Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8fd7e56-ea2c-37ac-bc6a-2ce40197d110.roa
File:                     c8fd7e56-ea2c-37ac-bc6a-2ce40197d110.roa (raw, json)
Hash identifier:          VYwrOnUAYDafX4XL1+JGZeSwLCNUpFCEcRlkokzkydY=
Subject key identifier:   28:6B:D3:3A:2B:FB:CD:64:35:3C:48:DB:62:4F:ED:2C:C9:91:5E:A5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD85F8073A456F9E576680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8fd7e56-ea2c-37ac-bc6a-2ce40197d110.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        70.41.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:85:f8:07:3a:45:6f:9e:57:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=9876420e-b6e9-4019-8cfd-ee38b4700e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b1:5a:8d:f2:fa:32:66:56:92:b6:f1:20:4b:
                    35:a2:72:66:74:9b:ee:a6:7a:25:fa:d0:67:e0:3a:
                    03:cc:6e:c6:59:c1:1d:aa:58:3e:a9:e3:93:62:83:
                    52:9e:12:68:5f:22:1c:ba:37:72:20:ec:3e:a0:c7:
                    39:f7:47:fc:62:b8:18:8c:92:a5:08:fb:25:27:78:
                    ce:02:b5:10:5a:ab:22:9a:f8:91:36:1a:98:91:27:
                    5f:52:0c:d4:86:d1:12:fe:a4:72:7c:07:64:52:71:
                    3b:c4:f7:6a:e0:68:ca:3c:34:cb:7b:48:c9:aa:8e:
                    a3:02:6c:dc:ab:d3:bb:23:5e:cd:3f:a3:8b:7e:34:
                    5e:45:f4:58:1a:5d:41:3a:2a:18:44:59:75:cc:3e:
                    cc:90:f1:27:00:af:e0:68:ff:7a:46:64:10:5d:5e:
                    0a:17:cc:8e:57:69:52:ea:9c:7a:e3:d7:d9:6d:e9:
                    57:0b:20:41:4c:5e:cc:a5:fb:95:92:ab:df:d0:ef:
                    58:d4:db:dc:71:b4:e8:44:99:77:fb:62:d5:29:c2:
                    d5:84:45:bf:d4:92:2f:a9:b5:e9:a7:58:3e:e1:80:
                    8f:83:5e:ed:ba:26:b9:04:e8:f2:ff:29:75:26:c2:
                    80:c6:22:d6:0e:ca:06:58:e8:c6:16:f3:ae:07:f7:
                    a1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6B:D3:3A:2B:FB:CD:64:35:3C:48:DB:62:4F:ED:2C:C9:91:5E:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8fd7e56-ea2c-37ac-bc6a-2ce40197d110.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:86:68:f0:db:18:a3:26:6f:d8:77:80:1a:ff:3e:e7:04:85:
         f2:f8:f7:85:7e:42:ab:66:47:bd:43:15:9e:fa:05:59:4a:c6:
         ee:05:63:ee:bb:1e:70:d1:79:f4:66:0e:ef:1d:0a:09:ac:95:
         d2:19:ef:c2:8f:54:4d:cd:05:66:3d:16:7d:95:b2:85:70:d5:
         19:c2:f5:d8:af:6d:17:f7:9f:8a:0d:27:70:56:30:12:29:8b:
         ce:9c:bb:5f:78:54:7b:9b:b9:07:dd:a3:93:54:94:ca:a8:da:
         43:c6:08:84:28:50:d2:ce:42:f3:43:06:7f:49:94:90:19:6d:
         5a:d4:46:8b:44:3c:3c:f4:b7:8c:23:4d:a3:e8:b5:15:04:9e:
         a2:fa:8a:ee:d2:e6:f5:38:0e:12:c4:1a:1e:e3:a3:d7:86:ce:
         5d:26:94:04:ec:5d:4f:ac:36:46:a9:bc:ab:9f:db:25:90:76:
         82:fb:c9:3c:19:b8:7d:60:af:45:b1:1c:5c:cb:0d:15:55:51:
         f1:15:f4:c3:36:31:5d:eb:09:4d:ee:9a:29:d1:9f:cc:e0:28:
         a2:1f:4a:0a:2e:64:73:64:6f:a5:59:6d:c5:8d:77:6c:a0:e1:
         8b:d7:d1:2e:58:77:bd:dc:97:9a:a8:83:10:79:54:37:68:4c:
         cb:a4:4f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:43:40 2025 by rpki-client