Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d251837-4740-3e23-b8dc-deedcd830b5b.roa
File:                     8d251837-4740-3e23-b8dc-deedcd830b5b.roa (raw, json)
Hash identifier:          g6BY95SfcyAD00xk4uFGGl7wSUqItxseymQpOir4PwA=
Subject key identifier:   09:2E:A0:FD:5E:BB:D2:58:FC:20:A4:C1:86:48:91:23:73:07:EE:22
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCD27AFAC33278245AEED0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d251837-4740-3e23-b8dc-deedcd830b5b.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        70.41.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:d2:7a:fa:c3:32:78:24:5a:ee:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=859efd35-63bf-48f7-820f-3a25758b309f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7c:d5:a2:20:6b:19:72:74:20:2d:b0:9e:5b:
                    c2:0d:ad:b2:60:96:41:80:9e:59:3a:35:ef:22:4a:
                    9b:4d:96:35:ef:67:93:62:6a:c4:0d:7f:d4:e5:99:
                    35:bb:07:06:e7:4d:f1:43:28:eb:9a:b4:8c:5f:fe:
                    00:34:75:ac:a6:da:c0:4b:a1:4c:5f:89:f0:bb:42:
                    ba:dc:23:2e:8a:b9:b7:1f:ce:86:b4:4a:0b:6a:31:
                    c1:66:08:f5:aa:65:cb:80:c7:1d:88:82:3f:48:e5:
                    8d:01:70:f6:cf:3b:0c:68:ee:e7:2c:f3:60:a3:79:
                    58:3a:b2:a9:4d:f0:ed:73:aa:4b:45:38:95:07:1b:
                    95:c5:5e:a5:9b:0d:61:9e:c8:cf:b8:92:09:20:9b:
                    2b:a9:3a:5d:72:d3:38:0f:69:88:7e:3b:90:03:62:
                    45:e3:77:39:52:67:74:b9:a4:fe:b8:68:ee:e7:e0:
                    4d:67:e1:c7:d4:f2:7e:69:28:63:c6:dd:9b:f7:b2:
                    09:e6:ad:d9:e8:44:b2:7d:aa:ee:bb:a3:0a:3a:a9:
                    7c:11:b1:1c:ae:09:b2:f4:f0:21:4a:ba:d2:65:b4:
                    3f:86:81:2c:d2:18:5e:d6:46:80:3c:7d:40:25:08:
                    74:57:34:89:37:4d:77:1f:87:ae:06:e3:c6:29:2f:
                    a9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2E:A0:FD:5E:BB:D2:58:FC:20:A4:C1:86:48:91:23:73:07:EE:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d251837-4740-3e23-b8dc-deedcd830b5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:e4:9a:c8:53:e1:c8:08:84:59:b9:62:4a:02:f9:da:50:2b:
         72:fd:77:21:a6:de:1a:44:27:b6:16:e7:7d:b9:d7:29:01:34:
         1d:85:f8:f9:23:a1:bf:01:8e:ee:e1:a7:e4:c1:55:8d:e5:eb:
         8a:84:10:84:20:34:b5:91:40:78:9d:3c:51:82:5d:ea:df:41:
         b7:06:b6:99:15:c9:dc:40:8f:60:90:ed:73:f6:47:39:5d:53:
         ec:06:52:34:0a:7d:9b:c2:3c:02:dd:e1:17:2b:b1:14:3d:0e:
         87:bb:98:d8:13:d8:0c:42:cc:f1:a3:f4:f6:9f:a3:e7:a3:26:
         8f:06:c7:d8:42:20:29:42:4f:1f:d9:f3:f0:b3:5e:be:f1:39:
         f4:d9:93:f2:77:30:90:38:f9:02:c0:02:53:95:3e:05:8b:8a:
         7b:67:11:3b:5d:fe:7d:14:d6:f5:e9:bd:ca:db:0f:61:6a:84:
         69:7f:27:e2:a9:9f:dd:f0:7d:59:f0:16:83:71:1a:d1:fd:06:
         7f:86:df:49:1d:68:12:b4:f7:9e:d8:67:9f:46:ab:56:72:8c:
         22:83:43:5a:50:0c:13:86:e2:4b:c4:4b:da:48:24:94:ad:24:
         8a:d6:25:84:22:58:69:92:d6:ff:39:7a:8b:2b:04:db:f2:58:
         87:7e:87:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:06:42 2025 by rpki-client