Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1093d0a6-91ac-3780-94d4-c2ab80e579fc.roa
File:                     1093d0a6-91ac-3780-94d4-c2ab80e579fc.roa (raw, json)
Hash identifier:          Cc1NcpfIjRAe+CAeZt1NFGnxqIiddsvsN7fM1S4IPlE=
Subject key identifier:   13:46:7E:4D:09:50:90:55:45:21:55:2F:64:24:7E:B8:06:FB:61:59
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411AC5C84C2445E3DBFC177
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1093d0a6-91ac-3780-94d4-c2ab80e579fc.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        70.41.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:ac:5c:84:c2:44:5e:3d:bf:c1:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=7cff61e5-9b36-4f6e-abb6-f71a90b75ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b3:ff:95:35:dd:3f:e6:14:b8:d1:fa:8e:73:
                    b6:a3:83:34:e1:2c:76:aa:63:d4:9e:8a:c7:2e:cc:
                    03:ce:10:66:39:4d:08:3d:07:c7:6d:6b:00:31:da:
                    27:03:b4:5f:90:84:3c:7d:43:7e:1b:ff:7c:91:16:
                    84:86:fc:6a:74:b2:aa:46:1c:d2:f6:5a:61:a7:35:
                    54:6c:0e:f4:71:64:f6:a1:56:a7:c3:50:65:0e:7f:
                    40:08:ec:e1:98:7e:9a:12:f2:a0:5e:75:f1:f2:87:
                    11:62:7c:52:51:c6:86:1a:78:7f:d2:fd:b4:c2:38:
                    36:4a:ca:63:24:2f:d7:6d:2e:20:b9:44:34:9d:a0:
                    bd:6a:8b:1b:0a:58:3e:9b:8d:0c:7c:f9:96:75:f4:
                    7f:57:9a:d9:1f:45:c6:27:52:97:94:39:ed:92:62:
                    d7:f9:83:74:88:05:d2:ea:ee:11:b3:6b:73:ea:88:
                    82:37:60:81:0f:e2:6a:25:f7:dd:09:0d:fd:90:b5:
                    08:a8:aa:e1:b3:65:88:6b:a6:75:c3:00:a5:35:64:
                    b9:7f:c5:5b:91:b3:d6:1d:1a:59:24:12:e2:bd:be:
                    23:09:1d:fd:84:9c:8e:67:88:af:ea:dd:f8:63:b1:
                    4a:b0:e6:f9:a9:50:94:e8:57:da:9c:6e:20:29:56:
                    7d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:46:7E:4D:09:50:90:55:45:21:55:2F:64:24:7E:B8:06:FB:61:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1093d0a6-91ac-3780-94d4-c2ab80e579fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:92:a8:c1:a4:05:3e:1a:0d:68:08:9c:87:b5:87:b7:7b:14:
         ea:13:46:dd:28:7f:d4:2c:93:4b:b3:0c:9c:43:a8:6b:15:da:
         c9:29:8b:bb:b1:57:b5:9f:c8:78:0e:9d:c5:26:32:a0:38:4f:
         a3:7a:43:64:dc:6c:a2:9b:10:c7:cc:7c:ac:6f:62:c0:36:12:
         f4:4f:43:25:66:c1:57:fb:87:71:cf:fc:23:27:1e:04:14:90:
         a8:b5:93:b7:ce:c9:86:4b:b5:0c:f6:53:b4:ca:13:9b:f8:34:
         d0:0d:36:00:58:e1:49:fd:3c:f7:71:d9:0e:17:54:15:2b:53:
         12:88:43:fd:35:eb:a4:b3:25:44:4e:01:0a:a8:62:20:d3:ac:
         1e:e4:10:1c:03:4a:52:c1:92:b8:e6:c1:01:45:03:9b:22:ed:
         be:8e:20:ce:0e:48:8e:30:33:d7:45:bf:c7:33:f9:41:cd:a9:
         ba:1d:71:06:97:b2:44:c4:82:85:d7:cd:08:74:3e:f5:f1:cc:
         61:5b:3c:2c:28:6d:b1:e1:7c:ea:26:5a:54:ff:c4:fd:cc:fa:
         b1:9c:9c:fe:d2:67:6f:ed:2c:7d:21:50:f9:a0:33:96:37:86:
         44:61:72:93:c7:5d:4c:dd:f7:9c:cf:30:1f:06:c7:96:16:33:
         c7:83:a7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:13:59 2025 by rpki-client