Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6f2c8a8-e0ee-3339-839e-4c51d8c8912a.roa
File:                     a6f2c8a8-e0ee-3339-839e-4c51d8c8912a.roa (raw, json)
Hash identifier:          t7ihSszOi8Ze/pgkg4Egp6omJruhgfONPnxRHqCaUPA=
Subject key identifier:   B9:3D:C4:28:54:B2:94:FE:9F:92:9F:E0:B5:F4:4F:99:20:E9:05:A3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BD8880E9EBA85F6AF35C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6f2c8a8-e0ee-3339-839e-4c51d8c8912a.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     40306
IP address blocks:        70.41.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:d8:88:0e:9e:ba:85:f6:af:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=4dbdcc87-9b16-4229-9c1d-79aee7839720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d8:8e:ce:b3:d0:9b:8c:92:76:7c:81:81:29:
                    39:13:2b:48:39:55:37:ff:4c:93:4a:f7:d1:ab:4b:
                    b1:18:e9:b4:02:c7:cc:66:2a:ba:c1:50:f2:b2:d6:
                    04:1a:4f:d2:aa:62:86:f7:b1:46:d2:e2:2e:a3:78:
                    75:9a:f7:3c:5b:b2:f9:34:7a:10:10:56:16:e1:f5:
                    20:b2:28:97:80:ad:07:4e:d5:3a:b7:ae:1a:fd:df:
                    bc:2b:e7:2b:cc:e2:1d:f1:20:9e:bc:3c:e2:23:b3:
                    37:2d:6e:ff:06:e1:3b:75:42:e8:4c:95:18:c5:a4:
                    4a:7a:af:0c:66:dc:34:2e:c3:7c:7a:88:c7:8d:2c:
                    bc:aa:47:c7:73:cc:4d:32:ab:fa:d6:1c:a7:c1:63:
                    c0:b8:26:c7:59:7b:f0:e7:db:9a:49:56:6d:99:4d:
                    91:db:22:25:5c:ea:4a:46:10:c9:00:90:98:76:23:
                    0d:7b:9d:26:bc:b1:99:5d:73:f9:53:28:82:33:12:
                    54:96:b1:82:62:97:77:01:79:0f:7b:9a:55:83:5d:
                    7d:79:eb:1d:cc:49:a5:e6:5e:ca:a9:10:cc:e3:09:
                    ed:b2:d9:dc:d4:ef:57:9e:c3:f0:5a:7d:98:5e:22:
                    d2:e1:74:90:2e:4f:fb:d0:7a:6d:fe:2b:c2:74:b5:
                    12:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:3D:C4:28:54:B2:94:FE:9F:92:9F:E0:B5:F4:4F:99:20:E9:05:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6f2c8a8-e0ee-3339-839e-4c51d8c8912a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:3c:cc:40:d7:b1:01:10:89:46:f0:1c:b0:20:8f:8c:cd:53:
         dc:36:64:6e:92:15:3b:9b:e4:75:c7:b5:fa:d9:94:bf:e4:09:
         b0:4d:4b:d3:e9:b0:d7:d4:b8:1d:d2:fc:65:d9:13:2f:ae:c0:
         be:a2:f8:70:1d:22:39:80:e5:b8:a0:ed:2d:f9:a1:8d:91:0f:
         21:62:d6:a9:63:f0:0d:26:f2:29:c5:5c:f7:cc:f1:32:8e:85:
         a3:14:6a:a2:cd:ba:80:38:ee:61:63:d3:db:ae:9d:ed:55:58:
         7a:b4:83:98:19:71:36:da:f2:56:04:02:ce:20:25:3f:e6:58:
         2b:ed:04:03:4d:00:17:f3:4a:da:e8:34:38:84:3c:b8:b4:f2:
         8f:51:26:ee:c7:cf:1e:25:30:c9:8b:92:44:b0:85:eb:5c:cb:
         1a:be:01:5c:c9:44:dd:99:b0:41:4e:0f:b4:27:dd:19:8a:53:
         eb:32:c9:15:16:38:6c:45:8e:96:53:7f:32:cd:a3:e3:17:78:
         91:6a:b0:50:f6:b2:c1:2a:72:06:8f:f4:f1:73:0b:77:f8:3e:
         08:f6:42:01:9e:9a:32:50:68:f8:87:22:a7:7f:22:ec:1b:89:
         7d:c0:7e:eb:4e:4a:e7:c5:a9:a8:5d:09:86:eb:66:5b:8a:d1:
         69:70:2c:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm9iIDp66hfavNcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
NGRiZGNjODctOWIxNi00MjI5LTljMWQtNzlhZWU3ODM5NzIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitiOzrPQm4ySdnyBgSk5EytIOVU3/0yTSvfR
q0uxGOm0AsfMZiq6wVDystYEGk/SqmKG97FG0uIuo3h1mvc8W7L5NHoQEFYW4fUg
siiXgK0HTtU6t64a/d+8K+crzOId8SCevDziI7M3LW7/BuE7dULoTJUYxaRKeq8M
Ztw0LsN8eojHjSy8qkfHc8xNMqv61hynwWPAuCbHWXvw59uaSVZtmU2R2yIlXOpK
RhDJAJCYdiMNe50mvLGZXXP5UyiCMxJUlrGCYpd3AXkPe5pVg119eesdzEml5l7K
qRDM4wntstnc1O9XnsPwWn2YXiLS4XSQLk/70Hpt/ivCdLUSjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLk9xChUspT+n5Kf4LX0T5kg6QWjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTZmMmM4YTgtZTBlZS0z
MzM5LTgzOWUtNGM1MWQ4Yzg5MTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHk8zEDXsQEQiUbwHLAgj4zNU9w2ZG6SFTub5HXHtfrZlL/kCbBNS9Pp
sNfUuB3S/GXZEy+uwL6i+HAdIjmA5big7S35oY2RDyFi1qlj8A0m8inFXPfM8TKO
haMUaqLNuoA47mFj09uune1VWHq0g5gZcTba8lYEAs4gJT/mWCvtBANNABfzStro
NDiEPLi08o9RJu7Hzx4lMMmLkkSwhetcyxq+AVzJRN2ZsEFOD7Qn3RmKU+syyRUW
OGxFjpZTfzLNo+MXeJFqsFD2ssEqcgaP9PFzC3f4Pgj2QgGemjJQaPiHIqd/Iuwb
iX3AfutOSufFqahdCYbrZluK0WlwLEQ=
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:05:11 2026 by rpki-client