Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d14f496f-135d-3316-bf2e-70d16e643666.roa
File:                     d14f496f-135d-3316-bf2e-70d16e643666.roa (raw, json)
Hash identifier:          gGbN4mzDoP7CtTzOC8wTjt5bZ4AEWPoqyMFKx66wKFw=
Subject key identifier:   82:2C:98:D2:80:5A:2B:55:55:42:F3:83:8A:6E:A0:7E:3D:9A:21:9A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD85B9B4A0208445458100
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d14f496f-135d-3316-bf2e-70d16e643666.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        70.41.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:85:b9:b4:a0:20:84:45:45:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=4c237ee1-ab3d-4841-af36-5e58a4028aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:35:2b:24:9a:06:4b:45:b1:1a:ff:c4:7d:60:
                    60:9e:16:a0:3a:e8:07:8f:33:cc:32:72:8b:8a:ef:
                    04:fe:ae:5e:b1:03:6f:b6:7a:e9:14:ac:df:3a:75:
                    2d:5f:64:be:86:98:77:8e:cf:7e:a8:6f:79:e5:13:
                    16:e9:ec:5c:19:69:d0:d9:87:58:94:4a:06:13:42:
                    60:36:e3:45:82:0f:8f:87:54:8d:f2:be:29:97:52:
                    30:c0:71:b4:d6:24:ae:44:7e:aa:47:0e:e3:82:b6:
                    81:14:e9:8b:d5:6a:6a:34:71:45:af:76:6d:54:67:
                    3a:60:71:f2:1c:4d:ec:7a:69:b9:21:70:0c:6a:d3:
                    3c:52:b1:23:c7:65:c9:8d:2d:a4:ee:c4:1f:2b:f4:
                    bc:fa:84:2a:0d:e1:a5:33:73:03:1a:e3:ab:b9:fe:
                    82:17:2a:d1:b9:a9:15:a9:9d:47:ad:a0:3c:cb:6c:
                    84:02:82:51:93:0e:ee:9b:ff:f0:d2:49:89:84:65:
                    fd:26:17:6b:64:c7:15:50:4f:65:fb:f0:55:80:08:
                    12:0b:d4:55:f7:67:d8:b3:71:84:fc:43:d7:3f:6c:
                    08:e4:df:28:97:00:8f:07:d2:96:b5:c0:c9:8d:8c:
                    82:31:22:77:4e:0e:1c:96:ff:3a:8e:19:9f:e9:e4:
                    99:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2C:98:D2:80:5A:2B:55:55:42:F3:83:8A:6E:A0:7E:3D:9A:21:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d14f496f-135d-3316-bf2e-70d16e643666.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:a1:4c:d2:d7:9a:45:d3:94:ae:27:48:fc:30:7d:a0:16:0a:
         aa:bb:84:8a:69:45:75:30:99:80:d1:fa:94:d1:04:07:e2:40:
         43:1c:e8:9c:7a:69:03:0b:da:57:d8:f6:61:f4:d4:79:d0:1e:
         e7:5c:76:34:99:c8:41:34:e9:46:7c:fb:e8:ae:b4:11:0b:20:
         fe:2f:4a:1a:e3:85:9b:6f:46:0d:36:3b:fd:10:27:63:37:2e:
         af:ec:6f:1a:4d:d8:e2:7f:d2:2e:dc:6f:5e:d0:da:ba:2a:09:
         d5:82:93:c4:33:ba:af:c6:79:d3:61:b6:6c:23:ee:3b:f6:fa:
         74:82:dc:84:7c:d2:85:a0:8e:64:5a:52:e4:0c:d8:61:24:db:
         84:bf:8a:c7:7e:df:80:e7:4f:4a:95:12:39:46:69:9d:c5:e6:
         62:dd:a2:74:f0:c5:2b:b3:e0:79:bc:19:7c:29:bf:71:1f:65:
         55:b3:21:08:7c:40:20:2a:5c:b3:95:d7:18:04:22:ee:e4:6a:
         d5:10:07:b7:7b:3d:ec:e4:f9:81:53:4e:b5:60:ce:4b:92:07:
         ca:e6:f5:55:79:b1:59:fd:64:8c:fe:4c:de:1d:ba:dd:a4:bb:
         2f:fa:d2:e4:44:a0:a6:d7:15:b8:5e:bc:f1:12:ae:88:b4:1a:
         4a:aa:5b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:23:48 2025 by rpki-client