Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ed4f76ef-c92c-3a3a-b091-81f2448014d2.roa
File:                     ed4f76ef-c92c-3a3a-b091-81f2448014d2.roa (raw, json)
Hash identifier:          k6NyErmwHaSJX9Ffgid/6nz9ky2w5xOQWKVwbV9Ft3c=
Subject key identifier:   BA:68:64:2A:B3:AF:6E:82:25:16:19:D4:F8:0A:C3:83:81:F0:5B:E0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCD354F3503483417F7100
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ed4f76ef-c92c-3a3a-b091-81f2448014d2.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        70.41.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:d3:54:f3:50:34:83:41:7f:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=b51fffe3-fbd2-4856-bf1e-0689a550b78d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:16:eb:e3:40:b0:bc:e4:06:79:8c:4b:88:0d:
                    5b:94:94:6d:e1:f7:bf:74:8a:0a:88:76:e8:1c:3e:
                    d3:bb:87:0d:fa:4c:19:4d:1e:9e:2e:b5:f1:db:21:
                    30:44:61:6f:fe:e0:e6:71:66:99:38:41:a7:93:88:
                    a5:b6:9d:c3:38:13:d5:7d:1f:e2:60:e6:b1:7c:75:
                    d7:3b:19:25:3d:30:d6:85:44:83:1f:12:0d:be:68:
                    1a:47:85:29:b7:b2:f6:a5:2d:d4:c6:9b:a9:4b:94:
                    01:1d:20:32:5e:6a:a8:c9:35:28:79:8f:23:4e:f6:
                    cb:c0:84:57:f3:d3:62:4c:0b:e7:70:9e:d1:a7:f4:
                    f6:e4:8e:9d:eb:ae:17:21:0b:90:63:fc:f6:6e:da:
                    93:f8:73:f0:38:b7:84:20:d8:2e:0f:2a:4c:1e:17:
                    14:21:91:80:59:10:c5:80:60:c8:49:6c:f8:71:20:
                    45:11:2c:60:78:c1:77:9f:02:ec:b1:4f:33:2c:a3:
                    88:98:65:f6:5e:14:fb:8a:be:e7:12:da:2d:ce:58:
                    c2:86:ae:b9:d5:7a:ee:85:0b:ed:d9:70:cd:db:bd:
                    fc:20:fb:d7:8c:d9:44:91:a5:5f:3f:7b:0c:ef:77:
                    0f:4a:83:ea:84:4c:6e:c2:64:e5:fa:b7:0f:d3:e7:
                    07:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:68:64:2A:B3:AF:6E:82:25:16:19:D4:F8:0A:C3:83:81:F0:5B:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ed4f76ef-c92c-3a3a-b091-81f2448014d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:9f:83:bf:4b:bf:f5:00:91:fd:5d:69:6d:8f:79:ec:b0:90:
         ac:f2:87:fd:56:d9:53:a0:49:76:f4:e5:17:63:74:c4:1f:49:
         e4:2c:42:2b:e4:e4:50:8d:95:2e:eb:69:9c:99:b3:d5:bc:df:
         77:33:33:07:7d:20:b1:fb:68:cb:d4:3c:47:62:6e:85:fd:20:
         36:a4:4c:2a:27:2f:ec:7d:0f:13:e4:77:59:e0:11:f8:6b:c7:
         c4:08:c6:13:ad:e2:34:81:7c:a8:4c:48:6c:b4:4b:12:4c:c6:
         0a:27:ae:f2:ed:0d:c4:c6:30:fb:70:7f:9b:8f:15:1c:24:33:
         52:2b:20:c7:04:af:c9:1d:0f:60:c2:b7:28:8b:11:d3:3b:c9:
         dd:ca:de:ac:fc:5d:83:16:93:a1:57:c7:10:39:d5:bf:99:be:
         81:0e:fd:72:09:eb:bc:b7:9e:79:71:4e:16:94:73:37:6c:0a:
         7e:5b:b1:f9:52:7e:09:f0:fe:70:5f:43:f8:c3:7f:9a:58:6a:
         92:5c:7a:5b:e4:f0:39:94:a0:a5:dc:ea:f5:53:f3:5b:f1:51:
         9e:0c:25:28:b8:78:fe:53:ac:bc:a2:6f:9d:59:7f:c3:c2:85:
         d5:b1:69:84:a7:22:9c:fe:c4:44:c3:fa:de:07:e5:55:ab:2a:
         e2:04:3c:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzNNU81A0g0F/cQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
YjUxZmZmZTMtZmJkMi00ODU2LWJmMWUtMDY4OWE1NTBiNzhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxbr40CwvOQGeYxLiA1blJRt4fe/dIoKiHbo
HD7Tu4cN+kwZTR6eLrXx2yEwRGFv/uDmcWaZOEGnk4iltp3DOBPVfR/iYOaxfHXX
OxklPTDWhUSDHxINvmgaR4Upt7L2pS3UxpupS5QBHSAyXmqoyTUoeY8jTvbLwIRX
89NiTAvncJ7Rp/T25I6d664XIQuQY/z2btqT+HPwOLeEINguDypMHhcUIZGAWRDF
gGDISWz4cSBFESxgeMF3nwLssU8zLKOImGX2XhT7ir7nEtotzljChq651XruhQvt
2XDN2738IPvXjNlEkaVfP3sM73cPSoPqhExuwmTl+rcP0+cHEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLpoZCqzr26CJRYZ1PgKw4OB8FvgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZWQ0Zjc2ZWYtYzkyYy0z
YTNhLWIwOTEtODFmMjQ0ODAxNGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGmfg79Lv/UAkf1daW2PeeywkKzyh/1W2VOgSXb05RdjdMQfSeQsQivk
5FCNlS7raZyZs9W833czMwd9ILH7aMvUPEdiboX9IDakTConL+x9DxPkd1ngEfhr
x8QIxhOt4jSBfKhMSGy0SxJMxgonrvLtDcTGMPtwf5uPFRwkM1IrIMcEr8kdD2DC
tyiLEdM7yd3K3qz8XYMWk6FXxxA51b+ZvoEO/XIJ67y3nnlxThaUczdsCn5bsflS
fgnw/nBfQ/jDf5pYapJcelvk8DmUoKXc6vVT81vxUZ4MJSi4eP5TrLyib51Zf8PC
hdWxaYSnIpz+xETD+t4H5VWrKuIEPIA=
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:36:46 2025 by rpki-client