Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eb707b58-9ecb-3037-9d97-8e9e1dc10a3f.roa
File:                     eb707b58-9ecb-3037-9d97-8e9e1dc10a3f.roa (raw, json)
Hash identifier:          c/TQq2df0Y8nckqCsatfhGvApvMVAr/w0L52cnt3ZBU=
Subject key identifier:   22:0C:EE:14:67:65:E5:1C:5B:4B:63:7A:0F:56:F1:8C:0F:A2:FC:FB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411A0AA858AE4D8590D6A40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eb707b58-9ecb-3037-9d97-8e9e1dc10a3f.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        70.41.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:a0:aa:85:8a:e4:d8:59:0d:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=85c80a8b-dbd6-4b71-af97-eda1b101668c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:02:d9:bb:ff:00:e3:47:8a:29:90:93:42:bc:
                    f1:f5:e0:55:8c:bc:2f:a7:dc:0f:f4:06:72:63:28:
                    46:cb:2c:19:5e:46:08:bc:00:b1:52:af:af:a9:c0:
                    e9:77:02:6f:40:74:96:71:df:a0:ac:43:c9:c3:01:
                    8b:ec:f8:06:3c:05:80:e4:34:9a:d1:b4:c2:e4:6d:
                    52:f5:3d:f9:36:f3:2c:76:ae:d9:91:19:81:3c:d5:
                    e7:42:b1:a5:ad:13:1e:ba:73:82:4d:33:16:1a:d7:
                    9a:66:5e:04:bb:2a:45:44:de:dc:f6:86:9b:61:70:
                    8e:02:78:33:6b:07:c0:9e:0a:bf:1c:dd:4c:c8:45:
                    dd:e1:81:ae:96:48:fa:fd:91:d9:74:49:bf:9f:04:
                    0c:a6:58:23:2c:20:ff:53:39:fd:51:ca:03:44:78:
                    e6:28:3f:0f:03:dc:13:2b:74:a5:a9:a6:e7:0c:a6:
                    36:af:89:76:1f:3c:ad:90:9a:8a:61:03:3a:c2:8d:
                    1c:96:77:a1:ea:2b:6a:4a:e2:bf:57:7b:ba:8e:05:
                    cc:4c:f9:81:bf:36:9b:3a:2f:6c:63:be:ed:85:26:
                    03:31:d5:92:d1:80:5a:9c:ca:4d:e1:5a:79:b0:e8:
                    50:b8:dd:0d:02:c7:19:30:20:3a:c4:7f:81:dd:13:
                    bc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0C:EE:14:67:65:E5:1C:5B:4B:63:7A:0F:56:F1:8C:0F:A2:FC:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eb707b58-9ecb-3037-9d97-8e9e1dc10a3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:e1:c9:de:63:23:86:f7:6d:27:85:4c:d3:ca:a6:7b:5d:2b:
         6c:8e:84:0e:90:d4:41:3a:f5:04:2a:20:12:fc:cb:59:7f:34:
         f6:97:b2:04:42:5f:36:bf:20:7f:b0:1d:87:dc:43:09:43:57:
         31:47:00:f6:82:74:33:07:53:b2:22:bf:b2:57:55:70:93:42:
         33:65:1e:84:36:63:d8:21:e8:5b:b9:3f:e8:72:8b:5c:23:06:
         87:7c:c1:98:cd:15:7c:1d:4f:c3:ab:eb:06:1c:9d:dd:9f:1f:
         87:2e:5d:00:65:13:76:55:65:93:86:26:8b:04:f8:24:ff:b9:
         6e:47:e4:5f:6a:de:29:18:16:6c:99:1b:46:4c:0a:ee:aa:8f:
         c0:d9:9b:4c:23:61:fc:80:c7:9b:de:ce:b2:93:e4:3a:17:ed:
         a8:63:6b:c2:5c:63:a5:a7:91:6a:66:58:85:c2:6d:f3:76:ac:
         a3:39:da:3d:89:dc:18:9f:1a:e8:28:e4:76:f2:f8:77:38:39:
         05:53:ca:8b:6d:ef:b4:71:67:e9:2d:6d:d4:1f:b3:04:1c:e6:
         2f:b2:8d:05:79:8f:cd:ab:25:00:31:64:74:81:19:d8:d3:1e:
         b8:90:ab:27:72:b7:1c:67:8a:17:10:e3:a4:87:88:9a:bc:a4:
         98:3c:b6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:12:41 2025 by rpki-client