Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/640c453f-18c8-33fa-8803-ecb7430cd4af.roa
File:                     640c453f-18c8-33fa-8803-ecb7430cd4af.roa (raw, json)
Hash identifier:          MEP7z2iih2sFpyNmGsna+E+EDrApsYv9ImRUzveR9oM=
Subject key identifier:   55:BC:35:E8:20:40:67:63:59:A2:EE:E4:99:2A:5D:89:AD:3E:8F:CA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24DFB67AC6D0868FAAD14800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/640c453f-18c8-33fa-8803-ecb7430cd4af.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        70.41.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:b6:7a:c6:d0:86:8f:aa:d1:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=e599cd74-00fe-46ea-a716-c2ece366b77e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:62:2d:b0:80:76:ef:74:0d:66:39:27:55:11:
                    fe:d6:14:24:0f:60:63:79:2b:a6:06:bc:53:d6:a9:
                    8b:ef:ea:2c:ee:b8:5e:2e:20:a9:b8:6c:34:5b:a3:
                    00:26:da:8f:eb:75:8c:bb:42:fc:86:84:d2:43:7c:
                    67:f4:a9:7f:c5:c8:58:3d:b3:29:53:36:bb:dd:73:
                    e1:8d:21:3c:e5:f2:a4:50:c6:d7:a1:db:5b:b9:41:
                    bf:db:c5:f5:39:01:91:df:5d:e7:fc:90:c3:df:2f:
                    8d:24:b4:ef:54:5e:4c:2b:c3:e9:a2:c9:59:e0:f7:
                    3c:9c:38:b5:25:42:d8:0b:92:7f:1b:4d:fa:22:d0:
                    59:e1:ce:5a:cb:d5:ed:2e:12:65:31:f9:b1:e3:6c:
                    1c:38:87:69:25:82:3e:cb:2b:23:50:09:9d:b1:28:
                    2d:be:63:c0:3d:d7:40:fd:fb:ee:aa:fe:b8:99:10:
                    11:95:a0:f8:8d:cf:08:4b:29:c6:fc:5c:c6:ae:5d:
                    b9:2f:45:c0:79:a7:8b:1c:30:bc:19:9d:26:79:a4:
                    2a:af:28:4c:69:75:65:5e:57:be:d8:b4:20:ba:fa:
                    ad:d5:38:85:07:60:8d:f6:50:ef:38:1b:cb:83:d1:
                    61:d9:6d:33:d1:56:c0:e8:61:70:9f:cb:0a:db:ed:
                    65:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BC:35:E8:20:40:67:63:59:A2:EE:E4:99:2A:5D:89:AD:3E:8F:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/640c453f-18c8-33fa-8803-ecb7430cd4af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:ce:2d:d6:ba:21:be:ec:98:a1:8c:7b:97:ec:d7:27:e1:0f:
         a4:a1:9f:ba:44:44:5b:29:76:2d:eb:ab:a4:28:e5:10:41:b1:
         f7:7c:23:ab:d6:ab:78:7a:d7:86:12:2b:88:88:37:02:50:db:
         6b:c6:d9:1e:0a:64:5a:23:44:c7:d7:85:ca:3e:1d:75:26:15:
         a8:82:3d:63:50:3a:ef:75:e1:f1:70:41:15:69:34:80:48:d0:
         9a:2d:d4:57:d7:ec:b6:44:e1:cf:4f:d5:6c:3b:fe:e5:dd:9a:
         83:f2:03:bb:46:97:e7:6a:62:4d:75:18:44:2d:49:6e:70:92:
         b5:ad:36:3c:21:22:ce:45:9c:bb:d7:9d:66:77:38:0a:30:fd:
         40:3f:90:a7:0d:89:53:00:e9:13:84:0e:4a:76:1c:65:8d:7a:
         6b:a6:19:04:be:4a:b0:c0:cb:96:1f:0f:06:71:24:ba:30:ce:
         b8:c2:dc:cf:3c:62:b2:14:db:ab:0e:3d:60:28:33:c4:07:cb:
         33:f7:d9:cc:f6:b1:4e:92:ed:75:5d:2c:5d:26:90:a4:27:9d:
         40:45:df:ba:ca:43:1a:99:67:85:29:21:9a:79:5d:83:22:59:
         64:d9:52:da:9b:0c:b9:38:f8:5f:be:1c:aa:15:0f:30:14:62:
         3a:97:b9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:52:35 2026 by rpki-client