Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8405899-386a-3659-863b-e8f35aa59b3d.roa
File:                     b8405899-386a-3659-863b-e8f35aa59b3d.roa (raw, json)
Hash identifier:          z6r3+a6G1umN1dV68c6HqwmwNLmAHFyQ8okMYZZM2R8=
Subject key identifier:   8C:84:D6:DF:FE:25:F4:32:E4:79:A2:38:BB:36:3B:10:60:19:88:98
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84119E7CAC23A7FAB7FC7DB6
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8405899-386a-3659-863b-e8f35aa59b3d.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        70.41.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:9e:7c:ac:23:a7:fa:b7:fc:7d:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=de1c480c-ef35-4ade-8c1a-9590ae22fefe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:68:b4:59:ff:c1:75:70:22:8f:a8:d1:86:7b:
                    13:dc:4b:83:13:1c:98:85:ab:06:68:01:2f:58:9f:
                    b2:10:c6:e7:91:5f:a3:94:68:bb:45:d0:ad:70:20:
                    47:63:0e:42:fb:65:8e:75:16:42:18:25:ff:54:6c:
                    c0:26:af:76:ad:69:89:d8:91:3c:90:ab:c5:67:60:
                    6c:f8:98:07:f8:1d:0a:9a:e3:95:bb:70:47:2b:1d:
                    fe:b3:fe:2f:1a:75:0c:28:d1:98:66:95:5e:7f:14:
                    b0:54:9a:3c:73:c2:35:e2:a1:ae:cd:20:48:2d:59:
                    98:f0:ec:c3:f5:c3:c8:00:65:d5:72:9b:8c:38:45:
                    15:6f:f7:7a:ab:b7:4e:93:ad:18:c2:9e:60:8f:7e:
                    1e:df:18:c4:90:45:fe:22:31:8c:dc:d5:43:eb:7a:
                    8d:b6:1f:2b:3c:9b:75:b4:33:8d:50:ca:7d:27:9d:
                    2d:ea:bc:f3:2f:08:53:93:87:bf:e2:68:d7:d8:c0:
                    78:05:df:68:f7:ab:4f:37:c6:4c:f0:aa:29:2f:87:
                    8e:b3:a0:e6:cb:28:a0:b1:db:ca:90:d6:c6:68:2e:
                    4d:a4:e9:3f:7f:db:f0:da:39:fd:2b:d1:17:a8:c5:
                    56:00:12:19:4a:b6:4c:f3:24:ac:74:8e:fc:72:59:
                    76:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:84:D6:DF:FE:25:F4:32:E4:79:A2:38:BB:36:3B:10:60:19:88:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8405899-386a-3659-863b-e8f35aa59b3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:8e:f8:1e:08:10:12:4f:a9:57:db:3b:a1:ee:42:cc:17:a8:
         78:f6:8d:07:20:98:d8:f6:2e:52:2e:45:38:3d:1a:70:18:c9:
         0d:60:d2:56:70:da:5e:67:5f:fb:7d:7f:c5:f2:3c:2b:3c:9e:
         c2:64:ca:74:a2:63:6a:0e:63:f0:74:78:3b:3e:3d:c6:9d:51:
         bd:a3:fc:ee:f4:04:dd:5a:03:56:27:e0:ed:38:c5:b8:c3:31:
         15:9a:d1:b4:45:5c:0c:3c:ce:b6:e3:7a:1c:0d:22:82:5e:31:
         ea:58:af:ff:f6:09:16:21:a2:1c:8f:5f:d4:7b:07:e4:7f:76:
         29:7c:e6:f3:03:9f:6c:ec:51:1d:be:6c:c6:e2:27:86:96:b3:
         e7:8c:74:75:3e:ad:8d:92:a7:d7:86:9b:fc:78:1d:25:ae:a2:
         b6:af:37:eb:89:7b:33:5e:82:ce:a1:ed:cc:0e:10:fa:14:9f:
         18:47:69:f6:de:1e:5e:6a:37:c0:b5:61:9e:5b:00:bc:0c:37:
         4b:b2:a7:c1:1e:af:03:da:64:e8:fc:9e:85:a8:7e:4f:1d:e2:
         ba:75:97:d6:de:a0:d5:b6:60:7c:ee:fb:2d:3b:a2:ac:25:c6:
         bf:75:28:48:e0:e2:d1:13:d9:05:d3:7c:6f:65:25:0b:d1:08:
         37:29:19:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEZ58rCOn+rf8fbYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
ZGUxYzQ4MGMtZWYzNS00YWRlLThjMWEtOTU5MGFlMjJmZWZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmi0Wf/BdXAij6jRhnsT3EuDExyYhasGaAEv
WJ+yEMbnkV+jlGi7RdCtcCBHYw5C+2WOdRZCGCX/VGzAJq92rWmJ2JE8kKvFZ2Bs
+JgH+B0KmuOVu3BHKx3+s/4vGnUMKNGYZpVefxSwVJo8c8I14qGuzSBILVmY8OzD
9cPIAGXVcpuMOEUVb/d6q7dOk60Ywp5gj34e3xjEkEX+IjGM3NVD63qNth8rPJt1
tDONUMp9J50t6rzzLwhTk4e/4mjX2MB4Bd9o96tPN8ZM8KopL4eOs6DmyyigsdvK
kNbGaC5NpOk/f9vw2jn9K9EXqMVWABIZSrZM8ySsdI78cll24wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIyE1t/+JfQy5HmiOLs2OxBgGYiYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjg0MDU4OTktMzg2YS0z
NjU5LTg2M2ItZThmMzVhYTU5YjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK6O+B4IEBJPqVfbO6HuQswXqHj2jQcgmNj2LlIuRTg9GnAYyQ1g0lZw
2l5nX/t9f8XyPCs8nsJkynSiY2oOY/B0eDs+PcadUb2j/O70BN1aA1Yn4O04xbjD
MRWa0bRFXAw8zrbjehwNIoJeMepYr//2CRYhohyPX9R7B+R/dil85vMDn2zsUR2+
bMbiJ4aWs+eMdHU+rY2Sp9eGm/x4HSWuoravN+uJezNegs6h7cwOEPoUnxhHafbe
Hl5qN8C1YZ5bALwMN0uyp8EerwPaZOj8noWofk8d4rp1l9beoNW2YHzu+y07oqwl
xr91KEjg4tET2QXTfG9lJQvRCDcpGew=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:09:22 2025 by rpki-client