Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e0b164a9-a662-33db-9298-d06a26329db8.roa
File:                     e0b164a9-a662-33db-9298-d06a26329db8.roa (raw, json)
Hash identifier:          B0e0vbVWqB2xeqR9dqcf83AehWDxWcpVxBCjut/gyp0=
Subject key identifier:   27:3C:4C:52:B7:42:A0:1A:06:BE:E6:E9:22:B6:0D:E0:0B:0B:1A:FE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F497AFCF9131D73E1161AC060
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e0b164a9-a662-33db-9298-d06a26329db8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        70.41.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7a:fc:f9:13:1d:73:e1:16:1a:c0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=23bb66d2-148b-4e68-b762-829fa7bd2125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6b:38:6c:86:5e:15:03:10:38:68:4d:07:90:
                    1c:f6:04:e5:c9:d4:16:a3:7c:dc:9a:3b:1c:c2:56:
                    37:ef:c9:5c:1f:2d:fb:48:00:33:e3:0e:d3:21:84:
                    cb:06:e2:69:8c:60:90:a4:14:98:a4:26:29:fe:dc:
                    d8:9c:ac:3e:82:bd:bc:8c:ae:21:6a:4c:28:7b:6e:
                    e6:eb:ab:ef:cd:d0:2e:e6:67:2c:98:95:de:fc:f2:
                    82:75:18:05:83:4b:15:c0:4a:7e:a2:9a:16:92:73:
                    d4:3c:32:3f:59:ca:12:19:8e:ec:88:e0:48:8b:20:
                    36:a2:90:ee:3c:2b:f7:e9:b5:c9:00:42:58:ca:16:
                    b6:4f:54:58:8e:37:ba:6d:93:01:c2:d7:bb:cd:ca:
                    14:96:d3:2f:9f:02:03:49:41:74:b1:e7:54:c4:e1:
                    9e:aa:b4:7d:65:72:43:8c:de:22:b6:b5:fa:79:20:
                    f0:d9:3d:1c:4a:79:1e:05:47:3f:9c:41:d9:bd:a3:
                    28:6d:cb:4e:d6:68:99:3a:51:d7:ba:0a:3a:3c:d0:
                    fd:13:40:ed:74:0d:3e:3c:36:52:b2:7f:c8:e2:d7:
                    28:f7:6a:f1:f1:c3:0b:33:0a:aa:3b:d8:08:18:80:
                    f8:95:7e:25:82:b1:82:34:b9:2e:ae:89:bf:03:48:
                    db:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3C:4C:52:B7:42:A0:1A:06:BE:E6:E9:22:B6:0D:E0:0B:0B:1A:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e0b164a9-a662-33db-9298-d06a26329db8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:ef:5c:29:f9:a9:55:7a:97:64:81:bf:bd:d6:1b:72:91:10:
         93:41:9f:1a:d6:91:a7:78:51:ca:bc:14:85:96:f3:ba:86:2e:
         de:13:95:69:f5:78:e7:58:b6:4d:8e:e8:75:cd:c8:c4:53:7d:
         23:18:56:3a:93:e4:d1:c0:95:ad:96:70:56:11:4a:b7:26:d5:
         11:5a:2d:a5:2c:c4:ae:9c:9d:27:19:62:be:a0:05:be:9a:3d:
         b5:64:32:dc:9a:d6:eb:96:6f:e5:8a:96:f4:d6:76:60:c0:a7:
         1f:b8:55:b8:fe:ae:42:2b:52:f8:54:d1:58:0b:77:a9:b1:d9:
         07:3e:08:c5:ea:9d:2b:16:2b:ef:ff:bd:7f:46:76:e6:44:8f:
         b2:f8:9d:83:09:cd:a1:8b:58:7b:75:7a:c7:7e:eb:a7:fc:a5:
         c7:bc:3f:46:f4:90:87:ad:90:96:d1:77:83:49:0e:63:2c:ef:
         1f:d7:b1:c0:54:5a:e9:ff:37:3d:b2:61:3b:a3:36:50:03:13:
         4f:a6:94:88:93:fa:a3:31:7a:cf:9d:a2:1a:b5:71:f5:b1:40:
         60:3c:61:1b:d8:ae:54:e2:a9:b4:ff:90:7f:f6:7e:cb:67:c1:
         c2:10:20:30:d8:2e:a3:37:6e:af:22:cc:9c:51:3e:35:2f:5b:
         e1:a4:fb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:15:47 2026 by rpki-client