Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/46ef4747-60f3-389f-a09c-aa0dd1f0e381.roa
File:                     46ef4747-60f3-389f-a09c-aa0dd1f0e381.roa (raw, json)
Hash identifier:          naulFJ4qMcTmQBvkcq0JPm6FvF+YrDi8IEwO8GGa2xU=
Subject key identifier:   CD:1A:23:D6:C3:75:51:26:13:CB:BA:65:E9:FF:7D:29:40:79:15:BA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411AC7DA3D34FFC1EFB3180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/46ef4747-60f3-389f-a09c-aa0dd1f0e381.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        70.41.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:ac:7d:a3:d3:4f:fc:1e:fb:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=b825762b-aefc-401d-91ed-e052c3c8427e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:db:ad:e0:11:83:f3:6c:15:8e:02:63:6e:e6:
                    d6:dc:f8:f3:5d:64:34:ed:34:8b:72:ca:92:5e:4f:
                    e4:bb:98:f6:ca:b4:55:5b:ff:ca:f0:8c:ba:c9:d6:
                    49:db:29:1b:a7:a3:6a:84:5b:0d:ac:05:df:50:c9:
                    a0:64:5b:41:0f:07:86:50:d5:76:e2:f8:f3:7c:4d:
                    bb:28:25:ca:f2:c4:dc:a1:d7:8b:84:6f:3b:a9:62:
                    1d:01:4a:12:7f:28:cf:5e:66:01:44:0b:94:3f:4d:
                    51:6b:bb:e1:b0:a4:84:1d:1d:3b:cc:71:75:79:76:
                    15:aa:bf:ea:41:5a:0c:77:a8:26:f9:3a:e4:a3:49:
                    58:f8:16:68:ba:a5:ae:39:03:16:52:9b:5f:aa:b9:
                    4d:37:09:93:85:92:0a:4f:07:74:0e:75:d5:9d:e3:
                    57:71:0b:bf:fe:c9:0b:a7:a8:c6:d3:dc:f9:97:59:
                    61:24:53:c5:2e:1d:42:d0:c4:98:57:85:8f:b1:1f:
                    96:31:4b:bb:e0:9a:d1:7f:f5:b5:de:8b:08:05:e0:
                    7f:d7:b6:0e:9e:aa:22:63:ac:71:07:cf:bd:95:79:
                    f7:1f:eb:af:52:84:97:7a:b4:f8:e9:75:16:e6:1c:
                    b4:72:4f:59:e8:49:6f:b3:76:8c:4c:8a:84:5f:2c:
                    cb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:1A:23:D6:C3:75:51:26:13:CB:BA:65:E9:FF:7D:29:40:79:15:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/46ef4747-60f3-389f-a09c-aa0dd1f0e381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:53:81:af:a7:d1:ce:4a:e2:11:b9:66:b5:d7:34:6e:86:e2:
         e2:eb:71:bd:b9:d4:85:21:c2:2b:08:d0:1f:e3:6e:5f:8e:71:
         c4:a0:a2:43:f4:32:ee:40:d5:8b:b3:6e:e3:70:e7:7d:b5:b9:
         45:db:fd:b9:a6:b3:a0:08:f1:4b:7e:1e:fa:7d:d7:49:26:0d:
         db:05:b6:29:04:87:21:40:e2:fb:2f:d1:1b:10:d4:40:8b:c2:
         90:8d:63:e9:4e:7f:a7:4f:de:e1:f6:ac:e5:bc:1c:14:6f:cf:
         13:6b:cb:8a:d6:3c:1e:60:6c:26:89:8b:09:8e:16:c3:8b:2c:
         61:47:c1:8a:fd:2f:53:f9:73:86:c2:b5:b4:4b:b8:b9:60:3f:
         54:dd:ed:37:a4:fb:88:8b:13:ec:f8:27:74:fb:b5:35:4c:53:
         31:e1:d9:5e:28:f8:35:e5:82:f6:1f:a6:8c:77:42:4c:1b:4d:
         b7:8a:3b:5e:c1:30:8d:b5:01:4f:e3:61:2e:3d:d9:40:41:4b:
         8c:fa:94:f1:cf:0e:4c:0d:a9:1f:52:08:4d:e4:d5:a0:8a:4c:
         ec:27:5b:7c:1d:56:69:13:6b:55:f6:57:b9:13:8b:a5:af:38:
         45:e9:02:69:b7:f2:4a:63:0b:d0:95:1d:f6:e6:2b:94:28:be:
         8b:58:3a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:04:00 2025 by rpki-client