Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69926ca6-7ed6-38d5-bca4-9bfcde3a91f1.roa
File:                     69926ca6-7ed6-38d5-bca4-9bfcde3a91f1.roa (raw, json)
Hash identifier:          PCuA0dCOP13/C4vNQhYbX26Aj2Q/JGUyNjfv2AeUmBc=
Subject key identifier:   FD:47:0C:5E:D9:AE:F6:1A:73:19:9D:F8:AB:45:E1:89:AC:4A:10:B6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD88B583C08FF2504AA080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69926ca6-7ed6-38d5-bca4-9bfcde3a91f1.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        70.41.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:88:b5:83:c0:8f:f2:50:4a:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=9111d052-c809-431d-8c47-b4ec2b2fdd35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fb:7d:7e:2c:9d:51:7a:8b:e9:d3:65:b9:6e:
                    7c:9a:34:60:40:c2:b0:64:92:c1:72:e9:cc:5e:52:
                    55:d1:cb:1a:be:8a:d0:f1:47:56:46:66:68:9b:1f:
                    96:96:c6:b8:8c:11:e1:36:2c:ce:0f:c5:0f:b0:16:
                    df:f5:1b:c6:b8:d1:8e:29:35:5d:e9:93:67:8f:1a:
                    3a:4b:61:d8:31:35:cc:3a:69:c2:e7:d0:cb:ed:63:
                    7d:b3:4f:54:75:96:aa:aa:3c:d5:d5:72:a0:1e:2a:
                    89:5e:5b:a2:08:04:f2:5e:87:25:33:f5:27:c1:c7:
                    1d:95:87:db:04:3d:5d:a1:d3:4c:4f:27:46:89:92:
                    33:d0:73:26:7b:8d:e6:b5:7b:be:c0:7d:14:0d:9d:
                    52:b9:df:5a:f1:dd:0c:d6:36:16:ee:69:75:b6:e9:
                    27:71:bf:3f:93:93:2f:79:c4:dc:a6:34:27:da:08:
                    fe:df:dc:43:64:37:ac:f6:4b:15:0f:7e:ec:c0:29:
                    17:3a:66:59:42:a8:5b:4f:1b:21:8e:dc:aa:df:9a:
                    7d:f6:43:ac:86:57:77:14:83:26:d4:ed:39:55:d8:
                    76:ce:8e:c2:df:7b:b4:d6:24:99:c5:30:a4:ca:94:
                    a3:da:ef:2f:80:3c:77:ba:7a:83:b7:10:fa:bc:df:
                    c7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:47:0C:5E:D9:AE:F6:1A:73:19:9D:F8:AB:45:E1:89:AC:4A:10:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69926ca6-7ed6-38d5-bca4-9bfcde3a91f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:9c:1f:76:49:95:5e:40:cd:59:15:51:04:f5:06:2e:de:ab:
         9e:0a:5d:4f:7a:9f:30:8c:58:ed:d2:70:9e:ef:3b:05:7d:03:
         2d:92:ed:22:16:5b:98:a5:18:1e:7f:d1:48:d2:15:e7:68:62:
         34:70:87:3d:6e:46:a4:d9:21:a9:1b:e3:0c:23:fc:9e:82:de:
         74:fe:6d:5b:32:d3:ee:ad:e9:62:84:3b:b5:80:e5:06:8e:ef:
         bd:1b:2b:08:c8:b0:48:e9:1b:cf:9c:f7:ad:92:67:41:fd:5f:
         4f:e5:af:4b:91:1b:5a:0a:24:c0:48:d2:b2:4f:76:5c:b5:e1:
         94:1b:2b:50:a1:0b:9d:25:21:77:ea:c2:0c:1f:31:54:e9:10:
         54:a8:a9:d5:e7:89:d5:ab:3e:75:10:b8:4a:59:95:e2:78:ee:
         35:a7:d0:9e:1d:da:67:73:29:c3:61:3f:ab:a1:ee:44:9a:38:
         ae:42:70:88:33:34:79:73:43:5f:47:30:83:88:52:5d:df:7e:
         64:07:c9:85:55:76:b9:60:71:44:2d:29:80:14:ef:b9:6d:ab:
         fa:f1:dc:d9:ca:ae:90:19:41:17:94:d5:06:97:79:0d:c0:b4:
         19:8c:b8:db:7f:01:ca:13:97:b6:cf:9f:dd:57:cb:33:30:7e:
         71:d4:cc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:28:32 2025 by rpki-client