Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41b36feb-81a2-301d-ab71-63f1aa4e93df.roa
File:                     41b36feb-81a2-301d-ab71-63f1aa4e93df.roa (raw, json)
Hash identifier:          0BmVoh5S8TxUs8pveu6UJxaBxI03LXaxYhjAMEZ7Fwo=
Subject key identifier:   6F:92:B7:36:3A:9C:FD:F3:5C:0E:F8:74:23:1D:9E:F5:40:79:6F:18
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411AB2FADEEE865F5259E40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41b36feb-81a2-301d-ab71-63f1aa4e93df.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        70.41.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:ab:2f:ad:ee:e8:65:f5:25:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=e51b994e-1a02-445f-be2a-c94cd35a3a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5e:4e:79:96:09:01:fb:91:08:e2:ce:d7:ad:
                    45:43:e1:e8:fd:8f:a7:ed:96:2a:d6:d2:11:06:1a:
                    cd:89:42:44:72:35:25:2f:0c:53:b0:b1:2e:b0:7f:
                    85:6f:c7:fc:b4:06:45:97:10:82:98:5f:bb:53:92:
                    76:42:9e:ce:50:fe:e7:b2:28:5e:d4:ce:e9:64:26:
                    e2:55:ef:6d:1a:47:af:6e:b2:15:e7:7a:3e:7b:5d:
                    f8:bb:a8:7e:05:e3:11:b8:ec:82:f8:f0:f7:55:e3:
                    35:31:ea:27:6b:ec:68:e8:9a:3b:4f:f6:aa:90:59:
                    22:76:49:3c:66:47:39:34:2b:b7:5a:86:0b:15:77:
                    00:b2:d9:39:a7:d1:0b:e4:64:ad:56:69:c3:99:bc:
                    16:17:66:d7:3b:8e:43:0c:68:86:dd:2b:49:5f:ae:
                    8e:53:be:25:32:21:d0:21:1d:8b:6d:97:66:ef:80:
                    95:29:0e:0b:1f:f2:f5:f9:92:e5:0c:39:2f:ee:12:
                    84:78:fa:e8:cd:d6:20:fe:69:86:2a:48:7a:af:b2:
                    63:a7:4b:bb:c6:2d:c8:72:24:7e:40:1c:8e:e8:04:
                    a3:d1:2e:53:80:42:1b:bc:d0:be:b3:a0:1a:f7:5d:
                    59:bd:82:77:cc:8f:95:1a:c9:ca:9b:63:29:8e:59:
                    f6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:92:B7:36:3A:9C:FD:F3:5C:0E:F8:74:23:1D:9E:F5:40:79:6F:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41b36feb-81a2-301d-ab71-63f1aa4e93df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:f5:06:9d:62:fa:ee:1f:49:6d:e1:ae:bf:b5:b7:d6:42:d5:
         b4:d8:0e:3c:06:55:b6:0e:54:a7:f1:55:2f:73:91:6b:96:82:
         19:77:4c:87:31:f2:61:f2:3a:82:e4:8b:e3:f9:22:ab:12:21:
         c8:51:d8:9f:7e:ad:da:47:ec:c3:6b:ff:4a:08:10:38:eb:3d:
         b7:e4:c7:58:5d:c8:b2:30:79:0b:34:37:35:8e:1b:ea:f5:8c:
         cb:17:08:2a:12:a4:0e:be:f5:8f:9b:b9:60:af:22:00:c3:40:
         68:05:35:29:ba:43:3d:bb:f2:03:ed:77:e0:c0:90:53:4e:e5:
         bd:59:e6:1e:df:15:41:fd:ed:07:0a:0e:ea:dc:f2:60:89:28:
         24:ef:f6:b2:df:d5:29:3a:c1:14:61:b0:c2:86:35:6a:e2:71:
         7a:1c:86:05:1e:10:19:ab:3e:48:9d:dc:c4:71:9a:2a:03:f3:
         26:a6:b3:6c:09:0b:9d:23:18:a6:e0:37:d3:3b:18:04:2d:29:
         a0:ab:d6:f7:59:2e:17:6c:a7:aa:a0:5b:f1:bc:3b:ec:91:1d:
         dd:e5:92:dc:64:2c:22:e9:50:62:99:4c:5a:06:45:39:0f:e5:
         c9:5d:23:35:e0:b0:1f:ae:c7:e2:79:8a:c2:dd:8f:b5:d6:40:
         87:ea:a4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:08:00 2025 by rpki-client