Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b9640580-b1da-355b-9d17-645e19b07db7.roa
File:                     b9640580-b1da-355b-9d17-645e19b07db7.roa (raw, json)
Hash identifier:          fIo5zhQrKBBgeqcbTOMC11z4emaXg3KhpXSIcZj2NuY=
Subject key identifier:   9D:14:22:D9:41:0D:4F:96:D5:2D:2C:9B:70:37:1C:AA:D1:C2:BD:AE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84110588B971E44826B61180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b9640580-b1da-355b-9d17-645e19b07db7.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        70.41.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:05:88:b9:71:e4:48:26:b6:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=64a9f51a-192c-4134-8300-7088aaa22166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cd:72:ea:67:11:de:92:33:d0:d6:c5:97:64:
                    4a:3e:37:ea:fc:36:74:db:a8:da:40:28:a0:35:09:
                    50:dc:83:8e:cc:40:b2:8e:8f:c1:3e:7f:af:dd:7a:
                    79:4f:3b:4f:fc:d5:c3:e0:ba:75:81:1f:fb:b1:92:
                    a1:03:3f:9b:31:c7:50:81:e0:25:5e:27:a3:f6:18:
                    32:37:cc:d7:df:c4:bc:20:32:f7:33:2a:0a:a5:b0:
                    e1:15:b8:cf:f8:48:46:91:5c:b7:27:48:f8:e4:ca:
                    c0:c7:f0:08:69:c5:af:78:b0:7b:30:67:6c:32:2e:
                    79:31:e6:31:1e:34:85:03:15:75:78:2f:2b:ed:7b:
                    81:d3:d0:a7:52:80:c5:ec:d3:09:5a:cf:4a:7a:45:
                    f0:47:fd:98:f4:5d:0d:b7:ff:f1:93:7c:40:5e:2f:
                    e0:5a:ee:f3:2c:05:5e:05:c0:08:38:8f:90:4c:26:
                    9c:8d:26:cb:9f:ed:c1:cf:1a:db:7a:a7:4a:d3:49:
                    20:87:1d:26:5b:1c:d0:cd:08:f8:8e:1f:2f:32:72:
                    70:22:c8:3a:be:09:3c:08:39:e3:8e:b3:f9:fa:ac:
                    b7:08:95:66:19:92:9f:60:ab:d7:ba:66:5b:b4:95:
                    8b:d8:1e:7b:32:03:d0:22:92:2f:95:34:0e:33:6e:
                    7c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:14:22:D9:41:0D:4F:96:D5:2D:2C:9B:70:37:1C:AA:D1:C2:BD:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b9640580-b1da-355b-9d17-645e19b07db7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:f8:02:15:a1:e9:62:94:2c:05:d4:48:dd:58:f7:3f:6b:6b:
         63:23:18:9b:5c:dd:b9:4b:3b:9e:30:f7:6a:52:ec:de:26:b9:
         6a:09:cb:4b:98:ce:f5:3d:ed:a7:67:62:4a:43:8d:17:60:2b:
         0b:a7:74:4c:0e:6c:b7:df:8e:05:7c:fa:8a:76:2f:8f:f1:fa:
         5c:e3:d9:88:5b:e0:1b:be:25:d5:13:3d:d6:36:cc:16:69:aa:
         ae:65:96:cc:8a:73:c1:9f:23:2e:60:4c:47:3f:e7:03:5e:88:
         28:00:1e:ff:74:fd:04:6a:8e:48:e1:e1:0e:a0:9e:45:16:8f:
         13:fa:de:8b:16:c8:df:98:2f:60:d5:68:6f:7f:90:ef:d2:2b:
         b0:2e:d4:17:06:54:bc:71:0f:63:89:f3:61:d2:6b:c7:f6:ca:
         9e:fc:89:1f:80:14:b5:39:cb:37:54:d6:e8:a5:d1:22:0f:3b:
         d9:7c:46:4d:67:76:1d:db:31:cf:9e:31:b7:a8:00:b1:19:1c:
         31:a9:00:b8:74:5e:70:9a:b5:8f:7b:bd:2c:e9:69:90:17:6e:
         7f:dc:e3:76:e8:97:6c:a1:4a:f6:a9:82:2d:48:a2:82:10:4f:
         e7:ea:ac:22:52:3e:c5:22:c0:88:e0:87:3b:85:6b:2d:0a:ca:
         3f:ae:d8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:18:35 2025 by rpki-client