Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a41768a-2aa7-3734-a2c2-a3f8ab6c4add.roa
File:                     2a41768a-2aa7-3734-a2c2-a3f8ab6c4add.roa (raw, json)
Hash identifier:          l8xfXdtQylRygynCeinvT47ykXTYiPNaRQoZBpkAa+c=
Subject key identifier:   8E:B6:27:03:A2:24:7E:28:A8:61:36:BB:83:C1:5A:3E:2F:73:96:F7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B644C285C77D116686600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a41768a-2aa7-3734-a2c2-a3f8ab6c4add.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        70.41.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:64:4c:28:5c:77:d1:16:68:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=f745608f-ca45-4d89-9523-aa35f28745ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b9:bd:1a:ee:55:b8:8f:76:e3:83:e8:9d:13:
                    73:1f:08:d1:a0:83:27:c8:8b:2b:8c:85:7f:59:23:
                    e3:e9:e9:78:c7:06:ef:e9:2a:00:5f:b6:87:7f:e2:
                    ef:22:82:5b:9d:90:28:f1:13:39:49:5e:32:b1:d6:
                    e3:11:c9:e0:c4:a0:6e:98:4d:20:4e:55:db:3e:ad:
                    8f:d8:51:d9:4c:2b:ed:1b:22:a4:a6:51:8d:85:41:
                    18:38:90:f0:d6:36:f3:cb:c4:d9:49:38:33:33:ce:
                    7c:49:df:0d:2e:44:3b:b2:d8:dd:f9:43:fa:3a:1c:
                    f6:94:d1:04:56:31:1b:ab:28:63:7f:7d:dc:e2:8b:
                    17:80:1a:5e:04:62:9a:ee:48:d1:13:d8:c2:a9:e9:
                    dc:b1:6a:89:b1:33:f3:c5:c0:f6:3c:75:24:4c:c5:
                    d7:34:40:1c:4e:8d:19:e5:86:b7:b1:ab:16:4a:4c:
                    d4:48:37:03:79:6c:0c:54:d3:30:9b:f7:a0:18:a3:
                    b7:c1:2c:5c:fe:57:0d:75:0d:e2:51:d3:4e:26:c9:
                    82:c1:cc:c3:7c:b6:3d:02:ee:d8:43:ec:72:c0:ec:
                    24:15:d0:78:b2:1e:b9:7f:66:b9:81:dc:a4:61:c6:
                    3b:ea:78:1b:02:7e:51:70:f0:73:74:e2:e8:bb:b3:
                    aa:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B6:27:03:A2:24:7E:28:A8:61:36:BB:83:C1:5A:3E:2F:73:96:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a41768a-2aa7-3734-a2c2-a3f8ab6c4add.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:cc:41:89:90:31:83:c9:71:31:f9:12:b3:d7:69:c5:47:76:
         d7:3b:11:c0:c0:e0:93:bc:19:15:d0:6c:d1:8f:26:f6:54:7c:
         62:a4:d1:46:06:df:44:69:eb:57:5a:1e:7b:b6:a0:e4:57:42:
         8b:9b:ef:6a:2b:6b:05:4c:61:50:ee:c5:30:d3:bc:b1:0c:49:
         d6:af:fc:46:35:c5:94:ee:f0:2f:70:8c:bb:5f:04:88:d4:44:
         90:ed:73:c2:4b:c1:7b:91:15:08:36:13:8f:02:b1:ba:5a:8c:
         79:69:6d:5a:40:1d:d5:ea:84:94:34:c7:bd:c9:66:dc:ea:3c:
         3e:ed:ff:26:31:6c:5e:6f:65:1f:79:14:fd:9f:05:89:48:67:
         70:9c:d5:e0:1e:d1:72:af:d7:46:d8:b9:3a:17:0e:c1:5e:45:
         11:87:a9:dc:f9:00:0f:79:e7:4a:43:e5:b4:f5:ba:5b:cc:71:
         a1:4e:ff:8a:10:6f:bf:b4:6a:b8:03:03:8d:db:81:4b:bc:7c:
         50:bf:b3:34:f6:a1:cb:ad:62:42:98:c1:21:f6:e1:e7:bc:a5:
         8a:e3:7a:ff:5c:28:11:cd:e6:ba:6b:db:eb:c6:af:32:e6:8f:
         71:2d:b0:da:14:8b:95:98:84:70:b6:84:1e:cc:19:03:85:67:
         4b:a3:d4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:59:01 2026 by rpki-client