Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3ac6c564-59d7-31eb-8b66-a27be99aa706.roa
File:                     3ac6c564-59d7-31eb-8b66-a27be99aa706.roa (raw, json)
Hash identifier:          sHMJz6mHcC6fXd8nLpYYXXrEfV1xMQl+KnBWUOqk8Lg=
Subject key identifier:   7A:C0:77:B4:66:DF:E8:DE:60:46:0A:B3:3C:5A:A7:AA:DA:61:C8:40
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD85E84F416A24A54A83C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3ac6c564-59d7-31eb-8b66-a27be99aa706.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        70.41.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:85:e8:4f:41:6a:24:a5:4a:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=6bf47db6-e273-49fa-94d4-0147ed946689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ab:f3:a6:35:1f:b8:b4:7a:70:6a:52:9e:c2:
                    7e:89:63:9b:96:df:79:2e:1d:a3:3c:93:72:c0:b7:
                    a5:ce:66:5e:da:8f:27:c4:a7:7c:e0:ee:dd:8a:b5:
                    3a:cb:48:f0:8a:91:6f:0d:ff:49:94:9a:c3:f9:13:
                    90:a7:17:ca:be:90:8a:1b:56:0d:50:08:3a:6b:6e:
                    1f:0d:c1:b3:e5:48:aa:ee:48:b3:5a:86:17:8e:bb:
                    cf:28:29:6f:63:3a:6a:be:fc:dd:b2:2d:c6:fd:30:
                    e0:e0:10:5c:07:12:c9:a1:44:57:d0:c2:7c:57:dc:
                    a8:95:c5:ac:b8:e2:8c:0e:37:0f:30:f9:1b:a2:e2:
                    fd:69:4c:1b:2f:04:92:bb:e8:0b:cf:2f:fb:4d:eb:
                    88:41:00:96:04:8d:bb:95:e4:73:1a:20:8d:3f:aa:
                    a1:57:37:e0:b5:9e:e8:d8:c7:d8:76:bd:15:7f:3a:
                    fb:60:2b:14:e1:f9:57:18:ee:a7:d6:ba:d0:14:9d:
                    5c:72:d9:37:5e:24:16:96:57:4f:c0:35:e7:a3:5a:
                    f0:20:2c:85:b0:84:b5:0b:4b:fe:cb:23:62:16:25:
                    32:c7:15:18:72:27:f2:4d:f8:6e:ca:ee:83:58:1d:
                    26:b4:6d:31:54:3f:c9:1f:31:3e:30:00:3e:55:25:
                    58:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C0:77:B4:66:DF:E8:DE:60:46:0A:B3:3C:5A:A7:AA:DA:61:C8:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3ac6c564-59d7-31eb-8b66-a27be99aa706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:eb:60:07:f9:ec:10:25:70:92:b0:be:bb:fa:2a:5e:fa:2a:
         e4:31:76:e5:39:9f:20:4d:bd:7e:13:f0:54:64:28:bf:e4:97:
         45:09:e4:da:5c:5d:95:3d:42:a5:6c:fe:8e:2f:49:7b:0e:f0:
         46:39:9a:31:3e:4d:f8:41:01:38:88:ff:d7:ea:30:bf:f5:10:
         3f:cc:c8:39:a4:86:06:ce:4a:75:9b:49:94:dd:c2:9a:41:ec:
         62:f0:b5:30:db:e5:13:2c:ea:bd:f5:b8:7e:a8:77:92:69:97:
         9f:26:ba:5e:93:4d:34:45:c5:01:f9:83:c9:b5:e2:5f:5d:4d:
         4b:f5:a6:5e:22:17:5b:0f:73:29:9e:12:9a:0c:57:37:da:f1:
         f2:88:25:fa:da:34:1a:7f:69:d6:68:cf:cb:b7:0b:38:a1:0d:
         7a:2c:4c:37:31:ac:1a:da:16:ec:ea:7e:df:ad:50:8d:ce:6d:
         02:e9:c4:ab:e2:6d:2a:ef:61:03:63:ae:83:76:55:11:49:94:
         a4:50:0a:b5:19:97:e4:3c:0c:94:da:8e:2b:ae:a9:f8:35:04:
         ec:24:c6:da:9b:c8:0f:34:40:8e:a7:6a:41:56:8e:9f:47:89:
         c8:8f:80:d5:57:6d:bd:be:6a:1e:7a:c1:8b:f3:9c:d9:66:2b:
         cf:0d:8c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:23:23 2025 by rpki-client