Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e620e2fd-02a1-39ae-aa3f-6fe650e2a4e3.roa
File:                     e620e2fd-02a1-39ae-aa3f-6fe650e2a4e3.roa (raw, json)
Hash identifier:          U/4GhwZn5Qb+rfq6ibHWwRUuw3GQrs5d6L6/lShVtZ4=
Subject key identifier:   C1:B6:CC:E6:21:99:6F:50:70:CB:C1:E0:BC:3E:34:2B:F5:00:65:4F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24DFB174623CBB839D2AE180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e620e2fd-02a1-39ae-aa3f-6fe650e2a4e3.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        70.41.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:b1:74:62:3c:bb:83:9d:2a:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=d4ba77bf-329f-4557-a616-a09d22fdcec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f1:4a:42:7a:9a:ad:76:12:22:0b:23:d1:b2:
                    10:81:a8:e5:33:e7:c0:41:b1:c3:f1:f0:45:f7:64:
                    53:87:a5:6e:5a:df:9c:b8:9c:09:b2:3a:8e:21:2d:
                    80:98:30:2b:5f:b9:f8:f6:d0:65:26:92:2c:0b:32:
                    f7:fe:11:d8:40:e1:6f:11:af:f8:c1:1b:b9:da:ff:
                    a1:9e:8d:ed:e0:99:52:37:e0:20:94:34:40:e9:bc:
                    60:80:20:a1:83:49:91:ad:45:c9:56:ef:5d:5b:a1:
                    1b:0f:38:03:76:b4:6f:a2:4b:f9:69:44:00:59:dc:
                    87:01:41:ed:ba:fc:76:c8:b4:c6:06:01:47:e5:f5:
                    9b:81:b1:7f:5b:47:c4:46:be:d7:9d:bf:53:e9:b1:
                    ef:30:09:52:14:3e:d9:d3:88:ff:f0:91:01:b4:fe:
                    0a:f2:2c:84:f8:21:99:0e:d4:78:91:57:d2:84:ef:
                    24:b5:27:87:55:7a:0d:22:ce:24:a4:e3:fb:bb:2f:
                    e9:24:f3:24:51:de:02:c5:9e:98:5b:04:30:e7:0a:
                    4d:47:b2:a7:b9:94:34:db:c6:f5:17:af:2d:3f:25:
                    e6:0e:a3:e1:15:13:d4:05:f6:71:b2:93:fa:c1:be:
                    b4:3e:d4:d7:ff:3f:f0:b8:db:55:5c:27:b9:3d:e8:
                    37:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B6:CC:E6:21:99:6F:50:70:CB:C1:E0:BC:3E:34:2B:F5:00:65:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e620e2fd-02a1-39ae-aa3f-6fe650e2a4e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:9f:54:2b:09:82:23:34:be:3b:3e:47:2c:d9:bd:d1:85:f6:
         1b:59:f3:44:a2:fd:40:f4:d3:01:3e:37:ba:34:ae:eb:b7:50:
         af:87:7c:ec:18:bb:0e:36:f1:63:90:40:44:90:f1:2d:fa:8e:
         84:59:fa:7c:0d:00:af:c6:99:72:b2:fe:bd:50:15:ba:43:fa:
         e1:e4:8c:68:76:31:df:82:bf:05:23:5d:10:aa:8a:ec:2d:27:
         a5:f7:07:55:6b:d3:b8:08:19:e8:8f:e5:09:89:ec:5c:e4:ed:
         4e:1f:7f:9e:8a:06:16:2d:db:f5:35:66:40:c7:61:1e:27:85:
         e6:eb:68:68:64:03:64:3b:a1:28:5a:ff:2c:a8:55:bf:d2:24:
         73:0a:d1:a0:01:be:1b:4e:81:2c:e3:56:d6:b4:84:4e:dd:28:
         69:c0:c7:69:24:ac:90:64:bd:6d:d8:64:d1:af:69:b9:ff:11:
         ed:05:47:f6:88:a4:93:90:76:e6:09:8c:e8:8c:4f:19:90:92:
         3c:2b:39:74:62:cb:9f:cf:9c:2e:74:4a:6b:e8:37:39:e3:43:
         a2:dd:6d:6f:5d:50:60:69:5c:8d:64:28:a2:56:95:4f:6e:c7:
         5e:7f:1a:3f:d5:df:87:64:b1:ba:a7:a1:62:68:a0:b6:fd:a2:
         3d:37:de:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:49:41 2026 by rpki-client