Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1fdec0a0-6846-3321-aff9-f69e4f736345.roa
File:                     1fdec0a0-6846-3321-aff9-f69e4f736345.roa (raw, json)
Hash identifier:          nmVUQcLOmpHJh+cVBTWlB7GrEAs2YwnUXbmY9YCvE5c=
Subject key identifier:   F1:24:B0:EC:6D:A9:4C:9B:EF:06:E4:21:32:A1:C4:E5:7A:17:D6:78
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C580FA79C748F9A09AC9C9E0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1fdec0a0-6846-3321-aff9-f69e4f736345.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     40306
IP address blocks:        70.41.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:80:fa:79:c7:48:f9:a0:9a:c9:c9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=882ed624-3e79-4f09-aee3-c8873397d1fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:83:b0:87:c9:10:09:aa:30:98:89:33:aa:d1:
                    d2:36:21:4d:d3:37:82:46:8b:21:be:ca:96:49:6e:
                    83:36:30:c7:ed:c7:1d:28:1e:e6:fd:74:95:03:63:
                    2d:59:b1:83:c5:5c:5d:fc:08:68:38:20:19:24:54:
                    41:a2:d2:c0:76:b9:16:43:41:44:0c:b5:8d:ff:34:
                    2c:6b:28:10:34:e7:b8:f1:86:26:15:11:76:8b:b4:
                    21:f9:95:20:8e:a2:9f:c0:75:b6:b9:05:f6:f2:ca:
                    e5:40:5b:74:bd:27:71:24:48:cd:95:96:cd:9b:35:
                    25:7b:39:08:2e:6d:06:e0:00:fe:e7:af:38:a9:95:
                    0b:5b:3b:ac:e0:30:e4:2a:38:ef:69:ad:0b:e9:93:
                    9c:7e:c7:50:39:41:17:52:bb:c5:10:e8:6f:69:15:
                    18:b9:df:90:48:56:69:b5:a1:bd:48:6a:16:9a:55:
                    b2:95:4b:0d:f8:95:a2:42:b7:82:90:bc:73:13:49:
                    16:74:34:14:31:ea:36:a7:8b:d6:bb:3d:55:1f:ee:
                    85:5d:42:cc:c5:31:66:ec:82:a7:0f:97:d0:89:5a:
                    51:71:82:ef:d6:cc:c1:a0:6d:cc:67:1a:83:64:02:
                    16:8e:43:15:f0:c4:f7:a7:a1:6f:51:66:98:90:3f:
                    90:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:24:B0:EC:6D:A9:4C:9B:EF:06:E4:21:32:A1:C4:E5:7A:17:D6:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1fdec0a0-6846-3321-aff9-f69e4f736345.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:61:c1:61:91:d1:7b:d7:6d:e4:4f:9a:2d:a3:f5:c5:a9:83:
         da:00:cd:c8:2c:5d:a9:51:e5:29:4d:e5:4b:fa:e9:c8:61:29:
         b6:0d:c5:5a:19:f4:81:77:42:74:d6:80:42:1a:0c:c9:9d:f8:
         bd:93:fb:d9:b5:99:b2:45:cf:14:a9:8d:6c:d9:14:8c:5c:a7:
         9a:59:f6:65:14:a6:94:e6:06:9a:3a:c6:d0:f0:4f:f9:78:d9:
         a5:cb:ba:a3:ba:8d:5f:ca:29:2f:7e:91:cc:f5:c6:79:82:c8:
         a5:2d:02:f7:c2:9a:14:22:de:c9:81:c4:ae:e3:2a:b8:ab:2f:
         a0:66:bf:ad:9a:9b:3e:5a:96:38:8c:b5:b0:ea:c3:fd:0d:93:
         49:4b:f1:c4:f2:3e:81:fe:89:5f:96:63:2e:2e:cc:a1:c9:66:
         dd:c7:77:05:9f:da:cf:3e:ec:aa:88:2d:e3:47:30:55:4a:d0:
         34:36:2f:fa:62:59:6f:60:2c:8f:ae:0c:e9:73:20:17:6b:45:
         e0:11:11:20:76:c0:49:1d:9e:af:b8:fa:48:fa:42:44:be:64:
         cd:06:4e:b3:5a:db:04:39:00:1c:37:3d:9d:dc:35:55:2f:5d:
         48:75:c8:8b:ba:38:72:89:33:16:e8:a9:51:98:d8:bf:47:76:
         7e:7c:05:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:52 2025 by rpki-client