Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c64baf19-94d2-3da4-a5ca-82b7fdcd0254.roa
File:                     c64baf19-94d2-3da4-a5ca-82b7fdcd0254.roa (raw, json)
Hash identifier:          Sid/ENEiGZ33kqw2HZtRauuVJr6TmefvAuznqLOGsGE=
Subject key identifier:   60:68:1D:9A:65:64:36:B6:D9:A9:00:CA:34:00:3C:2A:27:5B:3E:80
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79E03CDC739C9523C87A580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c64baf19-94d2-3da4-a5ca-82b7fdcd0254.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        162.72.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:03:cd:c7:39:c9:52:3c:87:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=60bd2e49-2a77-4d51-a606-2f8909b006e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9f:aa:cc:91:e1:5b:5f:f6:17:59:e3:9a:8f:
                    0f:fb:b0:fd:d0:fb:1a:ca:d8:c8:60:bb:9b:46:02:
                    f5:c7:b5:00:27:d8:78:1a:2a:be:af:44:cc:83:5c:
                    7c:5f:ca:ef:a1:89:87:ee:51:bf:75:15:fc:b0:17:
                    da:9a:ac:46:56:f5:f9:47:be:b0:83:07:b8:c2:4d:
                    7b:3b:a1:a7:62:92:75:24:d4:fa:01:ae:25:5c:51:
                    5a:65:79:29:0d:64:19:81:fc:b7:89:36:5e:6f:26:
                    44:ce:b1:0b:bf:6e:91:58:57:aa:c4:20:89:07:e5:
                    f9:7d:d9:d0:84:c5:23:99:46:4a:15:df:80:f3:8c:
                    dc:4c:a7:bc:c0:e6:c5:1d:8c:b6:5f:70:87:ef:75:
                    48:28:cd:b2:82:2d:91:f7:a1:02:47:f4:c3:c5:ee:
                    98:f3:53:3f:22:39:43:97:5b:ab:0a:14:e9:3f:8f:
                    df:3d:19:a6:49:02:66:1f:51:84:09:5b:4b:e4:46:
                    42:8f:4f:aa:fd:0d:2d:b7:22:c9:49:86:83:a1:b1:
                    02:09:f0:b0:cc:b9:ed:b2:86:31:df:0e:1c:67:a6:
                    6f:c5:ee:45:39:cb:23:1a:39:d9:07:74:77:77:ff:
                    26:69:ac:c9:61:69:32:76:95:de:33:b8:e4:07:28:
                    fb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:68:1D:9A:65:64:36:B6:D9:A9:00:CA:34:00:3C:2A:27:5B:3E:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c64baf19-94d2-3da4-a5ca-82b7fdcd0254.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:43:a6:ca:46:d7:1b:e5:c9:7d:cf:6c:a9:0c:25:d3:f2:26:
         26:7f:9a:bf:6d:ce:6e:e7:1a:54:a1:3d:f1:f9:2e:18:4a:c6:
         14:07:20:9d:5d:a5:c1:1d:13:83:ee:e8:c5:93:ed:d3:91:ac:
         e8:ac:62:da:d1:35:58:c5:59:6c:fa:0b:b4:cb:6e:e5:5b:f0:
         b8:7f:24:3d:2c:2e:0f:bd:2e:a2:1b:b0:8f:53:9f:12:c2:c3:
         ce:90:0a:3e:d2:8b:fa:79:4f:d8:52:26:38:ed:07:bc:d1:7e:
         89:5f:62:6f:aa:5f:b4:06:39:2e:4f:dd:cd:a2:b5:b3:e6:21:
         af:c3:bf:da:6b:45:df:f6:38:93:5f:07:70:d9:4a:ad:14:59:
         9c:28:14:f6:84:ea:f1:49:3d:f7:82:22:fd:51:38:01:d0:68:
         08:ac:49:8f:5d:3f:b5:cf:a2:e3:fe:7f:e0:e4:88:46:f8:8f:
         ce:61:4c:0d:fa:89:e6:5b:6e:d1:7a:36:8e:be:c7:05:de:1a:
         b5:5d:9c:71:bd:f6:53:8e:9a:5b:c9:27:bc:ac:b3:90:04:8b:
         fe:d2:32:fe:3f:36:0e:03:77:9e:cd:73:e8:7e:63:79:6f:f4:
         72:1c:b9:92:65:d8:00:ae:7d:ed:47:a1:a0:41:2d:0a:f3:47:
         1b:c9:2c:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nngPNxznJUjyHpYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NjBiZDJlNDktMmE3Ny00ZDUxLWE2MDYtMmY4OTA5YjAwNmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ+qzJHhW1/2F1njmo8P+7D90PsaytjIYLub
RgL1x7UAJ9h4Giq+r0TMg1x8X8rvoYmH7lG/dRX8sBfamqxGVvX5R76wgwe4wk17
O6GnYpJ1JNT6Aa4lXFFaZXkpDWQZgfy3iTZebyZEzrELv26RWFeqxCCJB+X5fdnQ
hMUjmUZKFd+A84zcTKe8wObFHYy2X3CH73VIKM2ygi2R96ECR/TDxe6Y81M/IjlD
l1urChTpP4/fPRmmSQJmH1GECVtL5EZCj0+q/Q0ttyLJSYaDobECCfCwzLntsoYx
3w4cZ6Zvxe5FOcsjGjnZB3R3d/8maazJYWkydpXeM7jkByj75wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGBoHZplZDa22akAyjQAPConWz6AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzY0YmFmMTktOTRkMi0z
ZGE0LWE1Y2EtODJiN2ZkY2QwMjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokiNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEJDpspG1xvlyX3PbKkMJdPyJiZ/mr9tzm7nGlShPfH5LhhKxhQHIJ1d
pcEdE4Pu6MWT7dORrOisYtrRNVjFWWz6C7TLbuVb8Lh/JD0sLg+9LqIbsI9TnxLC
w86QCj7Si/p5T9hSJjjtB7zRfolfYm+qX7QGOS5P3c2itbPmIa/Dv9prRd/2OJNf
B3DZSq0UWZwoFPaE6vFJPfeCIv1ROAHQaAisSY9dP7XPouP+f+DkiEb4j85hTA36
ieZbbtF6No6+xwXeGrVdnHG99lOOmlvJJ7yss5AEi/7SMv4/Ng4Dd57Nc+h+Y3lv
9HIcuZJl2ACufe1HoaBBLQrzRxvJLLQ=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:16:58 2026 by rpki-client