         36:09:58:77:1f:62:f9:b5:db:d4:49:97:8b:4a:ac:26:8a:5e:
         e0:07:84:04:17:26:e7:d7:86:99:c1:e6:54:37:02:cc:69:2e:
         d0:63:68:cb:b0:d7:e7:ad:8e:18:00:36:f9:e3:24:b3:e0:ad:
         ab:22:68:9c:30:ad:21:49:e6:21:7c:0b:a2:1b:41:66:9e:27:
         74:f7:cb:6c:66:27:19:08:fb:15:66:5a:8d:f0:1e:1c:76:fe:
         76:86:48:4b:2e:53:5a:4d:e6:7e:f0:f2:e3:e2:f0:1a:e2:61:
         b3:7c:d6:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nn6rYidrA9SS6zwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NmE1M2IzZmMtNzQxYS00NWM1LWIyZGMtMTJlNTY5YzdkYzhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLVaTGC8a/tGp5PEQu7naRj5CuKrD4wl8vRS
LdXcOp5zlXQ4GqsePdQZT1tzw7B4N0fDNT0l8s1HAOnm4bE0WzzSdzmOeUpiGGkA
bZjJUoqvp5FIcPrHbawpV62prpL9p53BqCUiXHQDNKp8eDXVr84u8Ii9yoWCAaQa
T2VVaW/AHXEgH/6tiovlgalpciX2N9zONfqLgK6yko3Mx8P/N/eXXUIyGhDFvtpH
JJTNUPqcpK/NPVwtSZ9Ug8mzDwoTjvyjScGNOVY3TP8/+6lDOYiJuKFR5hKFFNyQ
krGwWvSi0LvDdIDtdLuXsPRTjjUUiy2mzhaTvwPLMM9kXSR2GwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEBBEF3IUpZn30yXBFKSo76pJEyaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWJhMzU3NTktZWFkZC0z
Yjc1LTllNDAtNmRiZjFiMzU1Nzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokiYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEZBfiL3s3ujYzpRXT9+dbo/bYToby0BZarLEtX9sii98o44CDwZj9d8
FiaishvCfHCrV5+Uuu8avEFsQBT9lYe9nTf4RqOxGIMil77X+Bq+XqeOW2s2NW/L
ab9O890Vg6oy8e98xZAON6TDLnkJurRMzZSu1kHOhC1NFUwXkYbhgaqCeoFvhuMH
H4lEsBNrJTYJWHcfYvm129RJl4tKrCaKXuAHhAQXJufXhpnB5lQ3AsxpLtBjaMuw
1+etjhgANvnjJLPgrasiaJwwrSFJ5iF8C6IbQWaeJ3T3y2xmJxkI+xVmWo3wHhx2
/naGSEsuU1pN5n7w8uPi8BriYbN81rE=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:16:19 2026 by rpki-client