Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c64bbcda-2420-3f84-99d1-ec13b5a57964.roa
File:                     c64bbcda-2420-3f84-99d1-ec13b5a57964.roa (raw, json)
Hash identifier:          tJSWoNfkvsXvk0TI/rl9E18/c5UKTOmTL79JknRRqdo=
Subject key identifier:   9D:00:5B:65:15:10:D1:E8:78:28:3F:AB:13:BE:CE:38:23:22:77:1D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79FA1BCF8BDEDFE99C80A40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c64bbcda-2420-3f84-99d1-ec13b5a57964.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        162.72.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:a1:bc:f8:bd:ed:fe:99:c8:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f3206ae5-5f8e-412a-a45a-b3feebc92ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0c:72:0e:90:e4:fc:fd:71:bd:cb:b5:2f:5f:
                    cc:69:4e:51:7b:86:1a:bd:84:51:b6:3b:6b:d7:97:
                    e4:21:2b:41:37:0e:28:59:40:1e:f3:7c:5c:b2:c0:
                    c8:f6:5b:a5:38:3d:11:fd:99:6e:f9:a6:70:0c:48:
                    9b:d6:3a:1b:35:46:e4:77:65:a7:08:17:d7:3b:22:
                    f9:52:97:bf:cc:af:95:05:ec:3b:b3:32:c0:e7:fa:
                    52:98:7e:b4:be:c8:34:6c:d8:7e:97:44:ac:86:8e:
                    e3:d7:a8:f2:75:7e:d3:8b:00:c8:79:be:4e:6c:70:
                    b0:fc:1f:3d:8c:9f:de:9e:88:9e:c9:81:a6:04:13:
                    17:8b:d0:b1:cb:f4:6b:c5:a1:8c:37:5d:2c:ee:a8:
                    3a:b9:5a:32:82:54:58:46:a0:46:c9:2a:51:8d:6a:
                    12:e4:07:55:64:80:40:63:73:f0:86:13:0c:5c:03:
                    d0:58:ca:e4:4c:10:44:13:eb:9e:14:c8:a6:b3:f1:
                    e2:fe:bd:3a:21:ac:92:41:f9:62:a7:d4:69:62:57:
                    bb:00:8e:a8:2d:4f:20:c3:d4:49:56:7c:e0:6c:37:
                    2a:db:40:73:28:a7:f5:52:7e:3a:cb:fb:47:21:23:
                    9c:63:f8:46:61:00:6a:de:39:26:58:f5:aa:46:65:
                    dc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:00:5B:65:15:10:D1:E8:78:28:3F:AB:13:BE:CE:38:23:22:77:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c64bbcda-2420-3f84-99d1-ec13b5a57964.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:33:7a:80:28:85:24:86:f5:0e:07:f6:aa:f6:ef:4a:d8:7c:
         19:81:21:d5:bf:82:6e:3a:aa:46:93:d7:0f:db:b1:a5:80:f6:
         d7:af:1a:cc:17:2f:b7:71:f4:0e:46:38:22:89:f9:28:bd:3c:
         6a:48:34:b3:76:95:24:36:1e:29:5b:46:99:cc:70:c4:3c:14:
         b7:c3:43:4b:9a:6a:c2:93:0d:1e:f5:c2:e6:b9:87:d0:c1:34:
         a9:0e:f5:13:75:25:9e:7c:b8:12:69:cc:c2:9a:1d:9f:2e:bf:
         7b:ae:fd:e0:d9:64:c6:fa:3f:44:a6:99:f5:6e:e4:77:c7:f4:
         a6:35:fc:bb:e1:1d:18:55:fa:ea:41:ac:0c:0c:54:22:e5:3c:
         0d:d4:73:fe:0e:7d:f3:05:26:9a:a5:a8:e7:1a:bb:c9:65:3d:
         21:de:97:11:eb:91:af:e6:08:fd:2b:8c:9b:12:da:c9:17:ed:
         66:55:1b:b7:4a:44:ff:a0:ac:c5:b2:f1:04:13:08:6d:0b:c4:
         65:07:94:d2:4d:7c:c5:41:3c:2e:90:0b:a0:86:e2:6e:0f:eb:
         53:87:ed:13:d3:02:7a:a1:57:88:e6:af:02:45:de:06:42:0b:
         15:15:09:3f:59:32:3d:95:54:aa:14:b2:1c:5c:4c:ec:04:d6:
         22:74:8b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:16:06 2026 by rpki-client