Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3d33148-98bf-392f-be4e-c4d23b074c52.roa
File:                     c3d33148-98bf-392f-be4e-c4d23b074c52.roa (raw, json)
Hash identifier:          YfPrghT2e99pVSSM4VuOgYjRSlkU9pvMoXGH6oDHf10=
Subject key identifier:   C5:25:8F:6B:39:DB:0B:B9:AC:CD:2E:1C:95:2C:98:D4:8A:7B:05:11
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84110652F6B15AD6BCD23580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3d33148-98bf-392f-be4e-c4d23b074c52.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        70.41.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:06:52:f6:b1:5a:d6:bc:d2:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=c8d91524-7512-498e-9f3e-723fc60040b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:35:a9:6f:e9:ec:bb:44:63:8b:cc:7b:12:43:
                    b5:5f:1a:69:60:7e:46:de:ff:6e:e5:36:85:5a:5f:
                    00:a4:8b:df:4c:2b:a7:db:06:64:7f:6e:64:76:32:
                    bd:16:48:ef:f0:33:71:38:de:b8:69:91:a3:90:d0:
                    eb:81:4a:6b:2e:4e:72:96:08:8e:21:d8:dc:26:64:
                    fd:b7:7a:be:5e:43:3b:68:94:f5:22:e4:0c:64:7f:
                    6d:e9:d9:c9:0e:ad:a7:2f:37:8c:ea:61:c3:fe:99:
                    b2:76:99:16:4b:0b:6b:9c:36:2f:d5:8f:ce:27:60:
                    da:bf:9d:33:fd:5c:b0:8e:d6:08:4c:9d:04:10:3f:
                    6b:5d:8b:b5:88:31:67:53:9b:8b:f8:7d:88:f5:e1:
                    eb:ad:34:e9:e3:51:b4:37:90:e9:6b:a3:a1:a6:6f:
                    cf:b2:1a:17:e4:f5:f7:92:a8:1e:9d:55:06:3d:79:
                    f1:46:5c:60:c0:ab:39:05:3d:00:51:e5:0e:b3:30:
                    51:6b:7a:9e:d6:9e:69:ad:f4:36:e7:fa:05:65:2e:
                    9f:f7:5c:74:d8:53:e7:8d:be:ea:b6:ee:6c:db:26:
                    e5:94:f2:a4:df:a8:d7:0d:12:f4:4d:79:8a:88:8b:
                    98:44:cc:c4:91:7c:83:04:e9:b5:e8:e4:13:1f:39:
                    72:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:25:8F:6B:39:DB:0B:B9:AC:CD:2E:1C:95:2C:98:D4:8A:7B:05:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3d33148-98bf-392f-be4e-c4d23b074c52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:d3:0b:f7:26:18:44:30:88:05:80:44:60:e5:d7:a0:37:35:
         2d:54:87:d4:c2:ac:ff:22:6c:90:89:e8:63:6c:01:00:aa:c5:
         d3:a3:5d:42:0f:3c:51:b2:60:be:dd:03:ce:ef:7a:73:c7:eb:
         32:54:a2:a3:9e:e1:06:7d:12:c8:dd:5f:99:5f:cb:94:fa:13:
         61:ca:f3:a0:57:d9:d7:30:77:e5:2b:a6:05:5b:2b:93:9a:a9:
         0f:12:ce:be:5b:2b:e9:27:4b:37:72:71:77:32:13:7b:9a:8d:
         37:74:38:84:bd:69:b4:d6:43:46:7c:42:5b:72:37:28:46:b8:
         ec:1a:fd:15:ea:c4:cf:13:4c:24:9c:8e:83:30:c3:90:28:48:
         ca:b2:11:1e:56:8a:3f:50:40:ad:42:fb:f4:19:88:ae:9e:ed:
         da:ba:9e:a7:ea:bd:42:74:cc:5a:a3:78:4c:f9:51:58:72:88:
         21:85:c2:67:f1:ee:c7:b9:51:ef:e7:4e:69:bd:78:3e:bd:c5:
         8f:be:29:01:f4:08:e0:4d:d4:72:a1:52:9a:00:48:97:76:44:
         d0:32:96:2e:2e:cf:f9:2a:d1:92:68:e1:db:15:df:69:7b:66:
         01:5e:e6:0e:e5:e3:9f:a6:65:54:db:08:82:2d:e8:99:8d:16:
         b2:8f:67:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:14:51 2025 by rpki-client