Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0283a573-4831-3a42-af5f-49d6c7554ab0.roa
File:                     0283a573-4831-3a42-af5f-49d6c7554ab0.roa (raw, json)
Hash identifier:          i5hA0BiPLquJXKQF57MEL8cUvBWzgo20TDm2snG2nN8=
Subject key identifier:   07:78:84:E7:0B:AB:17:95:79:72:46:D8:E9:B4:F3:C7:4E:E0:72:01
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B6379495AFBD22636DC80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0283a573-4831-3a42-af5f-49d6c7554ab0.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        70.41.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:63:79:49:5a:fb:d2:26:36:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=34360ee1-d395-476f-91d3-9976dc7f0111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5c:2d:9f:ee:ef:0e:91:f8:c7:95:cc:d3:cd:
                    23:bc:89:c9:07:c3:83:a2:a4:f6:88:56:ac:f3:73:
                    e7:7c:66:50:a7:5e:47:2b:8f:2a:83:16:01:be:ae:
                    49:7d:67:72:c6:5f:ed:97:a7:ca:86:8b:c1:69:3f:
                    fc:44:b3:87:9f:92:15:fe:0a:05:ca:45:15:1f:79:
                    ef:7f:8d:5a:f1:42:ee:5b:aa:37:5e:7b:d8:28:68:
                    b2:6a:69:37:2e:f7:0d:30:81:29:3f:26:dd:5f:e3:
                    86:03:91:05:35:c6:43:77:4b:b7:b8:c5:c5:d4:be:
                    48:96:5e:1c:4a:3e:5e:8a:91:3c:b2:eb:0e:d9:73:
                    83:9e:6d:25:71:7a:3f:6d:a2:fb:68:fd:3c:10:7e:
                    e8:6b:9f:fd:50:d6:12:57:bc:5f:33:2f:3b:6e:64:
                    19:78:69:fa:bc:a6:67:05:d9:a4:f6:80:1d:6e:07:
                    79:a4:af:a5:06:1d:ff:20:2d:00:4a:e6:41:e9:62:
                    a1:de:15:11:be:f5:d2:34:ef:26:78:60:90:2a:c0:
                    55:5b:0d:c8:2c:94:18:18:bd:c9:1f:0b:2f:1a:1b:
                    15:19:5b:6b:de:e1:7b:75:11:7f:d6:c1:32:55:7f:
                    eb:a8:18:e8:98:c8:36:5e:45:43:8d:c1:04:6b:7e:
                    99:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:78:84:E7:0B:AB:17:95:79:72:46:D8:E9:B4:F3:C7:4E:E0:72:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0283a573-4831-3a42-af5f-49d6c7554ab0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:59:69:ef:91:f4:a8:4a:d6:a7:44:83:90:22:b4:84:fd:91:
         0c:17:87:fa:01:ba:3a:c7:6c:55:94:19:68:a4:58:ee:21:f8:
         be:a3:2c:47:6b:aa:91:10:c6:09:51:bb:98:10:40:95:5a:67:
         fd:32:2f:59:29:ce:1c:30:3a:99:d8:4b:86:7a:48:2f:27:38:
         7e:d8:68:0c:68:c8:d5:ca:81:19:d0:b8:43:82:49:88:bb:c5:
         ae:28:c0:33:54:47:8a:1c:31:71:ba:57:a1:39:54:ac:7d:ea:
         34:6e:c8:c7:4b:97:eb:6f:d6:12:73:df:14:ba:5d:e6:58:a9:
         40:3e:6d:dc:f4:0f:ac:0b:bb:72:e7:00:22:4b:d0:8c:9c:fd:
         85:40:03:21:91:eb:e3:8f:d6:11:f3:61:04:60:0a:d7:b9:14:
         10:d3:12:19:33:58:66:0d:e2:2e:df:6a:7b:6a:41:84:4e:ec:
         d8:2f:36:d9:8f:79:a3:b4:b2:81:fe:db:3e:86:71:66:87:0d:
         25:c9:b6:b5:7b:c7:10:08:e3:ee:08:d6:6b:d4:cb:7a:da:7a:
         45:f5:e9:c0:1c:de:e3:a4:fb:ec:98:3e:5f:12:20:5f:c0:09:
         26:96:09:03:47:c1:e1:d3:cc:a1:d3:49:78:c9:d8:01:11:9a:
         41:2a:3e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:44:41 2026 by rpki-client