Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ed936c2-b7e5-3997-82d7-cc1780db4fae.roa
File:                     9ed936c2-b7e5-3997-82d7-cc1780db4fae.roa (raw, json)
Hash identifier:          eF+Scn6eI6PrCEbdcRHX//T5drLRtFOAH7eLITVCIso=
Subject key identifier:   DE:54:6C:40:2D:40:D6:9D:D8:5B:73:95:81:A3:DC:E3:99:DC:78:62
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411AA8D08301056D717CBC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ed936c2-b7e5-3997-82d7-cc1780db4fae.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        70.41.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:aa:8d:08:30:10:56:d7:17:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=3d3ec2fd-05d1-4721-9053-2f5b77e2cf79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:46:c8:e6:b6:13:0b:bb:15:e3:4b:f0:a6:46:
                    c8:6e:f6:96:05:bb:ff:9a:48:eb:68:50:37:46:97:
                    d7:00:df:4b:22:2e:ae:5a:ef:73:53:03:ed:28:a5:
                    d5:43:d7:81:7c:53:f5:bc:71:01:12:3d:a0:e6:f1:
                    ce:0d:d4:b8:a2:96:87:86:a2:f0:f1:4f:d9:18:2d:
                    67:e2:41:77:72:7c:5c:0e:76:7f:eb:ed:b8:26:61:
                    ba:6a:13:02:93:f1:24:bc:b8:33:e8:a5:67:bf:a0:
                    ea:a2:48:39:18:31:03:20:5a:df:8b:4f:6e:01:71:
                    8f:f4:2c:f2:06:76:d8:52:88:0f:71:f6:1f:56:3c:
                    2f:f3:37:ea:cd:c1:7e:9b:09:86:25:b8:de:79:0e:
                    17:09:a5:67:a5:cc:87:ad:0d:96:55:80:d6:05:45:
                    ff:49:01:f8:5c:75:70:c3:72:28:73:82:4f:3d:79:
                    fb:ff:c5:6a:1c:aa:63:c9:2d:a3:9b:4b:46:d2:e9:
                    d1:eb:74:46:01:27:22:b3:a4:d8:ce:a0:e8:b2:2a:
                    c5:e8:05:fe:6e:fd:df:b6:71:56:44:29:7f:81:77:
                    95:c1:e8:68:b7:d2:d2:2f:65:c0:97:f1:03:f4:f0:
                    27:6a:ea:17:e9:66:f8:61:b1:d2:2a:e3:b0:22:37:
                    ec:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:54:6C:40:2D:40:D6:9D:D8:5B:73:95:81:A3:DC:E3:99:DC:78:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ed936c2-b7e5-3997-82d7-cc1780db4fae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:0b:6f:cb:f8:4b:77:b9:f5:d7:96:ca:51:73:0c:36:b2:59:
         96:c2:c2:52:95:da:07:6d:54:44:8e:eb:41:bc:6f:c1:dd:cc:
         13:8c:31:8e:41:1f:f3:94:a0:58:c6:61:9b:97:c3:90:03:4c:
         a1:b4:cc:c4:55:0b:d4:c1:b6:c2:37:67:b4:0d:2c:a3:9e:89:
         8e:69:b1:30:94:68:ca:de:7f:1d:c4:f0:f5:ef:fc:ca:88:82:
         37:46:b7:33:f4:48:88:48:c3:ca:2d:3b:bf:ed:b8:7b:62:7d:
         a5:17:57:75:ba:ab:dd:d2:5b:dd:d6:99:7f:94:01:c9:7d:0e:
         eb:e4:16:4a:dd:58:cc:04:96:fa:7d:08:1d:c9:8d:54:95:b8:
         3f:42:83:7e:37:27:4b:1a:a4:92:a9:dc:fc:7c:c5:24:83:84:
         da:c7:68:3c:09:20:61:16:ab:6c:37:a7:36:f4:d2:03:13:b3:
         3f:05:63:66:79:09:70:da:9a:41:5b:92:5e:ac:fc:1b:a2:af:
         eb:6c:62:9b:eb:35:62:fc:59:32:f3:bf:80:8c:c6:d3:95:36:
         97:ba:e6:9e:b0:c1:b9:e9:14:3b:27:71:3d:a9:7e:2a:58:e5:
         99:2b:38:89:26:17:e9:a2:e0:8f:e4:c3:17:12:29:87:b3:78:
         e6:8b:aa:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:07:35 2025 by rpki-client