Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ed4f76ef-c92c-3a3a-b091-81f2448014d2.roa
File:                     ed4f76ef-c92c-3a3a-b091-81f2448014d2.roa (raw, json)
Hash identifier:          cKWX8n515x+nKfs8JleSNXTRHfJoLVMwXlpJUXpsSDI=
Subject key identifier:   76:82:38:0F:5F:76:D7:ED:E4:6A:3B:4D:54:48:BF:9C:7F:28:C7:69
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411070914CF624119E2E6C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ed4f76ef-c92c-3a3a-b091-81f2448014d2.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        70.41.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:07:09:14:cf:62:41:19:e2:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=a3a4dc8d-19e5-4ae9-bdf1-31e890287a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f0:71:c8:46:e5:b5:d2:ce:24:0e:a2:ea:af:
                    02:b7:5a:0c:a5:92:a4:d5:63:7e:da:b9:56:6d:20:
                    96:a3:88:ec:ac:75:ad:1e:ec:93:73:e7:cb:7c:74:
                    42:35:19:4c:97:87:df:9d:4c:3d:9e:db:e2:cd:b8:
                    b7:5c:d3:12:0e:a5:c4:9a:0e:f5:b2:d4:26:70:23:
                    3d:bc:c8:d7:29:5f:01:9d:b4:fc:c0:53:72:06:d4:
                    b8:65:1a:6d:f8:bd:c6:77:a3:11:5a:bb:74:e1:e8:
                    fa:64:12:c3:7e:10:dc:42:62:91:67:5e:b8:ad:69:
                    02:50:fa:ef:1a:88:09:42:31:00:87:1f:7f:c6:5a:
                    1f:6b:58:37:b5:ad:a8:28:bb:22:bf:82:d8:5e:f9:
                    78:d5:3d:89:40:27:72:61:f0:99:4c:e2:46:c9:15:
                    53:da:9e:25:a7:57:f4:49:59:83:e0:40:86:52:84:
                    e2:ca:56:d0:5c:e2:68:f5:fc:cc:59:c4:59:94:8b:
                    32:aa:d2:c7:1e:f5:d2:0f:89:df:ee:66:8f:93:dd:
                    cc:74:dd:16:90:3f:a3:a2:ea:f3:7a:cc:8b:2c:52:
                    f4:01:88:0c:67:83:87:a2:99:cb:7f:25:de:73:ce:
                    27:86:0c:91:77:a5:15:70:b1:39:76:1d:32:5e:cb:
                    5b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:82:38:0F:5F:76:D7:ED:E4:6A:3B:4D:54:48:BF:9C:7F:28:C7:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ed4f76ef-c92c-3a3a-b091-81f2448014d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:5f:28:0a:5f:1b:5a:c6:14:03:c2:25:f1:3a:4b:59:38:be:
         1c:d3:b1:07:fd:f2:5e:56:87:fa:af:99:c4:9d:bc:01:5f:6c:
         b8:9d:83:f5:b2:fd:30:c1:31:5e:d6:a9:8b:34:bc:ac:89:f6:
         c1:c9:9f:7c:1f:8c:e2:9b:0d:f5:9d:1b:95:48:8e:85:72:b1:
         88:64:d0:a7:2c:7a:7f:29:8e:9a:7b:4a:15:d6:21:28:54:a9:
         ba:8e:21:e4:44:32:aa:dc:dc:ce:b1:41:b1:56:b9:02:46:37:
         b8:81:cd:91:ba:fb:5d:f9:a7:a3:6d:0e:71:68:8b:9e:03:5e:
         44:3f:ee:99:28:e6:25:18:4d:78:c7:a3:06:94:7c:ea:ab:c5:
         b3:7d:1c:24:84:14:38:6e:45:4d:1a:84:87:b7:60:d7:76:50:
         0d:8b:2a:00:f8:4f:4f:58:43:59:aa:e7:1b:41:46:de:0a:72:
         c2:75:c0:98:75:a7:87:64:7d:c1:93:ad:d7:44:ce:95:45:0b:
         c2:eb:c0:ed:cd:fe:4a:38:59:54:e3:48:8d:87:e1:94:92:66:
         c0:ee:2a:5c:30:7e:24:5d:5d:34:c5:f9:45:f4:bb:b1:2f:06:
         3b:c8:a1:4c:0f:fd:ce:f2:4b:f3:20:ef:40:2d:6b:55:da:27:
         b8:d2:1b:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEQcJFM9iQRni5sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
YTNhNGRjOGQtMTllNS00YWU5LWJkZjEtMzFlODkwMjg3YTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/BxyEbltdLOJA6i6q8Ct1oMpZKk1WN+2rlW
bSCWo4jsrHWtHuyTc+fLfHRCNRlMl4ffnUw9ntvizbi3XNMSDqXEmg71stQmcCM9
vMjXKV8BnbT8wFNyBtS4ZRpt+L3Gd6MRWrt04ej6ZBLDfhDcQmKRZ164rWkCUPrv
GogJQjEAhx9/xlofa1g3ta2oKLsiv4LYXvl41T2JQCdyYfCZTOJGyRVT2p4lp1f0
SVmD4ECGUoTiylbQXOJo9fzMWcRZlIsyqtLHHvXSD4nf7maPk93MdN0WkD+jourz
esyLLFL0AYgMZ4OHopnLfyXec84nhgyRd6UVcLE5dh0yXstbKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHaCOA9fdtft5Go7TVRIv5x/KMdpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZWQ0Zjc2ZWYtYzkyYy0z
YTNhLWIwOTEtODFmMjQ0ODAxNGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJtfKApfG1rGFAPCJfE6S1k4vhzTsQf98l5Wh/qvmcSdvAFfbLidg/Wy
/TDBMV7WqYs0vKyJ9sHJn3wfjOKbDfWdG5VIjoVysYhk0Kcsen8pjpp7ShXWIShU
qbqOIeREMqrc3M6xQbFWuQJGN7iBzZG6+135p6NtDnFoi54DXkQ/7pko5iUYTXjH
owaUfOqrxbN9HCSEFDhuRU0ahIe3YNd2UA2LKgD4T09YQ1mq5xtBRt4KcsJ1wJh1
p4dkfcGTrddEzpVFC8LrwO3N/ko4WVTjSI2H4ZSSZsDuKlwwfiRdXTTF+UX0u7Ev
BjvIoUwP/c7yS/Mg70Ata1XaJ7jSG+U=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:01:31 2025 by rpki-client