Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/67b5ba86-7ff8-3dc8-92b9-b65ad931eea6.roa
File:                     67b5ba86-7ff8-3dc8-92b9-b65ad931eea6.roa (raw, json)
Hash identifier:          YXZLIWucu/O+JsC+eWucaBvzEbWIhg2/AjTBMaAmlRU=
Subject key identifier:   BC:D5:5F:E6:44:58:03:14:D5:50:C5:2F:C5:EB:B0:61:42:AE:74:D0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCD22F1EB921F211801580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/67b5ba86-7ff8-3dc8-92b9-b65ad931eea6.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        70.41.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:d2:2f:1e:b9:21:f2:11:80:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=7a6aaa0f-86d7-451f-af26-b96e6f3574c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:dc:5b:c6:83:44:d8:ad:6b:8c:23:47:26:de:
                    87:0e:89:33:b9:28:09:eb:27:43:5b:b4:e1:5e:2f:
                    3d:5d:53:1c:0d:d9:09:78:4a:0b:58:41:35:22:a5:
                    fd:c9:87:1b:a6:55:f8:d8:a4:2c:53:05:01:9e:67:
                    11:41:8f:1b:59:df:3e:28:15:00:e6:a2:4a:e8:de:
                    4a:f3:c2:24:da:41:9f:79:63:3d:8c:c1:c8:5d:8f:
                    25:4f:a0:19:45:f5:82:79:40:21:ac:95:7d:b6:d8:
                    52:09:43:f3:4b:62:9c:61:db:4c:9d:27:32:6d:c4:
                    64:9d:80:e1:05:4c:ce:e0:f9:62:5e:12:84:bc:97:
                    fc:fd:1e:83:24:a3:9f:23:ce:c5:40:9b:27:69:14:
                    b7:94:36:fb:b1:4b:d1:4b:73:87:21:53:4a:97:53:
                    d2:49:bf:a0:31:0d:cd:6a:a1:93:5f:9f:a9:cf:81:
                    de:ce:70:1e:2f:4f:01:3f:13:fb:00:60:47:9e:e9:
                    38:d3:56:4d:cc:ae:ca:f3:6d:9d:64:c3:7b:fe:a7:
                    0f:fb:08:90:e3:15:1a:ac:4f:3a:94:72:3b:5a:27:
                    e7:c2:ac:eb:6a:80:85:fb:ed:f8:92:32:02:d7:71:
                    9f:dc:a6:43:d6:df:58:9e:3d:dc:b2:ec:ef:49:39:
                    aa:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D5:5F:E6:44:58:03:14:D5:50:C5:2F:C5:EB:B0:61:42:AE:74:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/67b5ba86-7ff8-3dc8-92b9-b65ad931eea6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:8e:d5:75:ae:b9:cf:6f:71:73:95:2d:b9:2e:49:e6:6d:26:
         aa:2f:4a:9f:48:ec:fe:19:18:a3:d4:10:43:82:93:9e:e6:97:
         75:18:b2:79:9e:89:b1:61:5d:2d:56:41:2f:b3:02:7d:4e:83:
         50:fb:ce:d0:ff:a8:05:d0:b4:fc:0d:7e:0a:0a:46:fc:5a:95:
         9a:10:fe:92:9b:1a:9d:cd:b5:cf:b6:c9:d2:40:74:25:91:29:
         ab:16:17:72:f6:6a:ee:a8:89:b8:8b:42:d4:ee:23:a7:ca:2f:
         05:5e:9f:f9:be:bc:84:9f:a3:9f:b7:9a:68:a8:53:60:42:72:
         89:72:e3:03:5e:07:f9:43:b3:d7:36:ea:5e:14:7f:b4:d3:8e:
         8a:e3:7c:d7:95:ec:74:57:52:71:98:0c:4a:94:11:6a:15:fe:
         f1:ae:48:99:53:8b:6b:40:15:1f:a9:34:8b:4a:49:a8:af:9f:
         e2:f6:3a:0a:15:bb:fe:ed:fa:0b:35:f6:00:ba:66:1d:fa:59:
         bd:b9:fc:b9:92:bc:f6:b8:c5:74:50:47:a1:50:c0:5f:08:e7:
         db:34:40:a5:c2:20:a6:5a:85:db:90:1a:e2:e2:94:4e:de:95:
         36:47:89:e2:8f:62:4a:c9:01:f0:05:8b:e5:a1:cf:d2:3f:a9:
         cb:34:91:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzNIvHrkh8hGAFYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
N2E2YWFhMGYtODZkNy00NTFmLWFmMjYtYjk2ZTZmMzU3NGM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9xbxoNE2K1rjCNHJt6HDokzuSgJ6ydDW7Th
Xi89XVMcDdkJeEoLWEE1IqX9yYcbplX42KQsUwUBnmcRQY8bWd8+KBUA5qJK6N5K
88Ik2kGfeWM9jMHIXY8lT6AZRfWCeUAhrJV9tthSCUPzS2KcYdtMnScybcRknYDh
BUzO4PliXhKEvJf8/R6DJKOfI87FQJsnaRS3lDb7sUvRS3OHIVNKl1PSSb+gMQ3N
aqGTX5+pz4HeznAeL08BPxP7AGBHnuk401ZNzK7K822dZMN7/qcP+wiQ4xUarE86
lHI7WifnwqzraoCF++34kjIC13Gf3KZD1t9Ynj3csuzvSTmqtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLzVX+ZEWAMU1VDFL8XrsGFCrnTQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjdiNWJhODYtN2ZmOC0z
ZGM4LTkyYjktYjY1YWQ5MzFlZWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARim1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABqO1XWuuc9vcXOVLbkuSeZtJqovSp9I7P4ZGKPUEEOCk57ml3UYsnme
ibFhXS1WQS+zAn1Og1D7ztD/qAXQtPwNfgoKRvxalZoQ/pKbGp3Ntc+2ydJAdCWR
KasWF3L2au6oibiLQtTuI6fKLwVen/m+vISfo5+3mmioU2BCcoly4wNeB/lDs9c2
6l4Uf7TTjorjfNeV7HRXUnGYDEqUEWoV/vGuSJlTi2tAFR+pNItKSaivn+L2OgoV
u/7t+gs19gC6Zh36Wb25/LmSvPa4xXRQR6FQwF8I59s0QKXCIKZahduQGuLilE7e
lTZHieKPYkrJAfAFi+Whz9I/qcs0keU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:22:09 2025 by rpki-client