Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2e2be1ac-f031-3479-bfcc-ec5ca3d9f243.roa
File:                     2e2be1ac-f031-3479-bfcc-ec5ca3d9f243.roa (raw, json)
Hash identifier:          pUWna70Nf/ufxIcv7brgS/lqUh9Eyf/ftfmaAug/4oo=
Subject key identifier:   D7:E1:ED:DE:C5:35:5B:C1:99:E2:EC:14:AA:E7:87:45:E1:D3:18:B8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841198F202448712F9437EE0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2e2be1ac-f031-3479-bfcc-ec5ca3d9f243.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     40306
IP address blocks:        70.41.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:98:f2:02:44:87:12:f9:43:7e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=7688e879-e216-4df7-a086-acc3918cc9e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:26:1e:f9:eb:2a:f0:c3:9f:8e:1a:44:72:25:
                    da:42:a3:6f:85:c1:e1:a7:e8:2f:d7:91:7a:ca:91:
                    15:d4:2a:2c:4f:6e:9d:62:2f:23:18:98:a1:e0:75:
                    c6:3f:5c:00:eb:53:9b:8e:ad:9e:88:bc:36:1e:0b:
                    21:07:d4:33:81:69:1d:16:9c:1a:5d:56:91:f6:53:
                    0f:d6:58:36:f8:17:5b:70:aa:bd:2a:49:73:14:17:
                    47:fe:9f:2c:85:7e:28:44:2a:3d:58:62:92:1c:14:
                    71:aa:fa:b4:c8:1a:db:07:19:f9:a7:6b:c9:b1:5d:
                    91:a7:9d:d0:01:ab:71:51:20:45:1a:2b:48:eb:31:
                    b6:3c:b2:ac:f4:bc:ef:96:a1:2c:4d:ef:79:72:93:
                    3d:33:9d:25:d0:1d:16:8f:6e:6e:d1:7e:32:99:95:
                    bb:73:be:9a:fd:2c:5d:e8:dc:e2:f2:8e:d6:a2:a6:
                    cd:90:e9:0a:68:f1:3a:9e:54:82:8b:2f:3c:e4:ea:
                    45:36:97:5f:2e:6c:25:15:06:58:40:11:3a:6e:b8:
                    f9:08:15:09:8f:8c:97:2e:f7:28:b2:a1:c6:72:18:
                    82:da:2e:81:b0:d3:7a:69:84:02:15:f8:6e:10:7c:
                    76:ff:16:56:14:df:33:11:b4:00:ff:12:be:0f:96:
                    32:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E1:ED:DE:C5:35:5B:C1:99:E2:EC:14:AA:E7:87:45:E1:D3:18:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2e2be1ac-f031-3479-bfcc-ec5ca3d9f243.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:9f:95:d3:8b:dd:5f:1b:99:0f:d0:17:73:61:70:89:80:57:
         7b:a7:78:fd:d0:58:1c:76:a2:eb:5b:47:b9:a1:f7:3e:fd:83:
         c6:8f:21:f7:c4:54:15:b5:7e:fd:13:7a:f7:35:bf:41:89:33:
         5d:8a:e6:f3:66:b6:3a:fc:ee:fe:1f:c4:d2:83:93:2c:18:32:
         c9:d4:48:37:f5:d8:e1:e0:6c:1b:a5:8b:67:c7:db:df:fb:d0:
         51:09:86:cd:5f:44:a4:11:9d:7a:94:b3:62:10:59:55:99:89:
         19:29:33:96:83:04:6d:e3:ae:2f:93:5f:49:5f:0b:c3:c0:a3:
         f4:ee:60:b2:31:7a:50:9a:67:a6:a5:07:af:6c:bc:64:f0:65:
         5a:10:e1:e2:72:06:b8:58:0d:04:3e:60:c4:89:7c:c2:ac:b2:
         3c:8f:e5:f3:2b:9b:34:37:73:46:72:69:61:d1:3d:75:cb:c1:
         a7:be:4b:87:0c:66:36:25:2e:bc:41:bd:5e:8a:1e:72:c1:89:
         b0:5c:27:01:a3:4e:dd:47:cb:ce:8a:3b:18:84:71:d0:34:a5:
         1d:a0:4c:23:58:41:14:18:91:fe:22:14:dd:67:3a:1b:e4:7d:
         a4:4d:a4:bf:4e:99:a7:4b:46:96:e2:df:ba:84:2c:46:0c:8c:
         26:30:43:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:22 2025 by rpki-client