Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a6e6ddc-4fc6-3076-9cb0-02e1f50ed650.roa
File:                     5a6e6ddc-4fc6-3076-9cb0-02e1f50ed650.roa (raw, json)
Hash identifier:          GvK3iEGdto7b0RVKYnSh9xGeriB/V4Ak7GT9ugWyMNQ=
Subject key identifier:   74:C8:9B:96:36:3B:C3:12:81:41:F2:38:D1:6F:6E:E3:0D:F7:10:F8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAE44E1E156C3085F8A940
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a6e6ddc-4fc6-3076-9cb0-02e1f50ed650.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        70.41.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:e4:4e:1e:15:6c:30:85:f8:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=c09a7260-0388-4aae-a5ab-9305caaf4d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:96:64:fc:d3:2a:d0:32:47:a2:be:18:ab:de:
                    ab:c4:0c:f4:f9:61:0b:d3:66:5a:fc:2d:bc:a2:5b:
                    6a:3d:26:2e:8a:66:8f:98:2b:e9:7c:2f:04:8d:d2:
                    e3:fd:cb:fc:3e:72:dd:ae:f7:bb:1a:2e:28:94:6e:
                    6a:ee:b2:6f:a6:a9:03:73:59:7e:e6:82:b8:08:23:
                    5f:6c:15:fe:97:c9:08:e4:e2:fe:d4:48:a6:54:c8:
                    8f:50:1a:4d:b6:99:9a:59:69:d0:fb:eb:fb:b0:24:
                    06:70:ef:ba:a4:2d:c6:95:4a:e2:6e:ed:bf:80:e2:
                    eb:01:0f:af:93:72:0a:15:03:f0:64:db:19:61:95:
                    c7:f9:88:86:11:66:a9:ea:6e:c9:30:a5:d1:ec:6f:
                    52:83:89:f0:0e:49:10:a6:41:6b:e0:46:3e:49:43:
                    d3:07:06:83:f0:05:49:f1:f2:67:37:63:ee:cb:11:
                    40:83:90:e6:9d:91:0d:90:b6:67:5e:39:0d:5d:51:
                    77:56:37:66:7b:8f:d7:6e:b3:5f:59:6b:17:85:1b:
                    fa:73:5b:df:1e:2a:dd:73:30:1b:59:99:c6:e7:68:
                    9e:94:b5:6e:6d:2d:7b:ea:46:33:18:ed:57:91:f3:
                    0c:94:67:23:75:20:dc:dc:6b:7a:93:7f:b5:d6:4a:
                    49:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C8:9B:96:36:3B:C3:12:81:41:F2:38:D1:6F:6E:E3:0D:F7:10:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a6e6ddc-4fc6-3076-9cb0-02e1f50ed650.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:c6:ab:02:85:58:76:af:59:63:54:d4:ba:02:aa:83:82:90:
         5c:80:7e:90:81:3a:4e:66:12:e4:74:7a:8d:40:51:97:e6:d8:
         9f:fa:08:77:19:39:43:1e:61:ba:fd:87:27:16:24:43:d5:5d:
         31:79:da:ad:22:41:4d:a2:51:26:03:5e:58:0d:31:e7:99:c9:
         35:5e:2a:9a:d1:c4:1d:57:7c:cb:76:b2:66:d9:d2:38:08:11:
         11:6a:2f:e4:dd:a7:bb:11:e9:14:f5:ef:1f:36:a4:78:ce:d8:
         cc:0d:d0:ea:14:6a:0b:72:54:99:29:6d:8b:ab:47:a7:23:9c:
         85:5e:80:6d:e4:cb:82:35:73:43:97:5c:07:df:32:78:c5:a0:
         b4:69:4a:04:7d:42:22:3a:bc:f6:52:f7:ee:52:7d:72:a4:63:
         94:a9:ee:f4:54:28:c2:6d:5e:6e:41:4d:b9:4f:3b:0f:ee:4b:
         bc:b7:aa:5f:fc:0b:81:cf:b6:54:6d:fb:0b:ac:5d:c0:e2:d6:
         40:98:ae:ea:c5:83:d3:f7:9b:7d:3e:68:d3:7a:63:de:58:52:
         25:16:2e:f8:eb:64:f8:69:95:8b:ef:f0:ab:2c:70:94:a3:e2:
         59:d4:4a:79:7b:ec:62:39:e0:8a:d0:dc:1e:09:d1:ce:73:f1:
         0a:00:e2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 18:12:30 2025 by rpki-client