Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7299b5dd-141b-3229-868e-dd2b5a44ef10.roa
File:                     7299b5dd-141b-3229-868e-dd2b5a44ef10.roa (raw, json)
Hash identifier:          81IraQyJL+P6rwLkTz6nF2AdJ/SksyKN0klh9hU/8Lc=
Subject key identifier:   52:FD:19:A2:DC:7B:21:7F:9B:E2:84:68:0D:70:3B:70:C5:C9:73:36
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8C70CFC4668C44711CA32580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7299b5dd-141b-3229-868e-dd2b5a44ef10.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     40306
IP address blocks:        70.41.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:cf:c4:66:8c:44:71:1c:a3:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=41df5ade-3c20-4c19-81ec-c392f1b50cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7c:cf:eb:9f:82:d9:cd:de:54:bf:28:20:94:
                    0e:20:64:21:c2:ef:1a:f2:c6:25:59:da:e9:cc:7d:
                    ce:f3:c1:7f:cd:88:b1:bf:52:d1:d5:4a:f5:4d:8d:
                    f7:fc:ba:9a:30:a5:37:f1:72:5e:71:44:90:2c:65:
                    51:5d:fe:a5:49:2f:a4:85:1c:dd:4a:24:ce:03:56:
                    ce:11:74:69:ca:8c:38:6e:7e:e5:d2:07:86:45:1c:
                    f0:cb:af:9c:f7:48:49:d7:ce:bb:6f:77:a6:be:25:
                    2e:55:af:73:03:1e:47:18:f3:bf:ea:f9:fc:d2:28:
                    40:f4:23:91:42:33:dc:25:fd:84:39:20:01:08:05:
                    e1:ac:a5:2a:00:21:91:f9:79:a7:28:49:25:09:80:
                    48:16:01:25:fb:93:bc:96:fe:58:b8:a5:9e:f2:47:
                    be:f0:f2:3c:0e:af:59:a9:08:49:4e:dd:0f:dd:4f:
                    fd:47:5b:6b:df:e3:1b:11:5b:ab:a4:0e:fa:fa:79:
                    cd:e4:29:6c:67:9f:52:fb:7f:ac:dc:48:e8:54:a7:
                    41:97:ef:40:3d:66:da:69:8f:fd:75:8f:4a:f5:94:
                    a1:0f:30:25:0b:5f:e8:ad:b6:6c:70:cf:af:5f:31:
                    d4:b4:3a:fd:b4:a3:48:fc:cc:4d:de:6b:b6:6b:36:
                    97:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FD:19:A2:DC:7B:21:7F:9B:E2:84:68:0D:70:3B:70:C5:C9:73:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7299b5dd-141b-3229-868e-dd2b5a44ef10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:03:ca:af:e3:f6:35:78:20:50:c7:aa:eb:a7:f4:79:5f:40:
         c7:b9:ec:34:e1:c0:bd:60:ac:a8:34:93:ce:0e:3e:c7:76:35:
         81:d2:a7:a3:16:4b:8b:48:48:28:46:d2:b4:7b:3d:e3:1b:ec:
         6d:31:d4:7a:5a:0b:db:5d:e5:bb:ad:6b:ba:cc:4a:2c:42:3a:
         fe:6e:eb:c4:e8:4b:da:8c:06:52:3f:a6:4a:a1:a0:c2:f6:f6:
         36:80:ca:df:38:82:22:87:d6:8f:ee:51:57:9c:39:aa:dc:b0:
         85:f6:70:1e:c0:65:55:eb:2a:43:e8:b9:73:fe:c2:7e:bd:9d:
         d6:c4:19:7a:39:c0:37:33:8d:68:be:7d:ad:c5:ca:18:a5:08:
         01:02:20:e3:c1:d8:2a:94:01:5c:d6:de:6b:0a:70:2c:0b:86:
         b6:5e:1a:dc:2e:2a:f7:ed:b9:37:a0:6f:71:2b:5b:a7:44:c7:
         87:6a:9e:5d:89:aa:e4:1f:7e:bc:79:f7:21:5b:61:af:c0:7d:
         11:d8:80:43:3c:c8:6f:65:15:56:f5:b6:5c:2c:72:20:f0:4b:
         ae:68:4d:99:19:8c:7c:e0:4b:ed:32:b7:ee:78:ed:c3:01:fc:
         4b:22:ae:ad:31:fe:9b:ab:20:6b:ec:fc:d7:cc:30:61:90:4d:
         7c:c3:8e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:03:40 2025 by rpki-client