Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/51c58f18-44f1-3c26-9dc4-e0199d3691a9.roa
File:                     51c58f18-44f1-3c26-9dc4-e0199d3691a9.roa (raw, json)
Hash identifier:          gvPNQAsTEhdf76R/6ddTnd+s8NJwrv2DlpJtu1Xe2DY=
Subject key identifier:   E2:D5:DF:D1:6A:A4:6B:99:69:44:7A:ED:73:A4:16:D6:46:E0:4D:DC
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79D5DC1FCF55914C991C440
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/51c58f18-44f1-3c26-9dc4-e0199d3691a9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     40306
IP address blocks:        70.41.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:5d:c1:fc:f5:59:14:c9:91:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=95ce272c-55c2-47d5-8236-f1ccd6f3a554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a5:b0:42:4c:15:f1:e3:aa:ea:3e:e4:8b:a7:
                    cb:f6:f3:e1:a2:01:77:0a:d4:ab:39:a4:10:10:c2:
                    5a:90:6f:6c:f2:33:9a:a1:8a:42:b8:cb:69:e4:2e:
                    2c:27:de:ba:58:38:b3:39:50:de:2d:3e:51:be:d8:
                    ea:52:a4:5c:82:5e:8e:4a:fc:42:43:71:20:99:86:
                    eb:6e:33:5e:be:24:ad:1a:18:6a:32:e7:53:2a:8c:
                    31:f1:1c:2d:d4:ae:8a:0b:a3:1f:65:53:76:2e:e9:
                    f6:01:10:76:46:b3:2b:65:38:3c:2e:da:39:98:2b:
                    61:b2:19:3b:09:f2:6d:b3:38:e0:30:3e:1d:cf:9b:
                    f0:f3:5a:21:5b:0a:83:6e:79:7f:fd:70:6e:bd:ae:
                    32:7f:c3:58:e6:5a:18:cc:b1:43:61:9a:38:44:f8:
                    f8:c6:f9:cf:f9:9c:9b:c2:ec:63:27:56:1f:7f:26:
                    fa:9d:ea:b4:67:6b:3a:0b:01:61:fd:2e:c2:95:35:
                    37:e0:e6:b9:3e:d4:38:cd:6e:02:a4:4a:91:7b:8c:
                    df:81:fe:78:44:15:cd:51:fa:d8:94:ab:80:73:7d:
                    a7:20:55:fe:06:64:bb:a4:4c:6e:ab:fd:0d:ca:32:
                    f3:a4:a5:65:98:10:b4:5e:9f:96:3c:d2:3d:3d:ce:
                    be:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D5:DF:D1:6A:A4:6B:99:69:44:7A:ED:73:A4:16:D6:46:E0:4D:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/51c58f18-44f1-3c26-9dc4-e0199d3691a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:b2:29:b0:cc:c0:89:00:87:01:ee:27:e4:88:d5:85:ec:f5:
         c4:fb:3c:ba:99:59:60:31:ed:69:de:5e:aa:e4:96:84:a0:e6:
         0d:89:2e:d5:64:86:80:4a:57:18:8b:8a:2d:62:d2:80:bc:b8:
         6b:f2:23:ed:32:1a:47:c2:a2:e0:04:db:f3:23:d4:6e:9b:37:
         60:08:29:43:4a:dc:7b:d3:7b:54:9f:f8:75:35:9a:7e:a4:9b:
         1b:0a:bf:bd:71:23:2b:e5:ad:63:30:e0:5b:f2:28:9c:98:4b:
         da:f4:9f:48:23:15:73:46:6f:e8:5d:0e:ca:37:b1:01:37:3d:
         c1:c4:88:d9:f8:6d:7e:71:ca:4c:18:97:58:5c:2c:98:36:69:
         f4:ac:7d:90:92:69:72:d4:cd:1b:24:27:fc:5f:4c:c1:d0:26:
         c1:fb:82:6b:ec:cd:25:77:22:a4:36:a1:1b:93:18:ee:db:00:
         5e:3c:95:bb:92:47:a8:61:b0:9e:71:ae:f7:a8:5d:f8:77:26:
         36:54:38:c8:48:a0:0b:15:47:ea:a9:22:0f:15:67:4c:ff:ea:
         6c:e5:81:f3:47:c6:5d:39:08:e6:2e:62:24:a8:55:3a:32:09:
         cf:66:89:60:fb:25:74:fb:28:88:39:99:37:ae:00:f1:c8:9f:
         d4:3a:76:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:59:14 2026 by rpki-client