Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1adc6153-be9b-3f76-aca6-70e00971faed.roa
File:                     1adc6153-be9b-3f76-aca6-70e00971faed.roa (raw, json)
Hash identifier:          RKjRb8TW3btFQD/BnMvDsWee7Qrn1w+pozcgig6c45Q=
Subject key identifier:   DE:B7:AD:19:87:31:1B:9E:E9:3C:52:91:85:5D:68:EE:B1:1F:ED:47
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79EF16C07E909D511B06980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1adc6153-be9b-3f76-aca6-70e00971faed.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     40306
IP address blocks:        70.41.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:f1:6c:07:e9:09:d5:11:b0:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e93a1934-0117-4832-b0c9-e17bbd0cb3bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d3:25:f0:83:0a:ca:b8:4e:c7:97:ed:d5:d6:
                    c6:a5:c2:5e:8b:71:04:11:5e:58:63:eb:c8:77:e8:
                    9d:74:c4:0b:c6:a4:5b:b9:b8:f7:6e:c6:33:e1:ea:
                    6e:e6:35:fb:ef:dd:f0:3c:0d:35:44:20:c3:61:11:
                    d6:09:a5:6d:57:20:81:13:86:1d:f4:91:e6:95:fb:
                    3f:d8:96:86:45:64:7a:90:d1:7d:0d:be:73:65:8d:
                    8e:ad:0a:0d:a2:20:93:2c:eb:10:9b:d6:42:82:75:
                    88:b9:5a:e8:85:06:c6:23:56:ea:a5:74:40:8b:fe:
                    d1:9d:6d:5f:d9:94:fd:c0:ae:62:86:e6:8e:fa:c9:
                    ca:5b:03:f5:76:07:0f:af:71:ac:03:ec:f1:90:27:
                    06:ba:68:ed:58:3d:eb:4d:5f:e3:d2:6d:36:20:69:
                    a5:6e:b4:28:b6:3b:43:04:30:67:ff:43:53:36:a3:
                    9a:f6:fe:3c:62:a2:7e:1a:39:f1:b5:84:60:79:64:
                    5a:9a:e4:6d:9d:59:75:a2:5c:d2:69:31:0d:f3:b3:
                    2f:9d:d6:b1:ad:38:53:42:86:75:91:93:04:fe:7a:
                    30:7b:ca:5b:90:83:ac:ea:d9:31:9e:c2:3c:1a:2b:
                    08:cc:4c:be:b2:71:75:5d:a1:87:1d:6c:24:49:3b:
                    d0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B7:AD:19:87:31:1B:9E:E9:3C:52:91:85:5D:68:EE:B1:1F:ED:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1adc6153-be9b-3f76-aca6-70e00971faed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:3a:79:fc:4a:87:14:c9:97:8f:34:9c:6e:43:47:7c:e7:14:
         46:4b:78:09:ee:19:b9:d8:1e:f3:0a:90:91:1a:d2:cc:e4:7e:
         6d:29:c3:af:83:13:bf:f8:51:55:f1:81:b3:56:1e:65:98:4d:
         af:ef:0b:32:79:fb:ba:1a:7e:10:b1:28:9f:ed:ff:39:17:1e:
         2e:01:a7:50:dc:9c:3c:8f:08:b0:4e:0f:60:ea:ef:70:ee:13:
         ea:a9:64:52:86:dd:83:4c:1a:7b:5b:82:6c:11:09:f7:95:34:
         c8:59:e5:4a:f4:30:a6:92:bc:e6:81:88:80:a1:e3:bc:c2:10:
         ab:05:47:bd:55:34:35:14:7d:42:0e:73:40:e3:9d:97:54:ee:
         be:70:b0:d4:96:df:50:2d:62:48:19:4d:b3:2d:df:3b:74:50:
         49:12:db:17:3b:ab:ee:bd:18:76:db:54:8b:f8:0b:f5:dc:61:
         64:92:3c:77:04:f1:ef:5f:23:a5:a5:14:a8:78:a5:ba:58:25:
         18:9f:22:2a:3b:22:86:ce:35:94:c7:05:bd:61:cd:69:78:12:
         af:0f:9b:4f:f1:a6:ec:3b:cd:8b:02:14:fd:06:7d:a1:87:04:
         d8:91:da:11:76:55:0b:9b:9d:24:f6:93:13:af:6d:d1:39:af:
         9a:52:cf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:09:51 2026 by rpki-client