Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a45f0fa1-a77e-3a78-b792-76655ca68620.roa
File:                     a45f0fa1-a77e-3a78-b792-76655ca68620.roa (raw, json)
Hash identifier:          lU5QOJ6m9THPffTkG6npKqwSdoPC/pWUjTKmXQ3H1ng=
Subject key identifier:   9B:C7:9F:5B:2C:90:3A:91:AE:08:8E:6C:6C:90:91:25:F9:D8:6D:22
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79EFFFEBF948240D7838700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a45f0fa1-a77e-3a78-b792-76655ca68620.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        70.41.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:ff:fe:bf:94:82:40:d7:83:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2545a5dd-6890-407b-bf94-613a60781723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1a:d6:36:f4:3f:53:da:f0:66:d6:95:b2:94:
                    2d:14:2a:47:40:38:c6:82:4c:e7:76:7f:0b:3b:dd:
                    5c:d0:68:8f:c9:d4:a0:e1:f9:40:50:b2:3d:7c:f6:
                    0b:38:d5:9a:5c:b5:3d:50:b4:de:49:68:1d:3e:55:
                    18:d7:11:bf:a4:5d:74:83:b6:f6:f7:b8:91:65:bd:
                    d2:ab:40:7f:09:18:fe:59:c8:58:77:8d:05:a2:96:
                    83:b6:fa:5b:95:aa:ec:3d:bb:a5:bd:35:72:f0:e4:
                    bf:5f:18:ca:aa:69:95:f9:01:71:c4:6f:1a:77:87:
                    67:b3:b6:c6:77:4f:83:72:c7:e2:66:79:65:54:1b:
                    10:df:43:59:5c:cc:e2:94:97:67:f1:ec:93:4e:ef:
                    76:7a:05:8c:75:ee:29:44:de:93:21:72:25:9c:2b:
                    24:91:c9:c1:26:40:d7:84:5d:de:0a:da:77:24:a3:
                    d0:97:d3:fd:73:0c:38:59:3d:f8:d0:68:c5:a5:bc:
                    e5:96:d5:5f:24:8a:8e:49:bc:34:ea:bb:24:44:85:
                    30:c1:9a:dc:39:69:61:6f:b7:ce:52:74:a5:e5:6f:
                    3d:aa:81:ee:b5:29:e8:39:6e:4b:b8:47:80:47:81:
                    b2:76:39:5a:75:a3:a6:cf:71:61:1d:fe:7a:d6:13:
                    19:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C7:9F:5B:2C:90:3A:91:AE:08:8E:6C:6C:90:91:25:F9:D8:6D:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a45f0fa1-a77e-3a78-b792-76655ca68620.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:89:dc:36:43:5e:fe:dd:10:69:a1:7a:7d:55:ff:c9:25:59:
         6a:9b:e0:b7:a6:4f:5c:fb:57:fa:58:09:9e:51:e1:9c:de:62:
         26:53:8e:e2:26:e8:9b:00:5d:9c:4d:55:02:d2:98:fe:4d:0b:
         60:57:70:f9:f3:e1:a4:c9:28:3a:a6:bc:95:04:71:23:3c:29:
         0f:38:dd:11:d2:78:d0:50:bb:6b:d7:d3:2d:51:e0:ef:ae:06:
         3e:a1:b8:26:fd:8c:a1:03:15:d7:ce:75:b6:d1:56:26:af:a0:
         dd:4b:a3:7a:3c:27:8e:52:40:d5:cf:20:21:44:fe:47:76:bf:
         c9:f3:ae:f2:be:1f:94:10:4c:2f:eb:71:0a:26:3c:f0:ac:7d:
         36:2b:fc:c1:ce:e0:2c:8b:9e:95:e0:6c:7f:6d:29:52:17:e8:
         25:5e:01:a8:ad:c0:f1:3e:27:93:40:3f:73:21:7f:66:0f:ff:
         a0:33:6b:aa:7d:2f:ae:45:e0:de:5d:af:bd:95:2e:46:0f:3d:
         c5:f7:63:94:0b:e7:e6:d8:3d:95:40:ab:e1:8b:01:ad:1f:41:
         f9:df:17:6f:7f:96:a3:6d:cb:57:e2:6f:ea:53:41:5a:09:15:
         7b:c7:bd:2c:62:93:3f:79:7d:6f:d1:dc:ff:2f:e5:d0:55:02:
         c4:6d:64:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:25:01 2026 by rpki-client