Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c36a2fca-33c3-3738-9d17-128a41d5cbfe.roa
File:                     c36a2fca-33c3-3738-9d17-128a41d5cbfe.roa (raw, json)
Hash identifier:          Ll1TNySl6+wStY8qDIh33FtLyPmrTO1jZjNNBRwNN8c=
Subject key identifier:   4D:43:3D:5D:C6:7B:EC:8A:36:AE:A1:56:6A:70:D7:A1:4C:F8:19:3C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD82C3D4551E710A16C9C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c36a2fca-33c3-3738-9d17-128a41d5cbfe.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        70.41.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:82:c3:d4:55:1e:71:0a:16:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=0565faf0-ce16-4285-9203-db1be8592dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4c:4e:55:65:fa:60:c7:82:d4:71:0a:9f:0d:
                    e6:1c:10:e2:5b:58:ac:fc:c1:04:f8:18:b0:f8:b8:
                    63:82:91:3c:89:c7:2e:6e:cf:92:1b:a4:97:2f:d7:
                    80:54:c3:80:3f:6f:e1:bf:af:44:b9:49:eb:33:42:
                    4b:80:f6:c3:aa:b0:a3:0a:d6:8f:53:53:aa:f6:db:
                    6f:4b:5b:59:55:fc:b5:cb:f9:cc:0d:2e:f4:4a:21:
                    b3:31:6c:af:32:6b:86:6f:08:d7:79:a7:2c:87:73:
                    0e:2d:b2:53:9f:26:b8:23:ec:38:45:be:8b:cf:2b:
                    52:f3:25:20:b5:84:7e:e4:7e:dc:c5:5d:06:25:d9:
                    b1:77:d1:bb:a6:ae:ff:d9:13:20:a2:c6:66:a2:15:
                    a7:f6:09:65:3a:fd:42:26:1b:9f:40:28:d6:04:e4:
                    cb:ba:ba:1d:4e:98:3c:b0:ce:8f:81:53:81:01:97:
                    90:d6:1b:1d:21:28:33:47:21:e9:47:b2:b9:2a:65:
                    74:61:82:c0:8d:5a:5c:89:8e:49:96:36:94:fd:73:
                    5f:61:98:d2:24:c8:d2:10:99:35:ff:a7:4b:fd:a9:
                    c0:40:7a:34:df:ae:62:1b:9c:ea:ff:ac:03:c3:85:
                    e9:d9:75:59:9a:5c:fa:f7:4c:a9:b7:86:c8:6c:34:
                    92:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:43:3D:5D:C6:7B:EC:8A:36:AE:A1:56:6A:70:D7:A1:4C:F8:19:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c36a2fca-33c3-3738-9d17-128a41d5cbfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:51:59:39:4b:b6:c9:da:ea:58:16:84:40:88:60:3b:72:c8:
         b6:69:d2:1c:67:f1:46:6d:85:a4:e7:70:01:71:5a:ab:73:d0:
         90:2a:8e:30:7d:2d:16:a7:f2:60:92:93:59:ef:23:ab:99:3d:
         6d:79:2b:ec:9f:67:42:f8:b5:9e:00:93:d6:68:82:db:02:92:
         8b:55:f9:3b:ff:01:cd:c0:e2:86:a9:b9:a1:b9:72:f7:5e:d5:
         3d:b6:c9:83:78:7d:24:86:10:f2:49:73:db:11:d5:49:bb:66:
         21:2b:fe:de:8e:16:47:19:4a:ec:50:f8:14:67:6b:db:ef:3f:
         14:a6:fa:11:4b:d5:3e:59:67:b2:91:74:09:65:b4:cf:43:1b:
         ca:37:97:77:ab:69:48:fa:5a:3b:39:12:38:ea:fa:37:dc:ae:
         5a:7d:a4:c1:da:ac:33:41:f0:5c:4b:83:5f:19:c3:d7:b7:a1:
         b6:ae:9e:35:59:c2:d2:4b:80:a7:51:78:bf:ce:f2:6b:c7:5c:
         40:f7:a9:f2:2d:64:ad:28:17:15:82:84:18:d8:37:a9:28:37:
         b7:82:97:11:e7:57:50:10:e7:6c:87:af:39:9f:c4:27:fb:1a:
         ff:4b:70:d7:44:6a:f6:b3:a8:90:06:8d:43:7b:ef:a3:f8:bb:
         af:9a:e0:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzYLD1FUecQoWycAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MDU2NWZhZjAtY2UxNi00Mjg1LTkyMDMtZGIxYmU4NTkyZGNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkxOVWX6YMeC1HEKnw3mHBDiW1is/MEE+Biw
+LhjgpE8iccubs+SG6SXL9eAVMOAP2/hv69EuUnrM0JLgPbDqrCjCtaPU1Oq9ttv
S1tZVfy1y/nMDS70SiGzMWyvMmuGbwjXeacsh3MOLbJTnya4I+w4Rb6LzytS8yUg
tYR+5H7cxV0GJdmxd9G7pq7/2RMgosZmohWn9gllOv1CJhufQCjWBOTLurodTpg8
sM6PgVOBAZeQ1hsdISgzRyHpR7K5KmV0YYLAjVpciY5JljaU/XNfYZjSJMjSEJk1
/6dL/anAQHo0365iG5zq/6wDw4Xp2XVZmlz690ypt4bIbDSSjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE1DPV3Ge+yKNq6hVmpw16FM+Bk8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzM2YTJmY2EtMzNjMy0z
NzM4LTlkMTctMTI4YTQxZDVjYmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA9RWTlLtsna6lgWhECIYDtyyLZp0hxn8UZthaTncAFxWqtz0JAqjjB9
LRan8mCSk1nvI6uZPW15K+yfZ0L4tZ4Ak9ZogtsCkotV+Tv/Ac3A4oapuaG5cvde
1T22yYN4fSSGEPJJc9sR1Um7ZiEr/t6OFkcZSuxQ+BRna9vvPxSm+hFL1T5ZZ7KR
dAlltM9DG8o3l3eraUj6Wjs5Ejjq+jfcrlp9pMHarDNB8FxLg18Zw9e3obaunjVZ
wtJLgKdReL/O8mvHXED3qfItZK0oFxWChBjYN6koN7eClxHnV1AQ52yHrzmfxCf7
Gv9LcNdEavazqJAGjUN776P4u6+a4PM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:19:51 2025 by rpki-client