Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f4c1b2e-ddbf-353c-98e1-715cbe69e029.roa
File:                     1f4c1b2e-ddbf-353c-98e1-715cbe69e029.roa (raw, json)
Hash identifier:          agi9bB5hd0A2wmHrJghZThylnnY8rg5GvlBj7CR7l/c=
Subject key identifier:   7E:EC:47:98:16:19:CF:72:0D:6D:46:89:57:51:C8:7B:F1:35:3C:FA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCD0118C71D6930C989940
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f4c1b2e-ddbf-353c-98e1-715cbe69e029.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        70.41.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:d0:11:8c:71:d6:93:0c:98:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=14941da7-197e-4ce1-9318-3134ca30cb7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:52:78:f8:7e:4b:52:c8:21:0f:64:fa:9a:ff:
                    8a:a8:9c:88:3b:66:30:cd:92:ac:03:4d:10:50:2c:
                    9c:83:ba:48:bf:a8:cb:7c:c2:37:08:85:22:b0:36:
                    df:62:65:e1:d7:3c:4c:87:7e:b7:24:54:a1:00:54:
                    93:33:62:1e:70:76:d3:d0:41:90:ba:6a:7e:dc:d1:
                    18:a8:20:2d:5d:4e:7e:b3:b2:32:63:81:fd:89:5b:
                    86:f4:29:be:4f:74:81:1f:94:96:b6:75:63:d6:14:
                    bd:d3:c4:49:cb:ae:e3:9d:2a:34:13:f8:0d:03:e5:
                    0f:27:bd:85:aa:1e:06:0e:47:22:a1:22:93:66:f0:
                    9d:88:bd:eb:23:a1:96:8c:14:45:4a:e9:e2:01:84:
                    22:f4:f3:b3:6d:5a:4a:2d:e1:74:bb:ca:af:ad:cb:
                    64:cd:d3:fc:90:0e:44:42:61:61:6f:91:3f:01:c0:
                    9b:05:28:2b:61:e4:9b:1c:ad:0d:24:b6:28:cc:e3:
                    7f:d9:48:fc:9e:e3:9f:06:f8:8c:66:e1:e6:84:9d:
                    13:a7:80:4e:52:6f:26:83:b2:88:a5:12:dc:53:91:
                    c2:ee:2f:2c:e4:ce:d3:e1:03:f0:37:f7:41:ae:92:
                    16:22:a3:cd:c4:14:5f:d6:27:f8:d4:e4:2b:3d:1b:
                    58:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:EC:47:98:16:19:CF:72:0D:6D:46:89:57:51:C8:7B:F1:35:3C:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f4c1b2e-ddbf-353c-98e1-715cbe69e029.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:14:4d:7f:a9:c8:82:cf:1b:e0:0e:47:f5:3d:2b:b3:b5:fd:
         be:6c:4b:1a:54:d7:ff:13:e5:a3:fd:bb:a5:7c:a1:1c:e9:85:
         5e:53:55:4c:11:55:f8:84:27:a6:48:0b:f2:fb:06:70:c3:f2:
         bf:b7:a8:40:a0:8f:f2:50:5a:3f:15:b4:84:86:26:a3:78:19:
         d7:80:be:be:86:b9:7b:c4:68:41:8f:3a:cf:e1:89:f9:20:39:
         3c:cb:d0:fc:82:21:c7:43:68:03:fa:3a:14:78:bb:04:09:c1:
         1a:19:00:6d:e9:d3:24:a6:84:14:5b:71:c7:39:e6:f2:b0:49:
         bc:61:f8:64:0a:0e:88:c8:74:45:06:db:20:de:56:c2:da:5d:
         04:dc:6a:b1:e0:e9:8d:10:4a:72:44:09:9a:75:92:6b:c6:90:
         24:0b:89:99:a6:01:e8:5f:27:d3:5e:89:4b:ec:9d:a9:c8:3a:
         f8:3b:06:73:a6:17:d3:11:b0:c9:90:86:6b:9a:f6:3a:da:9c:
         5e:62:38:76:f5:84:58:37:2d:5f:e9:88:83:de:3e:03:fc:05:
         1b:9e:f1:df:15:4f:bf:60:92:26:ff:39:3f:06:6c:51:29:98:
         46:98:a2:f0:02:dc:75:49:f0:25:de:ce:a9:72:da:4f:40:e0:
         4e:f8:12:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzNARjHHWkwyYmUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MTQ5NDFkYTctMTk3ZS00Y2UxLTkzMTgtMzEzNGNhMzBjYjdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFJ4+H5LUsghD2T6mv+KqJyIO2YwzZKsA00Q
UCycg7pIv6jLfMI3CIUisDbfYmXh1zxMh363JFShAFSTM2IecHbT0EGQump+3NEY
qCAtXU5+s7IyY4H9iVuG9Cm+T3SBH5SWtnVj1hS908RJy67jnSo0E/gNA+UPJ72F
qh4GDkcioSKTZvCdiL3rI6GWjBRFSuniAYQi9POzbVpKLeF0u8qvrctkzdP8kA5E
QmFhb5E/AcCbBSgrYeSbHK0NJLYozON/2Uj8nuOfBviMZuHmhJ0Tp4BOUm8mg7KI
pRLcU5HC7i8s5M7T4QPwN/dBrpIWIqPNxBRf1if41OQrPRtYlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH7sR5gWGc9yDW1GiVdRyHvxNTz6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWY0YzFiMmUtZGRiZi0z
NTNjLTk4ZTEtNzE1Y2JlNjllMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARil4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFMUTX+pyILPG+AOR/U9K7O1/b5sSxpU1/8T5aP9u6V8oRzphV5TVUwR
VfiEJ6ZIC/L7BnDD8r+3qECgj/JQWj8VtISGJqN4GdeAvr6GuXvEaEGPOs/hifkg
OTzL0PyCIcdDaAP6OhR4uwQJwRoZAG3p0ySmhBRbccc55vKwSbxh+GQKDojIdEUG
2yDeVsLaXQTcarHg6Y0QSnJECZp1kmvGkCQLiZmmAehfJ9NeiUvsnanIOvg7BnOm
F9MRsMmQhmua9jranF5iOHb1hFg3LV/piIPePgP8BRue8d8VT79gkib/OT8GbFEp
mEaYovAC3HVJ8CXezqly2k9A4E74Eos=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:53:10 2025 by rpki-client