Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e0850f2e-ec89-3cde-923e-7ca5bf9d52bb.roa
File:                     e0850f2e-ec89-3cde-923e-7ca5bf9d52bb.roa (raw, json)
Hash identifier:          t84suqRhCsMNaOEbZlu3/MKBYmS+wtQD1Hu9sltxG8Y=
Subject key identifier:   ED:3A:C7:F1:E2:7A:C6:7F:3E:EF:6A:37:0D:9B:BF:C9:42:BC:07:B9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD87BC25CE7801C82A7E40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e0850f2e-ec89-3cde-923e-7ca5bf9d52bb.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        70.41.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:87:bc:25:ce:78:01:c8:2a:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=02d3cd8d-d90c-4c9b-becf-7c240552cfc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1e:23:e6:93:69:27:af:3b:0b:25:56:b9:d6:
                    4f:36:0a:af:66:2a:ce:bd:0c:49:2a:16:b1:e7:0a:
                    16:80:d7:97:12:42:3c:ef:08:d4:73:1d:d3:36:37:
                    40:29:13:5d:16:61:ff:9e:fb:b0:ed:66:b6:02:36:
                    5a:45:01:e0:91:53:22:ca:dd:75:52:fe:b3:70:bd:
                    10:c0:79:41:ca:c8:53:92:29:c9:e6:27:52:9b:71:
                    24:34:01:63:3d:d6:0c:7e:db:d1:95:ad:3b:cb:87:
                    cf:25:b8:93:15:ef:57:32:99:2d:5e:4b:73:69:a4:
                    71:76:cb:eb:f9:3f:66:e8:9c:b0:d0:3e:bb:8f:7d:
                    c3:ce:ef:c0:e2:a8:45:04:a4:5b:59:ab:ad:5e:f4:
                    92:5b:51:ac:ce:63:d9:1f:9d:27:64:2a:c8:d3:a1:
                    3e:3a:21:1b:08:d9:63:e4:98:df:f0:86:e2:93:7d:
                    4e:ba:77:1d:40:f5:ee:67:30:71:72:16:97:c8:06:
                    86:ab:6c:76:61:16:ae:c0:bb:ac:a5:a6:4e:26:79:
                    df:e6:d6:89:3e:8d:f9:db:e5:f3:39:d5:26:31:32:
                    2c:6f:7c:e7:f3:5c:0f:e4:7d:52:11:73:de:cf:8e:
                    74:eb:e6:22:e8:ca:20:f3:34:8b:ef:97:ff:f1:97:
                    7a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3A:C7:F1:E2:7A:C6:7F:3E:EF:6A:37:0D:9B:BF:C9:42:BC:07:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e0850f2e-ec89-3cde-923e-7ca5bf9d52bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:a4:a3:ab:f3:bb:87:3a:d9:3b:bd:8e:15:6c:1c:5d:47:bb:
         3a:e9:18:ac:bb:f4:da:5a:e7:3d:5a:ba:2e:46:fb:03:39:24:
         c7:af:5a:15:fc:18:4f:fd:41:31:14:4e:c6:e4:d8:a2:6a:7d:
         52:bd:2d:1b:de:42:29:7c:61:81:7e:1b:98:1a:fa:5b:b9:71:
         b2:b7:d2:3d:e4:63:e0:5e:39:cf:8f:74:7b:34:48:90:7e:19:
         f5:1c:aa:69:05:2a:b7:75:bf:87:68:38:b4:b0:d6:a7:14:9b:
         5a:81:bd:bc:79:dd:f4:2b:93:fa:2c:3b:30:68:5b:ac:ee:2b:
         83:47:2a:3b:a4:1b:9a:25:fd:72:b4:d6:69:a2:39:2a:fa:50:
         f1:de:c4:0e:54:3c:3f:6d:b8:1e:93:ec:f7:e6:19:e1:4b:15:
         58:81:a1:6c:96:7a:ce:8e:64:3d:c6:7b:1b:cf:d1:54:92:ce:
         bb:6b:ad:b6:8d:37:c0:fb:d5:3e:23:38:84:2d:d3:9e:53:02:
         66:04:20:c3:bf:18:db:74:4f:87:b9:55:51:fa:50:fb:29:4c:
         19:ba:11:7d:ac:13:4d:4f:a7:4d:f2:0f:6b:35:c3:e7:61:93:
         1e:65:c5:5b:c3:27:f2:a8:ac:fc:f9:48:8b:b4:8a:52:24:66:
         a1:53:85:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:31:31 2025 by rpki-client