Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e07b0015-379b-3d1a-bae4-4a5f7abd5c2c.roa
File:                     e07b0015-379b-3d1a-bae4-4a5f7abd5c2c.roa (raw, json)
Hash identifier:          9MibC9y+CZitodG4Rb/mV/sId0OwBp04SfAu3jjaayA=
Subject key identifier:   05:09:B8:DC:9C:AB:EB:94:48:AD:39:A3:DB:A3:20:C3:39:53:D8:B8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79FA84C6DA192CEC3D01D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e07b0015-379b-3d1a-bae4-4a5f7abd5c2c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        162.72.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:a8:4c:6d:a1:92:ce:c3:d0:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=42607669-72c1-4f9a-9ac7-eef205ca5fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9e:0d:a3:3a:ba:ad:01:ba:42:18:00:f3:da:
                    e2:a1:8c:7f:4c:45:92:ed:87:94:92:59:a8:5f:de:
                    4e:37:ab:fd:d8:ab:71:9f:fe:29:04:fe:8e:63:d9:
                    f5:85:eb:d3:aa:cd:7c:d7:b7:4b:36:fe:54:24:79:
                    31:d3:03:d3:4c:51:6a:29:23:a6:d8:5d:b9:32:26:
                    35:24:c9:b6:bd:ab:0f:e4:36:64:04:53:96:8a:3e:
                    fa:f0:ba:5d:8a:f1:63:93:3b:23:78:50:32:15:0d:
                    ba:1e:7b:83:fb:3f:f9:61:49:77:c2:aa:df:b9:bb:
                    d4:e8:0e:c1:af:17:aa:66:ab:60:e6:02:6c:fd:e6:
                    dd:9d:1b:08:66:a1:87:f0:92:7d:80:43:6e:2c:18:
                    63:c4:94:13:c9:25:48:bc:25:5e:28:76:bf:2c:b9:
                    9c:a8:a8:71:d9:3f:c0:c9:bb:81:7a:bb:75:80:f4:
                    cd:83:c8:01:7c:8a:db:b1:ba:2b:e3:bf:10:df:2a:
                    82:b3:64:54:ab:0c:ee:eb:e2:f2:c8:49:97:78:48:
                    60:50:29:02:1f:58:03:ae:de:58:52:e5:07:8a:22:
                    5d:7b:98:af:b3:6c:36:45:2e:5e:00:66:62:07:a4:
                    71:64:2d:43:9e:0c:df:4f:bd:d2:8a:d5:39:28:1c:
                    69:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:09:B8:DC:9C:AB:EB:94:48:AD:39:A3:DB:A3:20:C3:39:53:D8:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e07b0015-379b-3d1a-bae4-4a5f7abd5c2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:a1:cc:1b:c4:68:9e:95:8c:26:d6:86:31:48:94:79:7c:62:
         fb:91:f2:15:94:06:9e:4f:5f:90:d1:a9:91:73:6c:1e:00:ed:
         ae:df:06:ba:c6:da:c3:fe:98:a2:5c:ff:37:5c:2f:63:9d:35:
         6d:8d:f1:ef:8d:bf:b3:12:27:a6:ec:fc:bd:74:d3:a8:9f:b6:
         93:a2:81:76:cf:17:c4:44:c8:41:80:b0:de:91:2f:06:78:31:
         af:34:65:22:90:bc:8c:5b:9b:ef:d9:51:d5:df:76:ef:40:05:
         5c:e7:a5:80:12:9b:cc:87:f5:f2:f9:0b:ff:bf:7c:49:01:48:
         f9:7e:b0:c8:36:9c:a8:83:56:c1:75:f8:24:6f:1a:b7:8b:8a:
         93:29:31:ae:a5:6d:23:ae:e5:92:44:f6:a9:dc:5e:10:73:3a:
         af:18:93:c2:23:c8:fb:83:88:ed:dc:3e:f0:eb:e2:bd:99:1d:
         ba:5d:64:f8:37:6e:8b:f4:d0:32:b1:34:60:06:05:f0:0a:0f:
         7a:95:4d:9f:5a:88:84:bd:c4:1d:db:d9:21:82:6d:2a:c0:ad:
         c9:54:68:5f:ad:0c:2e:c3:66:70:e0:e1:a5:3f:32:4f:ed:c4:
         f8:5a:a5:a5:a2:b7:7e:52:ae:dc:cd:f1:d1:48:e6:1f:aa:12:
         2e:4d:33:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:57:48 2026 by rpki-client