Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6866edc0-0b3a-33ac-8758-b72076f1d382.roa
File:                     6866edc0-0b3a-33ac-8758-b72076f1d382.roa (raw, json)
Hash identifier:          lFYJEPtB7BSBs4S/u5hjdgRX7cv75YWFVf8rk7iVKNo=
Subject key identifier:   9E:3F:20:78:02:35:BF:A8:2B:55:D6:E0:99:2C:F6:8D:12:A5:F7:64
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAE2A5187BE05E74C00C90
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6866edc0-0b3a-33ac-8758-b72076f1d382.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        70.41.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:e2:a5:18:7b:e0:5e:74:c0:0c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=f0411b29-e994-4790-9daa-7efc0f94ec2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a1:79:17:16:fc:d8:93:77:5d:6a:48:7b:75:
                    59:b0:3c:6e:4c:e4:8f:f0:a2:0a:2c:36:d6:28:10:
                    02:1e:b5:0f:e5:4f:11:c8:73:b0:80:99:96:bc:b2:
                    fc:94:8d:95:a9:0e:60:8c:d9:4e:bc:21:21:75:e4:
                    9e:32:89:87:2d:4d:ff:96:c0:09:da:f7:49:77:d8:
                    d4:32:f6:34:17:df:02:a9:ab:06:b6:f8:24:d7:92:
                    00:fb:9e:94:88:82:35:f9:ff:a3:d0:e4:df:14:8c:
                    ff:56:81:60:73:c9:29:68:9e:c2:45:a9:fa:08:94:
                    d3:99:f4:32:90:b4:cb:4d:71:83:c2:25:9f:9f:4d:
                    9b:31:77:30:ba:86:ef:16:01:78:c8:ba:1b:0e:e8:
                    aa:b6:ea:a2:5a:20:b6:5e:a2:c4:ef:10:3a:1e:64:
                    80:c3:68:e5:21:e2:0d:c5:7d:a8:17:99:b3:05:fc:
                    d8:57:b1:00:f1:41:1a:03:4f:a0:2f:94:78:12:ce:
                    5e:93:14:60:ca:9f:8a:78:55:3b:d5:1b:38:2e:32:
                    16:fd:83:95:5b:6e:14:91:3a:52:01:4b:f0:e1:59:
                    75:cf:de:d1:7a:83:c2:cb:56:43:70:2a:74:f5:8e:
                    ff:9e:a7:d4:a7:57:77:0b:d5:b7:de:ed:2b:2c:e6:
                    ff:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3F:20:78:02:35:BF:A8:2B:55:D6:E0:99:2C:F6:8D:12:A5:F7:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6866edc0-0b3a-33ac-8758-b72076f1d382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:2c:de:c2:dc:da:08:66:4e:f7:95:21:6c:dc:a3:51:0c:c0:
         e9:8c:e0:2c:b7:5c:4b:9c:97:01:96:07:53:17:0f:2b:b8:b7:
         1e:f7:d7:2c:e8:9a:f8:b2:ab:66:99:85:40:5f:27:e4:4e:db:
         31:6d:51:ea:13:e3:f3:f3:2c:94:43:90:ef:e5:cd:b8:6e:5b:
         e4:1b:fd:67:af:0d:f4:9b:59:4a:ad:62:70:78:db:00:6c:df:
         c3:12:b2:d8:2c:4d:6a:74:09:34:22:1a:8d:bf:b2:8e:7f:ba:
         16:60:1c:91:b9:cf:75:71:95:43:af:90:03:8e:85:5e:46:5b:
         9e:38:da:2d:31:2c:2a:a6:b7:9f:80:2f:6b:fd:8a:c6:f6:27:
         b8:1b:ed:f4:74:f5:2c:2b:a6:08:b2:78:f8:ea:e7:2a:5b:ce:
         1a:f7:c8:03:d7:49:da:13:75:f4:7a:0a:a1:f0:8d:e5:3c:bf:
         52:87:7e:c6:af:ff:28:1e:d3:a8:c4:ca:39:71:b4:c9:8f:23:
         6a:8e:de:25:9b:07:0b:59:3e:6a:f9:4f:2c:d6:ab:91:95:6b:
         25:c2:94:f9:42:fb:7a:12:e3:00:7b:51:69:b0:66:85:c9:2e:
         d6:b7:8e:e7:49:53:d5:9c:1f:e9:47:9c:06:6b:a1:72:e8:aa:
         dd:6c:78:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:06:40 2025 by rpki-client