Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/13c6d202-c102-3ad7-86fc-48892074ebfb.roa
File:                     13c6d202-c102-3ad7-86fc-48892074ebfb.roa (raw, json)
Hash identifier:          slFzCVbK+I3gRO5yc2qmyqkAaO9z3H//NM0pUuz8kSE=
Subject key identifier:   2B:15:90:B8:13:57:78:01:E7:65:84:1D:17:D8:A1:02:F8:4A:87:5D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8C70CF987EFA653E05420480
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/13c6d202-c102-3ad7-86fc-48892074ebfb.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     40306
IP address blocks:        70.41.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:cf:98:7e:fa:65:3e:05:42:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=c4f2ae38-b6aa-45f9-a6b9-32a5ebfeb12c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ce:4c:03:8e:bc:c2:2b:f8:ec:65:9a:35:8e:
                    64:10:30:16:c7:f8:15:87:72:7d:6a:34:e5:64:75:
                    64:be:ee:75:d2:1b:c4:ad:86:c1:95:2c:97:26:8c:
                    16:d7:41:58:78:82:16:a9:46:b0:cb:55:03:e4:75:
                    51:05:2f:c0:7c:bd:00:f8:5c:99:4e:e8:54:5c:6d:
                    fb:5a:63:fb:d4:fb:a8:0d:80:16:e2:f2:73:17:bd:
                    3f:a4:14:a2:e3:8a:33:50:f1:52:6e:90:58:5d:d8:
                    e9:d2:e1:f3:30:60:ae:bc:19:3b:35:6e:6a:9e:08:
                    7f:1f:b1:0b:2f:99:c8:34:87:c8:50:03:7c:a9:0f:
                    b1:68:09:3a:ab:7b:cc:3f:18:15:ee:26:a8:d1:55:
                    99:61:41:9c:88:8e:57:3e:6b:f8:a1:2b:65:54:37:
                    e0:97:b7:cf:94:e1:98:8c:99:8c:ba:0e:be:2a:fa:
                    ac:e2:5a:e0:c4:e6:eb:89:4c:90:96:6e:91:77:fd:
                    47:b5:4a:ec:cd:54:b2:f3:69:71:17:99:54:16:a9:
                    d4:d3:32:44:8a:7b:70:47:f7:4b:1c:02:c2:a0:39:
                    de:6c:16:00:12:b5:b5:39:12:66:72:6d:9a:9a:80:
                    81:81:17:af:25:6a:92:62:da:58:01:6c:c6:a6:d6:
                    a4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:15:90:B8:13:57:78:01:E7:65:84:1D:17:D8:A1:02:F8:4A:87:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/13c6d202-c102-3ad7-86fc-48892074ebfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:56:fd:da:c2:f0:fa:d4:1c:20:d6:bd:ab:14:c5:96:ca:4f:
         f0:89:90:e9:c5:af:f9:0e:9f:bc:8e:20:93:78:66:55:69:68:
         c7:76:9b:b9:cb:ea:fc:05:c5:9c:27:12:87:73:a2:1f:3f:e6:
         75:f4:e9:f3:f4:90:47:2a:8a:d2:e1:04:12:0a:4f:73:b2:35:
         bc:4d:0d:fe:f7:7e:2f:af:f9:e6:be:5b:96:0d:2e:9c:6a:91:
         28:b2:41:ac:3d:36:f9:f8:1c:7b:b2:38:41:c4:19:35:13:29:
         34:5c:be:b6:74:f8:64:da:9d:e6:01:00:98:76:6a:cd:7b:34:
         35:47:49:a3:52:12:4c:b1:2b:ed:3a:dc:28:84:90:5d:5e:6c:
         e5:dd:0f:5e:a6:0c:41:a1:d3:0b:fc:45:85:d6:4e:bc:70:da:
         7d:21:83:f8:4b:64:62:41:f4:c3:65:a3:95:d0:d4:eb:1f:94:
         3a:5e:0a:4c:d0:aa:d7:4a:2e:2f:ae:90:82:bf:93:f6:33:a0:
         4b:1d:cd:42:70:d6:37:b1:35:43:a2:35:2d:eb:ed:b0:7f:79:
         fa:a6:07:0c:89:29:18:eb:e6:b2:dd:6d:fe:a0:44:df:39:94:
         25:f0:b1:e1:15:08:43:be:d6:bf:d2:19:d9:44:89:ed:e0:e9:
         f9:c8:65:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:57 2025 by rpki-client