Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/46ef4747-60f3-389f-a09c-aa0dd1f0e381.roa
File:                     46ef4747-60f3-389f-a09c-aa0dd1f0e381.roa (raw, json)
Hash identifier:          eROWt3PYBY87m2ep4QpGmQpj8s6eW8GoF9aWNNdR23k=
Subject key identifier:   A2:56:32:73:78:91:90:C7:77:17:8D:5A:F5:AB:92:78:32:A8:AD:E5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79F0CCF8A16EA531AC660C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/46ef4747-60f3-389f-a09c-aa0dd1f0e381.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        70.41.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:0c:cf:8a:16:ea:53:1a:c6:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9f56a957-b3b9-45cd-a0c7-a72633404677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cf:d9:ba:04:5e:8f:7e:51:bf:35:84:73:a5:
                    2f:a5:e8:cf:1a:2a:fb:a3:c5:4a:29:e3:c6:af:f1:
                    e5:8e:85:aa:6a:0b:04:1b:5b:0e:1a:e8:b5:05:6f:
                    d2:38:6a:1c:b9:36:5b:f1:84:6d:7b:fa:33:0a:e2:
                    a4:32:e8:e1:6b:73:68:c7:bd:99:db:a5:91:63:e7:
                    9a:a9:62:5c:49:fc:03:7a:a5:cb:01:e3:a2:7a:da:
                    5a:60:ee:50:b7:57:55:95:de:78:2d:ce:f4:e1:18:
                    a0:a0:9f:9a:fe:70:c0:cb:37:eb:57:f7:d8:2a:42:
                    ea:4d:93:74:31:4a:ba:56:7d:4b:b2:ea:ea:83:f9:
                    7f:c1:98:3b:f1:25:4b:81:b9:5c:48:01:25:b3:f0:
                    f4:57:65:5f:a0:7d:f6:86:3a:5b:f8:90:10:a3:c5:
                    7e:09:70:8a:bf:ad:eb:37:b9:c4:85:f2:c0:65:02:
                    81:e7:63:f8:1b:ad:0f:8b:eb:a7:ce:9f:a7:50:ef:
                    21:ee:55:62:da:61:8e:bd:df:c7:dd:a7:21:0e:e2:
                    dc:76:01:b0:25:57:c9:3f:a7:ea:1e:36:64:dd:e7:
                    fa:ac:97:7d:47:7b:69:05:58:a4:15:ab:ea:05:be:
                    68:d8:a0:74:38:0f:ec:1f:b4:83:ec:9a:24:b4:e9:
                    4c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:56:32:73:78:91:90:C7:77:17:8D:5A:F5:AB:92:78:32:A8:AD:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/46ef4747-60f3-389f-a09c-aa0dd1f0e381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:31:bc:84:38:52:47:6e:ba:06:8b:c4:cb:da:96:50:91:98:
         45:fa:68:a6:07:86:58:ea:ba:21:f5:2e:24:7a:c7:da:bf:5a:
         e1:20:e1:fd:07:67:fa:87:52:7d:12:6f:03:c0:96:20:17:16:
         f2:42:d3:5e:29:37:d1:0f:ca:56:5e:9b:1f:89:2c:81:96:f0:
         1e:93:2d:e6:e9:89:16:bd:fe:a7:d8:2e:c7:95:af:0d:f8:7f:
         88:a2:bb:58:fb:b7:ec:28:36:ad:ae:37:46:27:c9:34:a9:82:
         b7:82:74:4f:e9:76:8b:1b:e5:ff:70:5e:82:a3:17:e4:ce:74:
         38:70:38:44:e8:34:e5:35:6e:df:c9:3d:d3:dd:55:8b:15:07:
         dd:e2:5f:96:01:cd:6b:8d:85:17:d9:7e:bb:48:1d:3e:36:f9:
         06:a6:58:8c:37:c1:48:4e:ef:53:e8:8f:eb:c3:9d:0a:76:81:
         4c:6e:01:31:0b:37:ff:0f:c0:cc:0a:51:47:74:92:5a:83:cc:
         0c:45:a4:81:9c:c1:11:b0:b0:11:fa:c0:03:f1:43:fd:a6:f2:
         d1:ad:1b:79:ff:b4:f2:42:ad:9d:68:3f:c6:2b:11:80:25:81:
         e8:8b:02:d2:97:9c:16:95:b3:25:53:f1:97:ac:08:9d:96:26:
         aa:01:b7:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnwzPihbqUxrGYMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OWY1NmE5NTctYjNiOS00NWNkLWEwYzctYTcyNjMzNDA0Njc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps/ZugRej35RvzWEc6UvpejPGir7o8VKKePG
r/HljoWqagsEG1sOGui1BW/SOGocuTZb8YRte/ozCuKkMujha3Nox72Z26WRY+ea
qWJcSfwDeqXLAeOietpaYO5Qt1dVld54Lc704RigoJ+a/nDAyzfrV/fYKkLqTZN0
MUq6Vn1Lsurqg/l/wZg78SVLgblcSAEls/D0V2VfoH32hjpb+JAQo8V+CXCKv63r
N7nEhfLAZQKB52P4G60Pi+unzp+nUO8h7lVi2mGOvd/H3achDuLcdgGwJVfJP6fq
HjZk3ef6rJd9R3tpBVikFavqBb5o2KB0OA/sH7SD7JoktOlMawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKJWMnN4kZDHdxeNWvWrkngyqK3lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDZlZjQ3NDctNjBmMy0z
ODlmLWEwOWMtYWEwZGQxZjBlMzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC4xvIQ4UkduugaLxMvallCRmEX6aKYHhljquiH1LiR6x9q/WuEg4f0H
Z/qHUn0SbwPAliAXFvJC014pN9EPylZemx+JLIGW8B6TLebpiRa9/qfYLseVrw34
f4iiu1j7t+woNq2uN0YnyTSpgreCdE/pdosb5f9wXoKjF+TOdDhwOEToNOU1bt/J
PdPdVYsVB93iX5YBzWuNhRfZfrtIHT42+QamWIw3wUhO71Poj+vDnQp2gUxuATEL
N/8PwMwKUUd0klqDzAxFpIGcwRGwsBH6wAPxQ/2m8tGtG3n/tPJCrZ1oP8YrEYAl
geiLAtKXnBaVsyVT8ZesCJ2WJqoBt5o=
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:44:13 2026 by rpki-client