Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b52a449-4acc-378f-8abb-f501dea017d5.roa
File:                     0b52a449-4acc-378f-8abb-f501dea017d5.roa (raw, json)
Hash identifier:          PO8GqEscAzZ9VhXCFHONI+nRJqXOBnhs9i70WH9LiZY=
Subject key identifier:   A4:9F:83:C0:E5:29:70:38:0E:97:69:96:16:3B:E7:7D:22:62:F1:70
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD87035048ABAA830F4600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b52a449-4acc-378f-8abb-f501dea017d5.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        70.41.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:87:03:50:48:ab:aa:83:0f:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=e9ab439d-a0ef-4983-9892-e654178050a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:88:3d:7f:b7:87:12:58:e1:ea:1b:90:95:a9:
                    25:79:bc:b4:14:63:3f:4a:b7:fb:56:87:29:ff:6f:
                    58:d8:69:e3:06:a5:ab:01:f3:b9:da:53:5e:48:b5:
                    07:e3:e9:fe:42:14:38:87:a7:b7:68:db:b0:cd:67:
                    6f:4e:ee:00:80:2d:04:97:59:57:37:a9:58:c9:14:
                    86:7c:c6:e5:5c:d4:1a:ee:86:42:ae:5f:9a:b7:0c:
                    2f:14:80:0c:de:87:1d:f1:40:7b:b1:91:d0:17:3d:
                    99:3d:90:68:45:73:fe:bb:13:ab:d6:f5:49:b5:0d:
                    cf:12:de:02:86:ae:6f:53:85:25:dd:61:a5:43:ed:
                    08:27:d5:74:4a:94:bd:d8:b1:0e:be:8b:76:f1:cb:
                    95:d5:0c:ef:ba:6c:3c:8f:56:5e:2d:bd:f8:f8:eb:
                    ff:3a:10:48:cb:a9:b0:6c:7a:8f:83:82:5e:da:5a:
                    cd:5f:43:0c:15:69:04:96:48:76:3d:bb:58:10:2c:
                    90:78:c8:af:6d:aa:e9:aa:ad:51:69:4f:57:17:b4:
                    e7:1e:d0:0a:9e:e5:2e:1d:8f:11:7a:a7:93:b2:39:
                    64:53:86:d3:9b:43:a8:81:c0:fb:24:3b:59:24:5a:
                    fa:98:6a:3d:6e:8c:68:fb:a0:0a:3a:98:6d:de:e7:
                    e2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9F:83:C0:E5:29:70:38:0E:97:69:96:16:3B:E7:7D:22:62:F1:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b52a449-4acc-378f-8abb-f501dea017d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:3c:0a:ed:a0:7b:41:82:c0:e6:d1:8a:27:ea:1f:88:42:98:
         e4:88:08:4a:66:c6:d3:12:3f:4c:1c:6f:e4:ef:22:63:4f:a8:
         a9:1a:a4:ca:0c:4d:47:5e:48:c6:d8:bc:7b:24:4b:22:81:66:
         73:e9:f0:8f:0d:af:6b:b0:d2:53:c7:3d:e5:cf:86:c2:15:9f:
         a1:c9:05:f6:17:83:45:7f:30:31:7c:52:fb:dd:bf:09:15:12:
         ef:f7:88:48:af:21:25:57:97:c0:be:f9:70:9e:a5:1c:20:13:
         cf:73:bb:66:8d:17:bf:aa:f4:ad:f8:13:f4:4c:a2:ac:d7:c4:
         46:15:de:ab:f3:c5:25:45:cc:b7:17:85:de:b3:e7:6d:bf:29:
         5c:fe:ab:e8:03:35:c6:8f:22:9f:77:0a:8e:e5:e1:cb:40:2a:
         59:c0:f5:26:8a:52:90:6d:fd:7b:83:2a:9f:c4:bd:d8:67:20:
         b7:5b:d8:10:1f:87:5e:75:4f:ba:f7:19:01:34:12:2d:32:4b:
         c9:00:b3:b8:f1:ca:18:23:84:c7:cf:db:e8:1c:a3:38:54:a2:
         c6:a7:2f:42:73:7f:20:fb:57:b9:9e:bc:73:cb:76:18:7e:18:
         45:34:2b:0d:28:e7:5b:35:0b:b5:54:34:4a:45:c0:34:16:b7:
         de:22:45:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzYcDUEirqoMPRgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
ZTlhYjQzOWQtYTBlZi00OTgzLTk4OTItZTY1NDE3ODA1MGEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiog9f7eHEljh6huQlakleby0FGM/Srf7Vocp
/29Y2GnjBqWrAfO52lNeSLUH4+n+QhQ4h6e3aNuwzWdvTu4AgC0El1lXN6lYyRSG
fMblXNQa7oZCrl+atwwvFIAM3ocd8UB7sZHQFz2ZPZBoRXP+uxOr1vVJtQ3PEt4C
hq5vU4Ul3WGlQ+0IJ9V0SpS92LEOvot28cuV1Qzvumw8j1ZeLb34+Ov/OhBIy6mw
bHqPg4Je2lrNX0MMFWkElkh2PbtYECyQeMivbarpqq1RaU9XF7TnHtAKnuUuHY8R
eqeTsjlkU4bTm0OogcD7JDtZJFr6mGo9boxo+6AKOpht3ufiuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKSfg8DlKXA4DpdplhY7530iYvFwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGI1MmE0NDktNGFjYy0z
NzhmLThhYmItZjUwMWRlYTAxN2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARim6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE88Cu2ge0GCwObRiifqH4hCmOSICEpmxtMSP0wcb+TvImNPqKkapMoM
TUdeSMbYvHskSyKBZnPp8I8Nr2uw0lPHPeXPhsIVn6HJBfYXg0V/MDF8UvvdvwkV
Eu/3iEivISVXl8C++XCepRwgE89zu2aNF7+q9K34E/RMoqzXxEYV3qvzxSVFzLcX
hd6z522/KVz+q+gDNcaPIp93Co7l4ctAKlnA9SaKUpBt/XuDKp/EvdhnILdb2BAf
h151T7r3GQE0Ei0yS8kAs7jxyhgjhMfP2+gcozhUosanL0JzfyD7V7mevHPLdhh+
GEU0Kw0o51s1C7VUNEpFwDQWt94iRRU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:26:12 2025 by rpki-client