Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7b4d714b-e0e1-3698-a96c-409ce9ee7105.roa
File:                     7b4d714b-e0e1-3698-a96c-409ce9ee7105.roa (raw, json)
Hash identifier:          pnwL79H+4GX/Hg/KSY221UdV8Sl/fRHeOTr8NNiWaUg=
Subject key identifier:   B1:E3:5B:69:A0:CB:ED:13:C2:9D:C3:99:EE:A4:18:5B:2D:D3:46:9F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCCF4A9BF488C2D6395900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7b4d714b-e0e1-3698-a96c-409ce9ee7105.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        70.41.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:cf:4a:9b:f4:88:c2:d6:39:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=6d347848-92a9-4839-9a00-900705d9e170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a4:d4:d4:6f:68:77:86:f4:79:0f:19:58:7d:
                    2a:94:f2:d1:03:c6:87:e7:c2:ab:35:02:ec:d1:fd:
                    04:b3:45:03:2a:2e:76:f5:17:ab:f1:f0:5f:88:3f:
                    27:5a:8b:06:e5:51:72:26:fd:58:22:43:4b:1e:71:
                    a0:c5:8d:62:62:d5:b6:c2:0e:e4:69:05:07:d1:8e:
                    fe:7c:27:c1:37:23:d7:dd:48:6e:6e:85:33:41:12:
                    bf:c8:cc:c8:d0:39:fb:53:02:20:05:70:a2:b1:af:
                    8b:ca:f5:bb:7b:90:a8:98:6a:3e:0a:d4:c7:9f:92:
                    22:c6:18:bb:bb:03:c4:7c:5b:b3:b2:c0:7f:34:b7:
                    23:84:b3:51:b1:a7:68:5d:52:d1:1c:e0:85:12:4c:
                    50:a2:8e:e1:bd:53:ee:25:cd:ed:b3:a1:9a:07:ee:
                    34:de:33:ee:d4:ce:66:79:39:9a:f5:b0:5b:4a:3c:
                    07:d3:29:d7:b5:51:7e:af:49:25:c5:b1:9c:89:52:
                    7b:c4:76:0e:74:5d:bf:cb:b5:d0:1f:b6:d4:23:56:
                    0d:11:b1:3f:53:f9:43:6c:44:40:c2:07:ce:be:cf:
                    d6:8a:ec:ab:0f:0d:8b:28:31:9d:f6:e2:6c:a0:c1:
                    60:a0:dd:ea:8b:23:52:52:b4:c7:9a:74:28:9a:1e:
                    14:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E3:5B:69:A0:CB:ED:13:C2:9D:C3:99:EE:A4:18:5B:2D:D3:46:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7b4d714b-e0e1-3698-a96c-409ce9ee7105.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:34:92:c4:b4:93:a9:ab:a3:66:41:69:cf:6e:d1:b4:3c:4a:
         7b:8b:81:9e:06:cc:44:1c:ad:b8:a8:d0:b9:d4:56:67:96:aa:
         41:55:ac:fb:9d:2e:1f:5b:13:77:a9:2e:33:55:30:12:70:ab:
         08:dd:11:3f:2f:d4:f5:c6:b5:1b:f5:8b:dd:3a:31:31:76:b8:
         72:f6:32:42:22:a3:6c:a2:99:c1:43:73:08:6f:d6:6d:e1:e7:
         51:dd:c5:61:39:41:2c:35:6a:ad:03:47:cc:36:47:33:f3:e2:
         9d:8e:b1:7f:9b:4d:0d:94:3c:56:41:8f:14:66:08:4a:fb:e6:
         05:cb:9a:9a:fa:38:e2:0b:0a:ef:b3:d9:69:96:bd:51:42:da:
         3d:a8:36:6b:2c:fc:49:1e:ff:3e:9b:5a:e4:b8:a0:e7:8e:54:
         61:76:e2:6a:62:96:da:3c:80:d8:69:61:52:8a:1e:9b:13:5c:
         30:43:8b:ee:9f:a5:95:70:5e:4d:6c:a5:bf:16:ee:f5:bc:88:
         4c:3e:e0:62:f1:e7:fc:20:f0:d7:92:c1:9d:46:ab:7d:69:15:
         eb:c5:9b:f6:e6:11:a4:fb:79:d9:28:dc:78:3d:6c:92:00:66:
         3b:81:04:d8:4a:ae:21:b7:76:5c:34:32:2a:e2:15:89:61:2f:
         73:f4:70:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:58 2025 by rpki-client