Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c305304d-0d89-3ba1-883e-3828e7b4d565.roa
File:                     c305304d-0d89-3ba1-883e-3828e7b4d565.roa (raw, json)
Hash identifier:          E016cINhf9YFm3D2GO+qLeQt04Su97PbTX1tqELbEwM=
Subject key identifier:   71:40:31:FD:6E:2E:C0:35:87:FE:21:65:E5:42:87:FC:DB:8B:46:BA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79D79F861A2B5877072E8D0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c305304d-0d89-3ba1-883e-3828e7b4d565.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        70.41.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:79:f8:61:a2:b5:87:70:72:e8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=198785bd-7e3b-48a2-88b1-248db6df9516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d0:59:71:3b:ac:75:18:f0:b2:97:87:60:f7:
                    a2:69:32:ec:b6:94:a5:ca:72:d4:b5:4c:8b:ae:94:
                    b4:e3:b5:2f:14:65:d7:6d:fa:b6:70:de:76:a7:fc:
                    d1:ca:03:8a:72:c5:b4:5b:19:07:9d:0a:90:74:70:
                    67:67:6b:11:c7:03:c6:3b:17:fe:b1:8d:a3:c8:c4:
                    ce:62:2d:23:00:b5:19:a3:ce:f2:39:c2:f3:91:f4:
                    ce:0b:ce:91:d3:56:b3:26:29:8f:08:57:39:9e:9f:
                    da:99:bd:d8:be:7f:03:2d:0e:19:b0:95:f3:de:67:
                    0a:80:e5:21:fb:34:84:fb:88:b8:b5:09:e2:d0:e4:
                    c9:6b:04:8f:61:f1:7c:99:20:30:5f:1c:d1:2a:45:
                    24:65:19:94:0f:cf:e8:0d:ae:3e:b3:87:25:d7:b8:
                    1a:ae:29:77:bb:93:a5:d0:4e:45:a8:83:68:d1:01:
                    0f:e9:1f:5e:2c:f5:10:dc:df:f1:63:b2:36:1a:39:
                    45:47:8d:d8:d5:d9:54:37:77:a5:fe:f6:4c:cc:7e:
                    07:0a:cd:40:02:c9:e0:9c:3e:3f:d6:c8:18:1c:a5:
                    50:df:6a:71:01:21:fc:b0:72:c3:4a:45:31:85:e6:
                    24:a8:b3:a4:82:f3:a7:77:9c:5e:30:a9:26:7b:93:
                    30:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:40:31:FD:6E:2E:C0:35:87:FE:21:65:E5:42:87:FC:DB:8B:46:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c305304d-0d89-3ba1-883e-3828e7b4d565.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:ad:f1:38:df:80:d8:91:35:fa:92:76:24:f9:6c:b7:c9:03:
         74:37:ac:21:44:af:d4:a8:25:08:7b:27:15:ac:72:04:8e:23:
         39:2c:8f:2f:c9:e2:3d:44:1c:26:9a:5b:90:12:4c:78:82:4c:
         35:83:e4:5a:d8:db:a1:d8:ce:2c:37:5a:cb:4e:3c:57:84:ba:
         0a:c3:05:1f:14:ea:f7:97:e8:bc:17:5d:0d:66:1a:d6:85:dc:
         64:78:3f:de:4b:f2:6e:4c:8d:19:cf:10:15:2c:59:b9:1b:ef:
         ac:ba:08:f7:12:e0:0b:81:fb:12:62:37:8f:a9:f7:08:a5:41:
         17:be:a2:a2:be:d1:5e:4d:9a:53:39:e7:06:16:20:b8:f8:82:
         b6:06:af:fc:1d:e7:46:fa:4b:88:bb:d5:48:a7:c4:7d:1d:d3:
         10:8e:6c:97:42:ec:16:63:c2:7d:5f:64:f5:32:a2:98:fc:5d:
         e8:34:5b:0c:b8:38:74:9d:5c:a0:13:88:e4:a0:5a:ea:36:7e:
         23:b4:67:df:87:d4:f9:c4:6c:34:5d:88:4f:25:7c:32:3a:3f:
         db:4a:f7:02:fe:45:e2:f1:59:81:7a:7d:25:2b:c1:7b:70:29:
         04:5a:c7:4d:ca:b9:80:05:86:8a:e1:6b:a7:49:fa:80:93:3e:
         a9:c3:d7:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnXn4YaK1h3By6NAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MTk4Nzg1YmQtN2UzYi00OGEyLTg4YjEtMjQ4ZGI2ZGY5NTE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztBZcTusdRjwspeHYPeiaTLstpSlynLUtUyL
rpS047UvFGXXbfq2cN52p/zRygOKcsW0WxkHnQqQdHBnZ2sRxwPGOxf+sY2jyMTO
Yi0jALUZo87yOcLzkfTOC86R01azJimPCFc5np/amb3Yvn8DLQ4ZsJXz3mcKgOUh
+zSE+4i4tQni0OTJawSPYfF8mSAwXxzRKkUkZRmUD8/oDa4+s4cl17garil3u5Ol
0E5FqINo0QEP6R9eLPUQ3N/xY7I2GjlFR43Y1dlUN3el/vZMzH4HCs1AAsngnD4/
1sgYHKVQ32pxASH8sHLDSkUxheYkqLOkgvOnd5xeMKkme5MwpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHFAMf1uLsA1h/4hZeVCh/zbi0a6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzMwNTMwNGQtMGQ4OS0z
YmExLTg4M2UtMzgyOGU3YjRkNTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARil1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMat8TjfgNiRNfqSdiT5bLfJA3Q3rCFEr9SoJQh7JxWscgSOIzksjy/J
4j1EHCaaW5ASTHiCTDWD5FrY26HYziw3WstOPFeEugrDBR8U6veX6LwXXQ1mGtaF
3GR4P95L8m5MjRnPEBUsWbkb76y6CPcS4AuB+xJiN4+p9wilQRe+oqK+0V5NmlM5
5wYWILj4grYGr/wd50b6S4i71UinxH0d0xCObJdC7BZjwn1fZPUyopj8Xeg0Wwy4
OHSdXKATiOSgWuo2fiO0Z9+H1PnEbDRdiE8lfDI6P9tK9wL+ReLxWYF6fSUrwXtw
KQRax03KuYAFhorha6dJ+oCTPqnD13w=
-----END CERTIFICATE-----
Generated at Thu Sep 10 12:43:58 2026 by rpki-client