Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7a4ddffc-93d8-3d27-b69d-dd535aa857e8.roa
File:                     7a4ddffc-93d8-3d27-b69d-dd535aa857e8.roa (raw, json)
Hash identifier:          TcCOhTLU3EF/XXnPWXGrCvOJAU+EW5lt2Qzik2AfBbw=
Subject key identifier:   F7:AF:61:5A:0E:27:0D:5E:CD:9B:90:C1:86:A3:97:B0:8E:A8:C7:C1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411068D7B40F2C2B4E00280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7a4ddffc-93d8-3d27-b69d-dd535aa857e8.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        70.41.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:06:8d:7b:40:f2:c2:b4:e0:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=9c871ffe-5911-468e-93ee-2057514bc10e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f1:13:96:b5:6c:f8:c0:e0:f4:38:65:7a:ef:
                    5b:38:ae:e4:27:c4:ad:a0:77:9e:20:3f:07:e2:c8:
                    70:f4:70:d5:2f:fc:04:06:b4:85:24:a7:39:83:56:
                    c3:db:c7:d8:58:2a:bd:b2:c2:d0:6c:fa:f3:55:12:
                    7e:fa:92:f3:b2:b1:2f:59:a0:57:ef:ad:81:cf:8d:
                    ae:ee:7e:ea:9e:4b:e9:be:4f:cc:b8:21:0a:7a:eb:
                    c9:bd:71:b3:75:57:21:44:e0:c5:70:22:a8:0c:19:
                    a0:b4:13:71:0b:45:7e:36:92:e2:5f:5f:f6:e9:75:
                    47:11:a9:b9:ef:50:0c:a0:92:33:cb:5f:f2:ce:9d:
                    f5:68:48:a9:e9:75:51:27:3e:e6:72:e9:37:bb:78:
                    86:20:de:a7:e3:65:10:b8:c3:80:b6:94:f8:80:93:
                    37:95:f8:13:be:3c:6f:5f:1f:7a:95:72:26:19:82:
                    b5:1b:7b:1e:8b:e9:31:36:a8:0d:ae:6b:64:e5:2c:
                    30:26:76:6e:87:d2:44:89:5d:4e:84:1a:14:b5:34:
                    2c:cd:44:56:29:f1:64:a0:2a:70:66:97:9c:d9:a2:
                    64:f2:c9:1f:06:2e:cd:ef:90:7c:9a:b7:87:be:dc:
                    69:d2:ba:7d:00:35:c1:eb:c9:f9:80:82:84:4e:82:
                    6c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AF:61:5A:0E:27:0D:5E:CD:9B:90:C1:86:A3:97:B0:8E:A8:C7:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7a4ddffc-93d8-3d27-b69d-dd535aa857e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:90:da:16:b5:f5:63:c7:9c:4d:6c:9d:cd:ec:18:d0:8d:f4:
         35:62:ab:39:00:36:c5:0e:56:da:14:ad:13:c6:6b:d5:fe:bf:
         9d:99:81:c2:9c:f0:2d:89:ec:7a:45:49:00:76:ad:2d:95:21:
         79:7d:b1:6f:5a:27:e0:cb:c2:5d:7d:53:3f:33:c0:98:fa:59:
         fe:d6:27:c0:90:45:4c:56:63:92:ab:c3:27:b6:1e:bc:db:0c:
         d5:d4:db:73:80:1b:87:58:06:22:89:11:7d:dd:54:8c:45:a8:
         18:84:07:22:8b:99:d3:ce:eb:2e:48:ef:d6:55:fb:97:8e:fe:
         1a:1b:b1:18:0b:43:78:f1:99:77:d1:98:cb:99:dd:c1:ff:17:
         96:62:1d:1b:3d:56:e6:c8:86:e6:7b:1c:84:09:28:0c:c8:8a:
         91:b3:b2:b7:52:38:2a:2c:8d:96:ee:e9:34:5d:32:11:b6:22:
         88:ae:d5:a3:93:f4:7e:60:6d:90:3c:33:0a:9b:ca:0c:80:18:
         56:b4:19:dc:f5:a4:03:e1:ec:7a:29:50:96:f0:aa:c6:48:a1:
         39:97:38:49:97:56:7a:5c:c4:00:58:ba:b1:4c:b7:6d:de:a6:
         28:02:7c:30:91:1b:b5:de:aa:5a:ac:bf:5e:81:a9:be:4a:88:
         50:22:e2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:03:48 2025 by rpki-client