Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b68c9dc-df6b-30bb-b74a-9622af307d62.roa
File:                     2b68c9dc-df6b-30bb-b74a-9622af307d62.roa (raw, json)
Hash identifier:          Dobe+x6uZ7Ap/OK+O8gBhGbTuXZzX9J8wBozakbxQ4I=
Subject key identifier:   20:51:09:0B:EE:29:19:B4:8C:23:EF:FC:7D:BB:9D:9D:D7:8D:3C:32
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B6D2C9A9A2A2BAB2AD8E7EF30
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b68c9dc-df6b-30bb-b74a-9622af307d62.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     40306
IP address blocks:        70.41.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:9a:9a:2a:2b:ab:2a:d8:e7:ef:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=9feb0aec-af68-4e64-b61b-52e1edf9d509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d8:4f:02:cb:4d:94:0e:f7:71:08:5a:4b:5d:
                    e8:3a:35:d6:16:80:4f:ad:d3:fb:aa:a0:30:7c:b1:
                    d7:be:a1:c0:03:43:b3:65:fd:0b:19:fa:7c:c7:34:
                    41:7e:73:3d:8b:8d:50:0c:df:14:fd:d3:a4:a2:9d:
                    99:4d:bd:12:2f:ff:81:95:b4:98:f9:3a:e3:95:d6:
                    10:0b:40:3c:55:13:e5:77:05:65:7b:d6:04:f2:7b:
                    0e:13:12:3b:f0:27:61:52:fe:70:3c:d5:da:ef:01:
                    0c:27:70:ad:7e:aa:63:c7:80:cd:f4:cb:cc:58:48:
                    92:4a:64:88:9f:9f:d0:67:c9:d8:5d:60:5c:ce:8b:
                    5d:15:e8:9b:76:3f:73:5a:2f:76:00:11:16:b4:2c:
                    79:1a:75:04:4d:8b:63:23:72:17:4e:45:e1:e3:4f:
                    e4:73:6e:d7:69:20:fc:37:1d:91:eb:bb:24:7b:cc:
                    6b:ab:b2:b7:8a:29:06:d7:75:7d:66:41:9f:6d:ef:
                    b9:7c:04:0c:df:05:db:16:00:d9:df:8f:74:94:d9:
                    ec:c8:6e:6d:6b:47:2e:b4:5a:0d:8b:d9:dc:23:96:
                    b1:a4:fc:78:b9:55:78:4e:cb:07:4d:1f:18:04:12:
                    e3:17:fa:5e:09:e7:b7:f1:3e:ec:03:95:89:44:71:
                    06:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:51:09:0B:EE:29:19:B4:8C:23:EF:FC:7D:BB:9D:9D:D7:8D:3C:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b68c9dc-df6b-30bb-b74a-9622af307d62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:d9:20:83:51:a0:77:f2:62:94:11:71:91:48:37:23:22:e1:
         da:44:b3:74:d6:68:96:b1:87:77:b5:f0:15:75:43:cd:57:0b:
         92:fe:e1:32:4d:80:cf:f8:d6:30:8b:a5:60:fe:04:be:16:29:
         07:e5:83:4a:e9:6f:71:ac:8f:11:ee:14:70:39:c1:ef:58:48:
         37:c0:5e:ca:eb:d2:9a:fe:56:ee:86:27:ea:68:30:1f:4e:32:
         6d:ed:1c:ec:75:10:dc:46:c0:39:33:50:3d:fe:6f:63:8a:03:
         8f:18:c5:30:e5:07:5b:8c:d7:33:f6:f6:52:3f:4e:fc:45:51:
         86:89:26:27:b9:44:92:c7:07:6f:7f:2f:a4:e4:b7:e3:3e:7a:
         a6:33:0a:63:92:d7:12:d5:a9:61:8e:76:4e:ac:a0:21:36:26:
         b0:3b:41:f3:fa:35:2b:9f:1f:3e:e4:60:5a:b9:fe:d5:35:a5:
         15:b0:01:db:cc:64:29:0e:8a:ce:f2:11:18:7b:89:ff:55:a5:
         bf:e8:99:4f:90:cb:7a:87:85:a9:37:98:f4:f0:a2:9a:b3:89:
         42:d5:12:d0:c8:3b:68:d9:38:bf:d3:cd:34:9b:72:36:bf:95:
         56:ee:5b:fb:aa:aa:22:cc:d7:ba:61:78:30:c6:dd:8d:fd:ff:
         ed:75:8c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 21:07:44 2025 by rpki-client