Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b139f623-0d4a-3094-9459-6e9aecf27d12.roa
File:                     b139f623-0d4a-3094-9459-6e9aecf27d12.roa (raw, json)
Hash identifier:          y7J6DuYmFnAbt5T5pqAoDaNBBRDIa4m77F6Ksbyg4ss=
Subject key identifier:   5A:36:8B:9D:62:4F:E0:10:EB:14:18:C3:D6:98:14:16:F9:A3:E9:73
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411A04BA48B52A520E2C4C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b139f623-0d4a-3094-9459-6e9aecf27d12.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        70.41.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:a0:4b:a4:8b:52:a5:20:e2:c4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=51b6ff56-ff2e-418a-8711-b6ea745f95a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cc:f1:29:f8:51:3f:ca:c0:41:93:12:38:99:
                    de:7d:c2:9f:e2:24:2f:8a:6f:be:8e:83:c5:bf:97:
                    e4:ca:dc:5f:de:1a:8c:25:51:ee:f2:1a:99:5e:d4:
                    54:59:4a:65:5f:dd:11:b9:18:98:f2:ec:d5:e9:c9:
                    e9:8c:b9:21:39:27:95:17:4e:a7:30:3e:f8:25:a7:
                    83:d1:58:c7:c2:e3:be:b0:cb:a5:81:fd:38:1d:c4:
                    13:c2:36:a1:36:88:f2:75:f4:d6:ee:6d:b7:3c:63:
                    fa:a3:6e:1b:60:51:62:d8:c5:c8:17:fd:9a:1e:cc:
                    3a:e8:7a:71:a8:f9:17:42:85:68:fd:4b:80:50:b9:
                    44:7b:71:d0:37:ba:3d:68:5f:91:a2:38:bf:b7:ff:
                    7a:83:0b:1a:75:f1:a9:fd:0e:64:dd:26:be:93:f1:
                    94:6d:61:29:e9:24:b4:c8:bc:31:1f:0c:80:75:cb:
                    38:88:b5:33:14:16:2f:65:23:09:a5:56:52:a6:64:
                    41:39:32:3b:be:27:65:5f:6a:0b:c3:1c:6e:c5:74:
                    a9:5b:66:dd:7d:26:1e:16:64:fd:01:6e:92:82:0c:
                    aa:83:5f:ce:30:d7:b8:68:ce:df:ce:42:20:d9:70:
                    15:f7:cb:1d:8c:a8:53:89:de:06:27:95:9a:e5:8c:
                    d0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:36:8B:9D:62:4F:E0:10:EB:14:18:C3:D6:98:14:16:F9:A3:E9:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b139f623-0d4a-3094-9459-6e9aecf27d12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:b8:aa:64:0d:0e:64:51:fa:2e:df:9e:86:ac:ec:62:fa:5a:
         f4:ed:11:78:ec:5a:89:87:eb:53:4a:a3:fb:dd:c3:93:c3:a5:
         0b:47:32:0c:c8:f6:f1:ce:74:13:4d:62:2b:0a:d3:b8:0f:c3:
         21:03:ae:dd:b1:c9:91:49:8e:d6:fe:33:dd:af:8f:d6:50:bd:
         a0:2d:f4:44:e2:cf:33:c2:9c:11:5f:0c:b9:7c:72:a2:ac:36:
         73:bc:b4:c8:d6:e3:5d:67:63:1d:4c:c3:9c:1a:67:84:2b:d6:
         e3:29:67:ba:fc:5e:67:60:5d:e9:f8:fd:65:d4:91:09:83:2e:
         48:8b:71:4f:8d:b7:f9:1b:6d:e7:73:86:07:80:d5:19:be:6d:
         b4:d7:4a:7f:7b:96:59:2e:a8:29:ec:93:65:7d:e8:a5:15:a2:
         18:2a:b5:64:ce:9e:9f:e4:80:fc:b0:87:a2:d4:0f:e5:94:68:
         16:20:fc:8a:80:3c:22:87:f7:20:53:45:7e:8c:f6:7e:df:43:
         89:1a:3b:32:18:e2:13:c6:3e:5f:2b:e6:36:3f:64:ca:80:bd:
         e7:3b:5d:b0:16:48:27:ab:a6:15:6e:fd:cb:f2:b4:be:c5:70:
         cd:e1:48:3d:c5:4d:d0:8c:09:da:16:02:18:55:60:6b:48:09:
         92:c3:a1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:12:31 2025 by rpki-client