Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f2d6692d-830c-35e7-8cae-82c2fc4bb687.roa
File:                     f2d6692d-830c-35e7-8cae-82c2fc4bb687.roa (raw, json)
Hash identifier:          qL9DLuXyQnsP//ds+Dk3rceM/weBAYr+V8GptXS6eHw=
Subject key identifier:   17:D7:AE:BE:77:D9:F2:7F:41:F9:1E:63:18:A6:1C:F0:2B:EE:35:8A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79D5FFF90340860D1E1A700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f2d6692d-830c-35e7-8cae-82c2fc4bb687.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     40306
IP address blocks:        70.41.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:5f:ff:90:34:08:60:d1:e1:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4b44196f-43f0-449d-8ef1-ae9cae5c7f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:dd:73:8b:f9:87:12:13:a3:75:65:86:e7:c9:
                    3a:25:fe:54:44:be:2e:97:e9:d3:cf:e9:bb:c6:c6:
                    b0:e4:f0:89:1d:88:93:76:10:be:a8:c0:36:ee:e8:
                    28:15:7a:0e:f5:a2:0b:e2:35:76:99:e1:9e:93:0c:
                    49:5b:fb:71:51:66:5c:87:04:ca:8a:60:fa:06:1b:
                    d8:14:16:fb:f2:4d:06:eb:5b:c6:4d:6b:ff:99:4b:
                    22:e4:ca:45:c5:17:56:0d:21:7a:87:38:ab:f2:f2:
                    9e:c4:be:88:60:76:8a:39:0f:f7:ad:57:c9:18:8e:
                    e7:b7:80:ec:db:4c:60:5f:ab:3f:b3:0d:5e:8b:80:
                    08:71:30:5a:35:a3:eb:e9:c5:2e:c9:94:bb:43:59:
                    42:da:bd:6f:36:b5:fb:ec:34:66:e5:08:90:dc:25:
                    7a:b1:01:1b:48:8c:cc:15:5d:d3:f6:b6:0c:7f:0b:
                    cb:c4:a9:6a:5a:ae:0d:b4:fd:da:22:35:10:14:60:
                    75:94:01:5e:6a:9d:da:1e:81:e7:23:0c:9a:bd:57:
                    e3:1d:d1:27:a6:18:d2:f9:20:60:46:43:31:11:d1:
                    6e:d6:4f:db:74:d9:41:63:a8:2a:38:b2:6b:f2:25:
                    91:e3:f0:f9:78:de:c2:64:da:0e:f2:bf:f1:bc:77:
                    18:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D7:AE:BE:77:D9:F2:7F:41:F9:1E:63:18:A6:1C:F0:2B:EE:35:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f2d6692d-830c-35e7-8cae-82c2fc4bb687.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:5c:4f:12:69:f9:96:67:53:fe:c7:fe:54:12:87:23:d2:03:
         48:8a:7f:c6:7e:1d:a0:cf:cd:7f:f5:ab:8a:15:8f:4c:fa:ee:
         e9:85:cc:c6:e3:54:c7:c3:fd:da:43:7c:a4:0a:c4:ed:bf:db:
         1d:f6:a9:a8:9d:16:1a:73:02:6f:ff:29:15:15:32:5b:8d:57:
         2c:8a:17:4c:9a:e4:6c:80:be:90:ba:bf:80:78:36:22:74:79:
         68:ff:57:9a:da:a9:da:e5:15:8a:e7:34:ce:57:d4:15:97:82:
         f7:dd:08:9c:9f:9a:f1:d8:f8:a7:2b:f5:22:96:cb:1f:bd:48:
         a2:38:7a:ab:3c:93:92:ac:9c:f9:5f:18:26:c9:5b:2b:f1:95:
         ec:1e:c5:2c:6e:39:07:2f:af:a1:f2:dc:ae:57:5f:a3:7d:f8:
         1f:e3:d5:35:58:46:61:b1:86:14:b4:a7:d6:a0:c4:6d:1f:59:
         63:3c:5d:82:0e:ef:8d:fe:8d:02:5b:41:90:9d:29:85:ca:01:
         cd:7e:f8:21:e8:14:a3:fa:52:d8:56:a0:62:89:b9:4e:ed:5c:
         6a:44:2d:5d:89:6a:ea:91:da:d4:f9:27:fd:7c:c2:2c:fc:af:
         9e:c3:6e:09:74:2c:e5:7d:e1:ab:32:dc:e7:24:0e:61:7b:2a:
         9d:9e:2d:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnV//kDQIYNHhpwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NGI0NDE5NmYtNDNmMC00NDlkLThlZjEtYWU5Y2FlNWM3Zjc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1N1zi/mHEhOjdWWG58k6Jf5URL4ul+nTz+m7
xsaw5PCJHYiTdhC+qMA27ugoFXoO9aIL4jV2meGekwxJW/txUWZchwTKimD6BhvY
FBb78k0G61vGTWv/mUsi5MpFxRdWDSF6hzir8vKexL6IYHaKOQ/3rVfJGI7nt4Ds
20xgX6s/sw1ei4AIcTBaNaPr6cUuyZS7Q1lC2r1vNrX77DRm5QiQ3CV6sQEbSIzM
FV3T9rYMfwvLxKlqWq4NtP3aIjUQFGB1lAFeap3aHoHnIwyavVfjHdEnphjS+SBg
RkMxEdFu1k/bdNlBY6gqOLJr8iWR4/D5eN7CZNoO8r/xvHcYzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBfXrr532fJ/QfkeYximHPAr7jWKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjJkNjY5MmQtODMwYy0z
NWU3LThjYWUtODJjMmZjNGJiNjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARik6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMFcTxJp+ZZnU/7H/lQShyPSA0iKf8Z+HaDPzX/1q4oVj0z67umFzMbj
VMfD/dpDfKQKxO2/2x32qaidFhpzAm//KRUVMluNVyyKF0ya5GyAvpC6v4B4NiJ0
eWj/V5raqdrlFYrnNM5X1BWXgvfdCJyfmvHY+Kcr9SKWyx+9SKI4eqs8k5KsnPlf
GCbJWyvxlewexSxuOQcvr6Hy3K5XX6N9+B/j1TVYRmGxhhS0p9agxG0fWWM8XYIO
743+jQJbQZCdKYXKAc1++CHoFKP6UthWoGKJuU7tXGpELV2JauqR2tT5J/18wiz8
r57Dbgl0LOV94asy3OckDmF7Kp2eLbI=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:15:12 2026 by rpki-client