Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3ac6c564-59d7-31eb-8b66-a27be99aa706.roa
File:                     3ac6c564-59d7-31eb-8b66-a27be99aa706.roa (raw, json)
Hash identifier:          ZDJnRNun546iCmxIybOAvDL5+lvY5DbgmnQ90KTqWnI=
Subject key identifier:   30:82:AC:9F:31:69:DE:41:31:04:FC:A9:6C:D2:9E:EF:69:A7:9B:3B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411A905A734C5E07145BEC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3ac6c564-59d7-31eb-8b66-a27be99aa706.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        70.41.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:a9:05:a7:34:c5:e0:71:45:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=f2fa638b-5a13-476c-8a66-1f0d9095ce1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d4:4c:89:b7:38:6d:35:72:30:67:db:42:2d:
                    e1:56:f5:31:9f:24:cc:4d:ef:5e:a3:f1:c5:c5:a0:
                    12:23:3d:76:d3:91:30:f6:47:ba:01:c3:c3:b3:d4:
                    7d:4e:47:d6:c8:70:f2:55:8b:56:cd:f4:e4:c2:c2:
                    ed:56:49:85:d3:5a:44:de:e0:ca:e9:e2:55:d1:e0:
                    68:db:dd:73:9b:46:dc:9c:ea:59:8c:73:1c:76:96:
                    73:c8:98:37:19:d2:a6:82:42:d6:29:63:0b:35:05:
                    f8:07:d4:9f:ad:7f:8b:23:62:c2:e2:57:4e:4e:81:
                    21:fa:dc:2d:a0:ec:86:28:d8:31:44:e7:28:40:0a:
                    24:10:2a:5c:fd:9b:43:0d:75:55:c1:44:47:67:9c:
                    be:70:8d:bd:60:a9:e2:43:24:fa:a7:ca:14:ba:ba:
                    3a:7f:e1:75:08:00:63:5b:2d:5f:1e:f7:40:a8:9a:
                    27:92:35:ce:90:da:88:81:69:72:6f:88:33:be:d1:
                    98:99:25:40:02:b6:d0:ea:c8:cb:c2:9d:76:1a:c0:
                    f9:e1:f5:9e:35:7e:f8:79:56:6a:01:48:ff:91:19:
                    af:ac:e9:30:73:c6:0b:ba:65:76:6e:39:e8:7c:82:
                    e5:13:d9:84:76:c1:4c:69:7e:8e:54:f3:b1:c4:87:
                    45:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:82:AC:9F:31:69:DE:41:31:04:FC:A9:6C:D2:9E:EF:69:A7:9B:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3ac6c564-59d7-31eb-8b66-a27be99aa706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:a6:80:1d:50:da:41:5c:8e:6e:a3:32:25:53:84:32:a7:58:
         b9:ac:be:20:ce:67:ac:ad:4b:47:a7:0e:9e:8a:ec:a0:f6:23:
         16:35:dc:88:e5:a6:9b:5f:c4:89:89:ac:f9:4c:dc:5d:9c:9e:
         8a:67:26:f7:c1:e4:81:b9:b1:7b:d5:e1:7a:84:43:52:99:70:
         6e:b2:9d:03:63:26:fc:6b:cf:94:26:32:12:ce:28:f9:49:2b:
         42:9d:d1:0d:64:be:5a:8c:8e:5b:b2:c9:f9:2a:7a:37:c8:ce:
         f1:3c:28:d3:9a:5f:3b:1d:29:aa:90:f8:26:77:3a:3d:60:64:
         f5:b4:34:77:e6:24:f4:b2:8a:c9:a7:27:ee:bb:2e:fa:fd:9b:
         24:b5:af:c6:6f:43:39:28:6d:90:1f:9c:28:f3:fd:81:54:80:
         e3:35:c3:e6:bb:b3:96:06:de:3f:05:ce:51:19:f6:5d:b3:79:
         9e:e9:9a:62:b2:ba:f7:02:6f:72:8f:4c:d9:d7:8d:35:fb:0f:
         ea:df:32:d6:03:94:df:e9:e3:7c:3a:aa:b3:45:73:17:a3:7c:
         81:8d:cb:d3:65:67:59:d2:ae:25:3a:84:28:2b:54:af:9a:00:
         d3:e7:c6:f4:c9:31:9c:df:f7:40:c3:a7:b1:45:a6:92:96:c3:
         71:5e:fa:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:05:38 2025 by rpki-client