Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/de4709e8-4c72-3636-a934-4a2296d5f322.roa
File:                     de4709e8-4c72-3636-a934-4a2296d5f322.roa (raw, json)
Hash identifier:          WTaugxeI8rUcanhlkKiqdR95F6jPhBzx9JS1LVV7nI0=
Subject key identifier:   B8:FB:A7:9E:C7:79:22:E0:20:3B:B2:7D:BB:71:C1:D1:1F:57:E7:D0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B65D6CC31EC1541AC13C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/de4709e8-4c72-3636-a934-4a2296d5f322.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        70.41.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:65:d6:cc:31:ec:15:41:ac:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=27416a5b-23cc-4f06-a5ff-f8e7aa8f93d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:db:08:af:16:5b:51:29:11:69:85:12:57:d0:
                    b0:2a:a4:59:a5:95:d6:1e:3d:78:be:01:a1:30:38:
                    dc:9b:f4:26:5a:97:69:35:ea:ab:54:0b:e5:c2:06:
                    f3:83:78:ab:29:0e:1e:98:be:37:ef:94:86:a7:99:
                    55:83:69:f8:a0:85:dc:35:c0:c6:8f:73:0b:a9:4d:
                    99:ee:cd:7e:ee:96:40:62:5b:45:f4:07:5f:f4:c0:
                    34:18:b4:ad:1c:bf:c8:6b:24:ea:96:e4:f9:2f:57:
                    8b:0e:f1:5f:54:e6:0a:8a:29:bf:c1:27:57:d0:7f:
                    f8:21:a9:b5:bc:d9:79:03:22:c2:70:30:3f:73:a8:
                    f4:16:2e:86:35:bb:76:2a:32:02:9e:d6:8a:34:5b:
                    49:59:dc:45:9d:c8:ce:9f:8e:0d:4b:57:38:ef:82:
                    b3:be:81:9e:c1:77:b6:95:b5:a3:78:cc:e9:dd:ca:
                    59:45:e4:1a:27:25:b4:f6:9d:f2:38:0a:ba:5a:a3:
                    26:49:a1:ee:e2:51:62:65:cc:3f:39:bc:d0:76:63:
                    eb:b0:f8:5f:68:bd:f1:98:67:7e:37:ef:0a:b9:a1:
                    b2:0f:af:b2:b2:71:c8:c4:a0:de:15:96:3d:6e:80:
                    c2:bf:d1:1e:6b:2d:ca:8d:d2:0f:b0:1c:d6:21:94:
                    ac:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FB:A7:9E:C7:79:22:E0:20:3B:B2:7D:BB:71:C1:D1:1F:57:E7:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/de4709e8-4c72-3636-a934-4a2296d5f322.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:ac:c1:53:b4:71:ef:70:2c:f6:f5:21:8d:56:38:ba:4e:b9:
         9e:87:a4:c0:91:7d:41:8a:e8:ac:53:11:14:8e:57:50:ef:bd:
         d9:60:d6:34:18:94:65:93:f0:90:d7:30:44:2f:19:7c:79:98:
         b8:d1:51:00:dd:75:1c:54:f5:5e:87:d1:e5:39:d8:71:64:a4:
         69:52:b9:e7:13:08:cb:4f:0b:e4:57:01:b9:d3:03:f4:aa:f7:
         7c:04:4a:3d:5a:1c:38:d1:ad:80:f1:d8:e9:eb:9c:bb:65:8a:
         40:f2:9d:3a:b9:8f:bd:02:2a:0f:11:d8:98:fc:85:c8:13:ad:
         d9:48:25:23:21:99:99:51:d5:ba:84:d7:d3:ab:2c:9c:60:b8:
         0c:29:4d:2a:29:52:09:2a:8d:32:36:ca:1d:c7:69:dd:86:71:
         80:6d:72:98:9f:b1:59:3e:3d:d0:43:db:d7:8b:42:80:a9:05:
         0f:9c:d1:5c:1d:21:97:89:60:fa:e0:2b:37:70:9b:75:00:a1:
         3c:c1:2d:6d:72:3a:b9:c7:f7:cf:6a:c4:3d:60:0e:e0:cf:40:
         9b:df:44:57:5f:91:37:a4:da:1c:55:91:7c:81:0d:e3:a8:b9:
         13:73:06:b3:02:57:77:42:64:f9:b6:f9:3b:2e:8f:6c:3d:29:
         c0:34:78:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:35:34 2026 by rpki-client