Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa9276be-9f8a-381e-a002-c6984ebc8321.roa
File:                     aa9276be-9f8a-381e-a002-c6984ebc8321.roa (raw, json)
Hash identifier:          26NG+BinMAVQjna5AsdwvjOVCmtbZbqw3e19+j3pjOY=
Subject key identifier:   0F:5A:E8:15:2E:E9:97:01:51:49:76:8A:CC:34:27:F3:C6:7F:95:A8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84110078904BEE0C56974680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa9276be-9f8a-381e-a002-c6984ebc8321.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        70.41.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:00:78:90:4b:ee:0c:56:97:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=e6b38d9a-6481-442e-99f5-afba5370a711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6f:25:41:68:0a:5d:1f:e2:7c:d7:22:e4:52:
                    a7:be:a2:53:f8:27:67:a3:dc:30:a1:a8:31:ac:3f:
                    15:a6:01:c9:a5:9f:a3:33:02:fa:c9:d7:5b:04:92:
                    cd:7a:b5:71:f3:a3:93:35:16:c3:35:ba:78:59:89:
                    c4:7b:55:3b:58:b4:8c:cc:3d:a0:90:ae:21:4f:1f:
                    f1:53:aa:41:3a:29:64:28:c5:78:06:66:c6:b6:07:
                    d5:e5:a9:60:15:44:5e:ec:e0:2b:71:d8:e4:7c:6c:
                    5d:3f:b4:95:9f:52:ab:b3:de:da:09:aa:7d:ff:55:
                    03:4d:86:70:d0:b3:ec:9d:01:55:40:b3:e1:94:ed:
                    cc:2f:e3:d5:ec:6e:f6:4f:bf:4e:85:02:9d:b5:94:
                    ed:89:85:b8:07:d3:23:c2:51:f4:30:7c:6a:eb:71:
                    1c:c1:0d:5c:2b:7c:d8:35:2c:85:a5:2f:c3:95:41:
                    1c:c8:b2:09:ee:6c:7b:45:a0:6f:b9:4d:d3:c4:e7:
                    32:a6:92:5a:a3:86:98:3f:e6:13:71:44:90:6d:6e:
                    4f:79:8d:24:25:06:3b:6a:9c:3f:ac:34:4b:e2:57:
                    67:d4:49:77:29:e1:b6:95:14:85:ff:4a:39:61:a9:
                    a1:3e:61:2b:f5:37:37:08:ca:09:36:cb:f1:68:da:
                    17:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5A:E8:15:2E:E9:97:01:51:49:76:8A:CC:34:27:F3:C6:7F:95:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa9276be-9f8a-381e-a002-c6984ebc8321.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:50:db:c8:a5:7b:9b:97:7b:5e:ec:df:7a:14:34:66:6a:0d:
         b5:cd:20:6f:ff:54:83:32:86:e6:cd:40:62:ae:1c:00:b7:14:
         73:6a:00:2e:fe:91:07:24:ad:3d:a6:d9:21:84:f1:23:f1:74:
         6d:74:b4:98:c5:94:f7:62:e9:63:85:1a:8e:13:0a:bb:df:20:
         4f:3a:48:d8:6c:a8:fe:1d:d2:7b:df:6a:bd:81:1b:ee:25:fc:
         68:1d:1e:60:0f:61:1f:2c:6d:a1:14:87:df:52:af:97:81:8d:
         42:2a:10:2a:55:3e:fe:ea:1a:ca:24:98:5a:56:3f:b9:3d:b9:
         38:aa:b7:6b:22:41:4b:36:78:c0:0a:80:c4:c3:e8:22:af:00:
         16:aa:b1:95:eb:6c:f3:33:56:ad:63:22:63:fa:3a:2a:c6:72:
         a0:8c:ff:77:8a:7e:4e:90:62:d0:f4:08:f7:ef:5f:6e:67:c7:
         00:9f:47:fb:5f:49:f8:dd:b9:37:92:ff:4f:1c:0c:3b:e8:55:
         07:2d:8a:eb:d6:08:35:cc:e1:07:47:11:a4:b9:d2:87:42:c1:
         ae:13:16:bf:31:4f:06:06:96:4c:bd:bb:ca:95:22:98:e7:10:
         70:b5:cb:39:8b:4f:87:d2:ff:e9:ce:ba:c4:44:42:48:aa:29:
         c5:ad:c7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:05:57 2025 by rpki-client