Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/967c7534-3065-3eaf-b81f-4f4f2f4f99e9.roa
File:                     967c7534-3065-3eaf-b81f-4f4f2f4f99e9.roa (raw, json)
Hash identifier:          9lehQQtROZpa7MU1/sGhyUDQw+g6ZsOBHZWLJ/6GhkA=
Subject key identifier:   27:C1:7C:4D:85:E9:7E:61:E8:CE:5C:3F:8E:0E:50:F2:3D:F7:19:A7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79D5D10B79FAEE643782180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/967c7534-3065-3eaf-b81f-4f4f2f4f99e9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16491
IP address blocks:        70.41.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:5d:10:b7:9f:ae:e6:43:78:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=098243f9-5fc7-432b-a05e-fd7b89d6d9c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c9:c8:b3:54:25:e7:d6:df:0f:53:f9:64:6a:
                    be:56:81:3b:cf:b2:70:5f:7f:3c:9b:62:9a:44:de:
                    c3:b0:9c:9c:58:99:ea:b5:d9:b7:2c:56:8d:16:7a:
                    53:f6:4f:86:06:bc:48:bf:ba:84:1d:2e:51:d9:21:
                    2d:00:ef:4f:1d:48:d5:78:6d:4d:0a:36:4b:c4:68:
                    3e:d2:4b:70:96:e2:d6:ce:42:d6:2f:b2:b1:8c:05:
                    ef:26:2f:39:3c:f3:96:51:6c:26:95:e5:47:86:9a:
                    54:41:f3:7d:8d:39:ad:5b:d3:ae:eb:06:fd:ad:f5:
                    cb:0e:6e:59:21:d1:59:54:f6:e0:72:a4:75:69:93:
                    7e:26:6f:a6:21:51:38:79:90:12:38:8c:1b:f5:44:
                    c6:0a:17:b0:8e:38:6d:52:9d:c5:9c:d5:43:a4:4c:
                    ec:51:30:a7:7c:eb:c8:38:54:31:ce:e3:53:6a:64:
                    0e:8b:e2:c1:d4:ca:65:af:83:8a:31:58:f6:b2:5a:
                    7d:d9:90:3d:27:7f:9c:5d:f7:fb:37:65:da:88:9a:
                    49:b3:ad:b8:10:da:af:5b:30:30:3c:48:6b:76:cc:
                    bb:0b:75:32:ab:02:6a:9d:4b:35:29:09:bd:78:2a:
                    7b:45:28:6a:9b:6f:8e:a3:96:34:33:d7:29:a7:ba:
                    aa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C1:7C:4D:85:E9:7E:61:E8:CE:5C:3F:8E:0E:50:F2:3D:F7:19:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/967c7534-3065-3eaf-b81f-4f4f2f4f99e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:02:5d:2d:7b:df:a3:be:15:ae:6d:76:f9:18:02:ad:dd:66:
         31:a6:48:82:c5:91:94:9f:8a:9e:61:74:fa:a8:7d:06:d4:2b:
         bc:a9:65:16:5c:49:3b:f5:0c:37:bd:f9:43:0b:bc:47:1c:7b:
         87:9c:f5:32:13:1d:7a:bf:74:95:64:61:fe:a0:4a:b0:a9:6d:
         fd:23:4a:a7:bf:f6:06:76:c9:1a:9f:5e:2c:bc:f3:eb:82:ae:
         fc:41:cc:63:85:fc:ad:59:bb:61:9e:92:2c:4b:92:51:91:6c:
         f5:7e:6e:0c:12:18:fc:b3:ae:a4:d8:f4:73:d9:b5:10:ee:e9:
         d2:08:49:96:52:54:17:2f:3c:fb:15:a6:83:2f:fa:ae:44:5c:
         d2:14:a7:12:dc:28:de:46:f1:5c:56:7d:20:aa:3f:90:1b:af:
         f1:63:7a:8b:0d:46:f9:99:a8:9a:f4:1a:25:33:ad:ec:7d:14:
         b9:73:a4:75:af:12:c5:35:6a:e9:b2:e4:8d:04:1f:b6:cc:34:
         44:86:e3:8a:96:81:ea:71:c1:54:d2:77:65:43:55:3e:f1:96:
         c7:5c:29:04:bd:e3:0b:a9:e0:96:df:02:80:15:a6:60:6b:bb:
         7f:7b:52:3d:f6:c2:22:33:40:3e:2c:32:83:a4:51:fb:aa:3c:
         b7:01:5e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:15:53 2026 by rpki-client