Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7ebf2d3-5536-3bc1-8a37-44b21c1e8b44.roa
File:                     b7ebf2d3-5536-3bc1-8a37-44b21c1e8b44.roa (raw, json)
Hash identifier:          j/UVFtOGYdkqcymze/zAtluPRMdRaEwPJRlRDlaNEaY=
Subject key identifier:   72:C6:D9:C0:A6:D3:F1:D6:BD:89:C2:ED:69:30:5E:69:A8:9B:7D:7B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F4983B2CDDD3E86260D6BD800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7ebf2d3-5536-3bc1-8a37-44b21c1e8b44.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        162.72.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:b2:cd:dd:3e:86:26:0d:6b:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=70cf02d8-9494-40e4-ba1f-6d732a517042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:af:93:4c:97:3d:39:ec:1b:0c:e8:d5:ad:1f:
                    03:11:4e:e7:c7:f9:eb:77:38:7b:7e:2b:6e:a2:f8:
                    ce:48:1f:c8:47:92:06:67:a3:ac:49:46:f7:6d:3c:
                    d4:97:8f:c1:ce:45:3a:14:17:d7:ea:3e:de:61:25:
                    a4:95:d5:9b:7f:61:5e:bf:b8:3d:0f:95:ab:c4:58:
                    90:d5:21:61:68:61:60:ad:ae:fa:59:6a:7a:ef:c9:
                    86:0d:67:8c:ae:e4:d3:f9:6a:62:45:26:7b:dc:44:
                    6d:d1:6f:f2:9e:a7:eb:f1:85:65:3f:76:e0:81:20:
                    ac:18:5e:cd:ed:61:7a:f7:45:37:e3:be:fc:8c:5d:
                    b6:8f:ea:60:49:ca:2c:d3:eb:82:26:b1:58:91:6a:
                    55:eb:79:b9:d8:21:cd:e8:46:93:47:c3:13:08:11:
                    b6:da:90:28:4f:b2:a2:d0:dd:6e:8e:3a:94:96:d7:
                    06:4e:0a:7e:da:6e:20:a2:5c:e1:f7:06:ff:23:03:
                    3e:35:75:d2:de:fe:5d:c4:d1:98:f5:7e:4a:7b:f5:
                    b1:df:6a:2b:92:9b:ed:ac:61:16:65:93:65:3a:ab:
                    21:a3:bd:9f:31:c0:be:10:81:e7:ea:cb:52:74:d0:
                    76:9a:ea:62:7c:f9:e2:f2:91:b4:b3:16:5e:8f:d2:
                    de:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C6:D9:C0:A6:D3:F1:D6:BD:89:C2:ED:69:30:5E:69:A8:9B:7D:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7ebf2d3-5536-3bc1-8a37-44b21c1e8b44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:5f:85:05:25:e9:37:2a:5d:2d:22:5e:ef:2b:cd:f6:03:64:
         15:b6:51:d2:43:73:b4:61:59:16:8d:0d:05:66:22:65:f1:65:
         28:9a:90:3b:e7:52:99:85:18:c1:9e:f0:66:a7:f7:2c:b7:27:
         b9:13:dc:4a:8e:07:0a:c9:2b:ae:c3:84:36:ec:39:53:93:11:
         a5:db:4c:c5:90:15:60:9c:2c:62:9e:0a:2e:a5:a5:89:1d:4a:
         7d:89:ee:eb:c8:50:54:44:29:a4:00:fc:81:af:27:d3:74:03:
         bc:7e:b4:66:aa:3c:36:8f:2f:ba:b6:38:09:22:52:2c:78:e8:
         ee:09:fa:87:0d:9e:08:e3:ba:51:fd:18:a7:d6:7c:7d:bb:95:
         b1:db:70:25:3e:29:cb:ac:42:4e:4b:84:20:5b:5e:98:26:aa:
         d7:3e:cb:1d:06:78:5e:f4:13:cc:d3:60:56:34:05:ee:ca:56:
         95:6e:12:2a:04:a7:25:00:f4:f8:d7:a7:f7:cf:ca:33:0d:be:
         af:21:6b:cb:6f:7d:ab:ee:fb:0c:6e:c1:df:ff:ab:9f:79:75:
         d5:46:00:ad:03:99:08:b4:11:85:46:dd:80:d8:de:64:f5:5f:
         6d:67:a2:3e:51:f9:69:0e:0e:6a:11:78:8b:4c:28:0e:ae:f0:
         82:21:30:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:23:29 2026 by rpki-client