Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a6e6ddc-4fc6-3076-9cb0-02e1f50ed650.roa
File:                     5a6e6ddc-4fc6-3076-9cb0-02e1f50ed650.roa (raw, json)
Hash identifier:          cTuh1oi7oSxTNcE41x42mxNS9GGiipU/iFUXH31gZz8=
Subject key identifier:   99:37:1C:66:E2:FF:18:E5:97:ED:8E:0E:41:A2:2F:50:FA:FB:52:72
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411AA6718E856EEF5072700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a6e6ddc-4fc6-3076-9cb0-02e1f50ed650.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        70.41.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:aa:67:18:e8:56:ee:f5:07:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=4f22686f-11cd-4c10-b080-faf7b13d2223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:08:d4:9f:3a:82:63:a6:06:b4:80:53:f1:5c:
                    eb:7a:bc:59:76:2a:93:a8:34:f3:76:9c:23:cb:2f:
                    a8:c6:00:8c:58:e8:bb:ec:6f:f7:67:b4:a9:e6:99:
                    f1:d5:22:29:eb:ca:b3:b7:92:80:30:fc:4c:36:af:
                    3a:54:7f:f6:a7:18:7c:87:32:56:04:0f:3a:ad:ce:
                    c1:a2:b9:9f:d6:8d:ad:ca:7f:0f:d4:60:d1:53:8b:
                    34:12:50:a2:d6:c1:80:e5:ae:87:c7:b6:b0:bd:d5:
                    74:65:18:f6:0e:13:ef:2e:fd:74:c7:a3:3e:43:b1:
                    d9:31:9e:cc:0a:ac:a3:a5:ba:34:10:3e:4c:3f:66:
                    d9:f1:4e:3d:ec:dd:65:b6:75:52:74:45:d1:d6:85:
                    ea:1e:85:e5:1a:68:ed:ff:77:75:a6:0f:eb:62:e9:
                    73:ab:f5:b3:72:3c:74:97:0a:97:9b:c8:76:c1:e6:
                    45:57:11:50:dd:78:55:86:cc:29:03:55:23:8e:75:
                    05:28:50:5b:30:04:f0:73:4c:4d:b3:42:c2:f5:b1:
                    23:62:ee:78:53:16:f2:7e:52:6e:9f:a1:05:d7:84:
                    23:54:bc:4b:16:77:19:68:6b:e3:31:91:db:f9:0d:
                    77:11:83:6c:79:34:70:2c:0f:b0:22:c0:98:9f:60:
                    a4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:37:1C:66:E2:FF:18:E5:97:ED:8E:0E:41:A2:2F:50:FA:FB:52:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a6e6ddc-4fc6-3076-9cb0-02e1f50ed650.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:cd:cb:0c:44:14:dd:47:75:1a:ba:35:3f:95:57:af:80:5b:
         8a:23:3c:ba:ec:30:e0:3f:e5:28:51:c5:3a:96:ac:87:d8:07:
         52:6e:de:04:d9:28:2c:45:df:45:cb:a0:ef:5a:93:93:9b:06:
         fd:b4:c1:9e:de:6c:06:eb:c3:9d:32:eb:46:3c:f1:59:53:5d:
         4d:b3:bf:0a:c3:4e:0e:36:84:4a:50:fa:1e:8c:59:3b:54:37:
         70:a5:62:fd:7f:28:b4:ad:ff:56:b3:a9:a6:ca:92:8a:9d:b9:
         52:25:6e:f5:40:87:b3:71:0d:2a:fc:58:4e:e9:23:84:a6:0f:
         97:f2:42:0e:f2:84:f5:8b:56:77:99:0a:3c:3f:cc:bf:38:27:
         03:35:88:87:08:c0:7f:e1:d9:d3:82:88:46:36:5e:16:52:8d:
         a7:c9:dc:d2:9c:ee:59:3f:37:3e:73:28:62:59:33:b2:aa:ef:
         c1:90:99:db:d9:f3:71:07:ae:e5:ac:2b:8c:ce:05:69:36:be:
         c3:43:d1:8b:86:80:eb:55:c0:16:a9:78:0a:43:ed:e5:a9:46:
         91:72:37:ee:b7:77:0b:ad:1c:9e:42:e6:59:db:da:95:49:bf:
         d5:b6:42:c2:b1:cf:d8:93:9a:45:dd:c8:4e:35:f3:b3:ab:54:
         fe:ec:72:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:08:01 2025 by rpki-client