Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f8a2eb35-9242-34c4-b1cf-e07d4d0f08d6.roa
File:                     f8a2eb35-9242-34c4-b1cf-e07d4d0f08d6.roa (raw, json)
Hash identifier:          thHPoo/+rAz0DiMPYcWhIpm4vJOifTNpM2kz5yh8ikI=
Subject key identifier:   C5:1F:15:23:3C:3C:90:29:B6:76:FC:A9:69:6E:FB:27:CC:38:41:08
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84110161AC52D73E016EC0C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f8a2eb35-9242-34c4-b1cf-e07d4d0f08d6.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        70.41.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:01:61:ac:52:d7:3e:01:6e:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=09b919d7-11b6-48d7-bcb0-a718db7fa476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3f:db:31:b9:fd:a5:c3:db:ea:e1:bb:86:24:
                    d8:49:f0:b5:b0:b6:9a:4f:01:ee:d8:c8:cf:c0:3b:
                    87:c5:16:fb:1e:53:84:01:95:a9:b5:5a:8d:97:bf:
                    a0:53:9b:19:b6:c7:02:d8:18:29:ae:ce:71:1c:c8:
                    53:85:0d:be:18:58:0f:90:bb:90:b4:5a:ee:1f:6c:
                    61:ef:80:11:14:8d:5d:f9:36:d8:b9:61:3f:82:56:
                    7b:64:4c:48:57:25:dc:c1:76:98:5e:81:d6:55:83:
                    a4:6a:56:b0:49:de:8e:d8:74:21:8b:f0:0d:fe:e1:
                    d6:02:e2:24:be:5e:39:d8:2b:0a:0a:a1:0d:a0:28:
                    83:16:66:48:c3:c1:45:98:cb:97:e9:0a:2f:e9:9e:
                    81:9a:e4:61:f2:6b:a0:d1:38:fa:7f:65:7b:f1:1d:
                    71:8c:ba:eb:48:7b:f5:d8:2d:a3:13:a3:6f:33:78:
                    bb:7a:38:72:aa:1c:56:d7:18:e1:da:ee:55:e0:a3:
                    2a:ba:d2:bc:a3:4d:6c:e7:eb:d5:3f:5d:65:40:71:
                    c9:8a:59:9c:22:dc:d5:9a:da:91:18:fe:f3:81:76:
                    f1:2e:fa:e6:70:10:c5:6b:9b:81:aa:c6:b1:98:45:
                    60:b2:49:dc:5e:20:0a:d9:09:a5:f7:ce:90:80:be:
                    c1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:1F:15:23:3C:3C:90:29:B6:76:FC:A9:69:6E:FB:27:CC:38:41:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f8a2eb35-9242-34c4-b1cf-e07d4d0f08d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:7e:1f:78:68:c8:2f:4b:cf:86:08:24:8c:34:a7:89:0f:11:
         27:eb:17:32:2a:19:52:38:de:a0:88:45:4c:13:1a:65:9a:4a:
         98:14:41:b0:5d:e6:bf:c3:37:83:d6:d1:44:0b:6e:2c:26:ad:
         7a:15:43:a0:db:b4:d6:0b:ae:5e:e7:ee:fa:97:3f:d8:93:b3:
         f5:46:55:de:73:9e:99:ec:cc:e1:3e:b0:16:9a:38:65:db:09:
         08:20:53:44:bf:e9:7b:73:aa:95:cd:51:51:56:3d:e6:07:9f:
         f4:42:41:00:61:e5:c6:01:55:55:3b:e7:bb:42:3e:a1:52:9d:
         db:c8:c1:da:7c:36:1d:a8:c8:d3:19:92:d5:bc:fb:8a:0f:47:
         34:65:bb:0d:51:97:f1:a6:7e:e5:ee:cc:20:db:c6:d9:03:b7:
         ee:fe:f2:3a:7c:8b:d2:67:50:1e:11:0e:fc:7f:36:03:a6:21:
         2b:0e:8b:9c:cb:9b:b5:14:57:fc:dd:26:1d:5f:58:3c:a1:80:
         70:0c:31:74:60:5e:2d:20:f6:53:d7:52:b2:a8:11:b8:94:ec:
         79:78:0e:0c:f6:0d:01:25:73:60:23:a4:d5:0d:9d:50:19:bb:
         9f:34:a5:97:8e:ac:97:01:14:4c:5e:e3:56:9d:7f:65:e6:d2:
         41:4e:69:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:05:56 2025 by rpki-client