Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4e0d96e0-6584-3ce7-a2c6-b946d3763c22.roa
File:                     4e0d96e0-6584-3ce7-a2c6-b946d3763c22.roa (raw, json)
Hash identifier:          HPM52MJrBOzrYqSpth59bno3wNYF6TkDm06fWb3gVYQ=
Subject key identifier:   03:20:ED:70:E4:E8:F6:CD:39:EB:FE:02:4C:FE:3F:0B:AC:00:76:C0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84110048509ABD91D87BC2E0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4e0d96e0-6584-3ce7-a2c6-b946d3763c22.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        70.41.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:00:48:50:9a:bd:91:d8:7b:c2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=dce9b47d-69c7-4701-a78a-6e24c796a3e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1d:62:a0:6c:5a:ab:ba:72:f7:dc:64:6e:83:
                    e9:86:96:79:13:79:50:2e:35:fc:a3:7f:37:a6:5c:
                    d8:66:f5:dd:90:bd:df:85:a1:4e:70:ff:b8:2a:0a:
                    1b:01:63:c8:59:6e:7c:a9:a0:35:87:b5:0d:d6:4c:
                    27:2a:31:75:38:71:3d:e6:3f:b2:11:36:48:7f:c8:
                    f2:a1:9f:58:80:71:56:99:5f:bd:d4:d8:b1:ff:6a:
                    8c:b8:4e:3f:00:36:44:f2:82:54:6a:3b:bd:5f:f9:
                    3d:ec:7b:80:f2:c7:25:62:e1:7b:61:9b:36:96:dc:
                    fd:e8:f8:03:ea:d8:7b:3a:bc:00:c3:ea:cd:d8:44:
                    ff:c3:ff:38:0f:0c:6c:7b:2b:de:7f:d3:f8:e7:78:
                    ea:ff:0c:fe:ff:f9:27:93:c8:94:34:19:47:77:2b:
                    6b:7f:12:37:c9:77:06:fd:08:d6:6e:96:f3:06:7f:
                    67:f8:34:c7:bd:83:1c:d0:14:b5:20:26:17:ef:37:
                    8e:2d:16:9f:1a:6f:4e:03:3c:87:e7:6d:6b:e2:4c:
                    38:c7:1f:b5:26:67:a0:5f:e0:49:4d:9d:5e:92:60:
                    78:5b:8f:02:e0:c0:2c:e4:ce:6e:2d:0e:2d:57:f6:
                    a8:91:8e:df:9b:64:cb:26:96:30:bf:07:76:f6:97:
                    3b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:20:ED:70:E4:E8:F6:CD:39:EB:FE:02:4C:FE:3F:0B:AC:00:76:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4e0d96e0-6584-3ce7-a2c6-b946d3763c22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:c4:9f:31:59:50:f0:9a:24:18:27:2c:04:1b:51:27:23:f1:
         aa:cc:aa:f7:a1:21:20:7d:e7:60:48:31:75:c2:dd:ba:23:85:
         fe:10:9e:1a:d3:27:73:c7:2d:57:6c:5e:d1:4f:b5:32:e2:df:
         38:52:4b:24:52:e3:9a:37:f2:77:dc:ac:1d:41:a4:00:ba:f4:
         bc:dd:a1:c7:d4:47:76:f5:85:2a:10:96:2f:a0:45:39:4c:f0:
         ca:d8:3e:97:05:a9:ff:cf:12:e3:92:f8:5f:c4:05:8a:12:15:
         55:1e:1a:b4:f7:77:86:f7:c1:5a:56:15:34:65:04:eb:08:8a:
         97:db:81:27:a5:be:bd:d8:e8:0c:62:2a:1e:73:f9:1e:23:bd:
         58:40:71:34:56:98:92:46:ca:8a:cb:ee:4e:22:8c:82:b5:42:
         26:68:d9:91:68:bd:6b:a0:59:97:a4:e7:77:ba:ed:67:da:6e:
         bd:60:b6:c3:64:0a:b4:74:95:f2:83:71:7f:2f:44:1a:32:a3:
         30:91:77:b6:69:22:de:b2:be:38:e8:18:c2:66:27:3f:3f:7f:
         af:f2:ad:bb:ea:3c:32:dc:13:a0:3d:aa:7b:84:a2:ef:50:a7:
         62:2b:bf:6c:1f:7a:d4:26:f0:3d:b0:b3:86:04:65:60:71:a4:
         99:51:a2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:05:46 2025 by rpki-client