Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f0eea08c-78be-39f3-b7f5-ea1ec1f86c83.roa
File:                     f0eea08c-78be-39f3-b7f5-ea1ec1f86c83.roa (raw, json)
Hash identifier:          r5W0R0ZcLj/HJ8T6rs/j85PdEU9S7XJMDDkWmm6xkIc=
Subject key identifier:   CB:21:20:7F:E5:EF:AC:A5:1A:2D:FB:8D:96:A7:E7:86:6E:01:6C:22
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79EFF8AC097E92260DC1F80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f0eea08c-78be-39f3-b7f5-ea1ec1f86c83.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        70.41.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:ff:8a:c0:97:e9:22:60:dc:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9cb51797-330c-4429-8905-5a0533a7e518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ad:58:d4:21:01:41:a7:32:cf:b3:ab:91:bc:
                    a0:53:d1:71:ff:ba:9f:b7:2b:c3:58:ca:96:a9:33:
                    12:aa:69:d0:ca:48:47:33:2c:e4:29:31:33:97:f9:
                    a2:5c:f6:e9:f8:08:20:ee:ff:67:52:0c:1d:fe:75:
                    63:3f:f2:86:43:bc:bb:dd:4a:3e:b9:37:35:30:ef:
                    3a:72:10:ea:9d:0a:a9:d8:40:2c:af:8d:d8:fa:d8:
                    63:be:fc:f1:6b:98:3f:66:89:90:e3:72:71:49:0a:
                    6e:70:b0:c1:0b:9f:4a:60:43:e0:6e:6e:36:08:ff:
                    a3:c7:38:39:b0:46:ca:43:ab:d0:af:39:6f:4d:fa:
                    89:aa:4c:7e:4f:9c:3e:d2:7b:59:b5:18:c5:66:58:
                    b7:67:9a:48:b9:2a:52:b7:59:3a:a7:dd:21:eb:c0:
                    6f:39:a7:1b:ff:3b:71:70:80:ec:81:85:9b:be:68:
                    03:90:32:b9:ab:95:39:53:60:70:cf:29:a4:b2:4b:
                    5c:47:c9:23:78:37:20:81:15:f4:35:10:3a:1f:5c:
                    31:12:b2:53:92:7a:1e:6d:3b:57:4c:65:89:07:78:
                    41:70:c4:0d:d0:5b:da:cc:7c:ba:ed:c7:8c:19:bf:
                    f5:d9:70:09:0f:51:fb:0d:9e:39:77:82:d1:58:6f:
                    fe:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:21:20:7F:E5:EF:AC:A5:1A:2D:FB:8D:96:A7:E7:86:6E:01:6C:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f0eea08c-78be-39f3-b7f5-ea1ec1f86c83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:85:52:03:5f:72:34:3a:a6:73:49:e7:e6:ba:e6:71:36:0f:
         26:27:26:92:91:8d:7e:bc:bb:bc:aa:e2:7f:36:3f:45:de:ab:
         7f:6f:87:d2:77:a5:15:3b:8b:75:b2:ae:18:98:68:f5:03:a2:
         a0:c8:12:18:e0:2c:5b:bb:b2:32:2d:cf:dc:93:72:6c:5e:ff:
         4b:43:fd:79:c9:da:c7:12:b1:06:9b:7f:49:6d:f6:46:fa:8a:
         eb:22:c6:e5:90:9f:e1:79:97:d0:91:76:ae:38:b5:ac:3c:87:
         7d:6b:5c:0d:e7:59:7f:df:25:45:5d:b5:ef:42:11:a8:2d:3c:
         b1:e7:c4:bd:72:82:34:f4:9e:29:4e:38:31:a6:e7:5d:30:02:
         31:b5:81:65:d7:0e:36:54:93:f3:99:99:65:05:0e:fb:14:7c:
         12:c9:58:69:68:bc:c3:62:e8:e0:24:29:2c:07:a7:b7:71:b5:
         c2:3a:87:99:55:72:8d:78:cb:4d:3c:b3:6a:82:a7:f9:25:61:
         82:9c:83:a4:37:20:66:f8:1b:be:47:7f:21:f9:61:19:f9:5d:
         a9:dc:06:42:b2:0b:ae:ca:0a:70:bb:11:c6:8b:a5:51:38:85:
         98:2d:b7:40:65:40:98:66:30:d6:95:a4:9f:5d:f2:09:1a:20:
         8a:48:4f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:57:24 2026 by rpki-client