Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/80c010bb-2166-377b-9466-8e2e80c70132.roa
File:                     80c010bb-2166-377b-9466-8e2e80c70132.roa (raw, json)
Hash identifier:          H4d4vJL6Cx+DiaHhuzX3BHCvFvahedmefSUpvTRZnX8=
Subject key identifier:   AD:37:EC:63:CD:D0:20:FF:3B:DF:85:BE:C1:51:07:01:D0:54:A8:08
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCD088CD888F1502858D40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/80c010bb-2166-377b-9466-8e2e80c70132.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        70.41.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:d0:88:cd:88:8f:15:02:85:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=7186c1c4-bb95-466f-9900-ae191ca0e988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0e:bd:52:dd:aa:3a:27:80:3d:85:c9:68:00:
                    18:8e:ef:c4:b1:18:d9:fe:f0:3e:68:09:ab:52:89:
                    4e:e1:4e:eb:ee:31:ac:30:e6:8e:fc:87:fd:40:29:
                    c0:4f:f5:8a:2a:7e:34:d5:80:d5:f3:84:d7:9e:21:
                    54:1f:3f:5f:11:1c:16:e5:8a:fe:5f:86:e8:07:1b:
                    15:60:74:f5:cf:13:e7:1b:c5:b2:2c:c8:4d:c9:ec:
                    5b:7d:60:1e:a3:9f:1a:16:23:91:50:99:05:02:0a:
                    ce:02:86:a8:7b:4b:95:f9:b7:d1:51:bf:c9:77:e5:
                    dc:89:bb:77:0a:14:00:6f:28:c0:b2:39:87:52:78:
                    48:cd:0e:b0:11:33:4f:93:50:34:d1:c7:9d:b5:88:
                    4d:c0:a3:ca:86:a1:75:78:56:ab:06:cd:a3:2c:51:
                    aa:bd:de:e8:46:e5:c4:d0:45:61:98:36:93:2e:34:
                    f7:bb:35:61:fe:4c:e9:75:90:13:cd:1f:07:da:a3:
                    d4:21:7f:c0:84:ff:46:70:95:69:c2:97:84:53:4e:
                    69:88:6a:87:0d:cd:fd:c8:e1:84:20:16:a1:57:c2:
                    2e:33:87:5f:a4:16:df:e2:0b:10:64:b7:5e:78:5a:
                    45:4c:d2:35:70:c1:c0:82:59:9c:93:51:2b:63:65:
                    bc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:37:EC:63:CD:D0:20:FF:3B:DF:85:BE:C1:51:07:01:D0:54:A8:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/80c010bb-2166-377b-9466-8e2e80c70132.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:99:b4:65:7c:da:a6:35:7f:5d:0a:58:c7:19:b6:fb:74:65:
         6e:d6:21:ca:88:30:17:2f:f9:74:e3:30:87:46:7e:91:52:70:
         eb:d6:a7:b3:b5:40:8b:19:b8:4c:61:8e:a1:36:c1:a3:1e:1c:
         c9:99:c6:dd:e2:30:7b:cd:f8:8e:2d:0e:21:40:e6:df:48:76:
         6c:cf:a8:76:7e:94:41:15:9e:02:4d:a9:4a:d5:de:02:16:bd:
         41:25:55:40:bb:ff:a7:77:20:38:99:5a:13:a9:cc:6f:a5:95:
         02:05:e6:70:6a:06:3a:8b:c7:e5:84:41:79:7e:db:14:a6:91:
         95:84:e5:77:34:a7:ce:60:f4:7d:85:60:d0:93:a1:ea:0e:03:
         b2:47:d2:d5:3e:a7:ec:4d:9b:25:9a:c4:31:df:10:a4:60:be:
         37:a5:e0:0e:47:1c:bd:5a:07:85:06:2c:d2:e1:11:bf:68:89:
         ec:25:35:19:5c:23:f3:58:c9:25:0b:bb:de:af:b5:65:73:07:
         44:11:79:b8:53:bd:25:56:27:da:ab:59:cc:59:31:b6:d2:86:
         37:ef:dc:e3:94:99:2f:a8:0d:af:25:e8:24:c8:b7:a7:07:b9:
         37:38:42:a4:0a:0f:1f:a8:0e:48:05:e9:f0:49:db:e3:ae:b8:
         db:a0:d4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:03 2025 by rpki-client