Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a912698-f002-3c0c-b5a1-06a7df2ebd26.roa
File:                     5a912698-f002-3c0c-b5a1-06a7df2ebd26.roa (raw, json)
Hash identifier:          ZEjrtqnIqhQNQ1gfQd/+hxGpGo7oZ4vCZBPZNdErG7g=
Subject key identifier:   98:F3:F9:B6:03:F6:C2:42:0E:F9:3C:EB:5B:14:72:15:D0:CA:A4:08
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BDF6DB2493A7673F95040
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a912698-f002-3c0c-b5a1-06a7df2ebd26.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        70.41.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:df:6d:b2:49:3a:76:73:f9:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=b70d1044-670c-46cd-866a-fbc77f380a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:43:28:09:01:ac:52:a4:85:51:d8:5b:fc:4f:
                    6d:b5:e1:37:32:58:6c:8a:82:b6:fe:56:16:44:a4:
                    1e:36:e1:32:d5:90:87:76:1a:8f:59:d3:e0:21:eb:
                    6c:84:74:f1:6e:34:c1:03:81:01:d5:09:b2:e4:18:
                    f5:87:2d:b0:37:fe:d4:25:59:ce:fb:9b:2d:f6:4d:
                    f0:98:32:81:0b:14:bc:ff:be:da:7e:29:a1:df:97:
                    1b:bf:14:e7:45:94:95:f0:ed:4e:4c:36:94:14:17:
                    12:1a:ac:ca:c9:12:87:67:9c:c8:c4:b9:ac:25:b9:
                    f7:6d:22:f0:c6:f3:95:37:bf:04:f4:8c:ee:ca:7b:
                    2c:3d:00:b8:8e:ce:42:25:6d:13:30:59:1a:3d:0e:
                    b8:d7:e1:b8:0a:08:34:73:3e:ce:db:65:fb:58:3d:
                    09:41:0c:0f:90:38:33:19:14:e1:63:7d:09:39:55:
                    d8:3f:6c:b6:57:e1:52:d6:32:01:f4:ce:f9:c7:0c:
                    da:ab:d2:4f:37:59:7f:3b:93:69:62:08:16:24:f8:
                    d8:8f:87:9d:12:fb:9d:fa:b1:5f:87:ce:c9:24:0e:
                    be:b5:28:b3:9f:0d:85:d3:d7:55:f8:e9:1d:02:d9:
                    26:ef:8d:d2:c6:73:66:66:ce:69:31:90:15:92:c4:
                    88:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F3:F9:B6:03:F6:C2:42:0E:F9:3C:EB:5B:14:72:15:D0:CA:A4:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a912698-f002-3c0c-b5a1-06a7df2ebd26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:9f:1b:96:d6:16:9e:e0:9d:b0:6d:41:48:aa:43:f7:11:fd:
         e2:bd:ff:ea:81:0e:82:61:61:2c:4c:e1:74:81:77:a2:c4:cf:
         5d:be:d7:7c:bf:30:eb:91:5a:83:31:37:e4:fe:db:a8:64:30:
         1f:c5:d6:b4:51:d1:94:d6:7d:92:66:00:d3:9b:f5:67:7d:8c:
         34:40:ce:4a:92:75:91:05:51:af:c2:f0:e8:63:09:91:d4:19:
         b8:85:bc:cc:af:84:cc:cf:a1:ce:72:74:ec:cb:55:18:9f:93:
         a3:1a:e2:a9:53:f2:24:28:73:fb:53:83:58:1f:01:8b:78:72:
         74:1b:9d:53:d6:f6:25:6b:04:53:aa:95:8e:6b:e4:a1:28:4f:
         63:b6:dd:b6:72:3b:f5:3f:61:b5:bd:1c:a6:89:58:26:8d:94:
         3e:8e:ca:9f:e7:e4:1f:44:be:64:c4:13:a2:ba:a5:2f:c6:e0:
         2a:75:9a:86:c7:f0:ed:02:5c:ac:d1:39:2f:2b:d2:e9:4c:a4:
         36:d4:f9:35:7e:2d:4f:95:02:12:7e:a8:76:c4:f3:ba:d7:4d:
         b2:08:f6:a6:f0:2b:6a:d9:44:05:d1:e0:97:01:aa:e9:23:93:
         1e:cc:8a:e0:83:4a:c8:e3:d1:e2:0d:d5:5a:e7:d6:0b:33:29:
         95:01:ce:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:16:14 2026 by rpki-client