Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/66d50229-7366-30da-bbd1-29dbfc0d00a8.roa
File:                     66d50229-7366-30da-bbd1-29dbfc0d00a8.roa (raw, json)
Hash identifier:          Yw6GOgW0uBY0cUs2SKZvaJEsMuRBwMstd6dweWpTMRw=
Subject key identifier:   20:DE:AC:3E:BE:3D:47:CC:60:DC:A2:17:F9:58:75:3A:C6:54:26:23
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8410F9245660013F70BB7238
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/66d50229-7366-30da-bbd1-29dbfc0d00a8.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     40306
IP address blocks:        70.41.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:f9:24:56:60:01:3f:70:bb:72:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=dabb6800-2f34-4044-80df-14269e81162c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:73:01:2e:1a:14:cf:da:00:fa:1e:dc:4c:16:
                    67:ba:f7:87:f3:d5:03:bd:77:53:a7:9d:a0:a6:30:
                    1b:20:03:8e:2f:c2:ef:01:c5:de:a5:06:fa:a2:e4:
                    53:c7:f6:e7:04:ca:0d:9d:7b:f3:b2:32:70:fc:0e:
                    83:6b:e4:a3:cc:eb:73:62:01:7c:08:b2:85:fe:56:
                    02:14:fc:08:bf:53:15:93:26:52:b2:93:d1:d9:71:
                    61:61:ab:81:d4:1c:b9:f9:26:d5:87:b3:74:b8:4a:
                    54:05:4c:74:3a:d3:30:e5:9d:de:2d:e5:22:fb:55:
                    45:12:52:dd:e3:dc:5b:4f:9a:c2:57:b7:0e:5f:99:
                    44:4e:27:38:3d:c6:c2:39:1a:10:f2:55:a3:de:c5:
                    07:b2:2a:24:c4:15:80:0a:a6:fd:86:f5:ae:15:c2:
                    65:8a:eb:0e:57:a1:1d:10:2e:b9:01:df:b8:ca:e5:
                    15:61:82:81:11:a1:6c:a7:c0:70:5a:fa:ce:57:64:
                    12:99:62:11:0d:06:dd:0a:11:b7:19:6f:75:6e:f8:
                    19:53:b6:ea:12:98:06:fd:e8:38:c9:83:45:25:00:
                    0a:da:37:19:09:88:e5:42:c8:5a:a7:ea:2e:46:10:
                    8b:40:62:82:03:34:ea:92:fd:8f:5f:f1:3c:5a:d0:
                    a8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DE:AC:3E:BE:3D:47:CC:60:DC:A2:17:F9:58:75:3A:C6:54:26:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/66d50229-7366-30da-bbd1-29dbfc0d00a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:26:43:fb:7e:1f:64:a5:be:45:61:3c:f8:dd:f9:f4:c3:75:
         fb:4d:bd:f1:c3:d3:c7:97:0c:c2:87:71:fa:b7:ec:20:4f:2f:
         be:4a:fc:17:10:bf:f3:b9:6d:fb:27:90:76:69:32:4d:84:f8:
         3a:26:13:5f:74:bd:c2:f4:09:56:47:de:d3:ea:65:89:73:af:
         33:0c:55:f7:cd:a7:fb:6a:2c:5a:de:7f:ce:11:0f:0a:bb:3e:
         d6:fe:39:f5:2e:44:bb:9a:f6:62:84:f4:a1:86:d3:3d:b5:8d:
         e7:7f:d0:51:62:79:b1:55:81:ca:cb:1d:a1:5a:37:d2:48:df:
         d9:b5:db:62:c6:88:b3:dc:e6:9c:16:70:a5:f1:44:49:52:f9:
         35:6d:37:97:eb:ca:0c:d3:57:de:2c:fd:f5:f2:0c:98:fe:d6:
         01:9c:cf:da:69:cf:50:67:0c:d6:74:36:48:38:5f:4e:fe:76:
         81:e7:1c:23:49:82:00:7d:9f:8b:6e:84:db:51:12:35:d0:d5:
         14:ed:3a:a9:39:1e:2c:b6:5e:16:0c:76:49:26:f6:f9:14:ba:
         ff:7f:cc:86:6f:6e:c3:05:de:89:27:22:95:2e:02:d3:af:c6:
         49:78:5d:8b:7b:92:41:1d:d5:3f:da:8b:5a:f3:c3:fe:14:93:
         eb:21:a4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:32:00 2025 by rpki-client