Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb373ad7-d7d1-390a-a62e-87f009262355.roa
File:                     fb373ad7-d7d1-390a-a62e-87f009262355.roa (raw, json)
Hash identifier:          aeipnotJBhY8RJeyJPlLbST9oe8y9LbvUfFdm0D1VBg=
Subject key identifier:   21:D9:89:71:BD:23:4C:55:A3:45:34:90:A2:7C:E4:D6:9E:CB:5A:93
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8C70D02D0162D695DD11ABA0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb373ad7-d7d1-390a-a62e-87f009262355.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     40306
IP address blocks:        70.41.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:d0:2d:01:62:d6:95:dd:11:ab:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=4b0cce58-23b8-44fe-92c5-d1cf53338ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9d:0a:2d:2d:6e:52:3a:25:b9:8e:24:94:f8:
                    c1:27:ea:41:9d:e8:31:95:ca:c7:23:ff:c9:e6:99:
                    ee:56:ce:8d:0f:90:98:d3:c1:9b:cb:81:f0:4e:c5:
                    45:af:cc:f5:ab:2c:c2:32:43:8d:3c:41:95:1b:cf:
                    03:30:a7:04:9f:f4:3f:ef:8d:d2:9a:27:29:58:39:
                    24:3c:2f:d0:22:81:67:57:55:f2:63:25:d3:6a:1c:
                    04:c4:57:42:68:ee:5e:86:dd:69:8b:0c:17:ee:c2:
                    bb:6c:2d:65:8d:d8:b3:e6:17:cc:9e:91:59:0d:c7:
                    d0:2a:fb:31:47:49:d0:5b:90:b0:27:3a:47:3a:8c:
                    fd:d7:35:db:be:e6:01:c4:38:a4:b3:cf:01:e6:32:
                    09:5c:3b:a1:2e:4d:3f:84:e0:80:d7:67:ee:3f:80:
                    c3:cc:a0:49:f6:76:2b:09:7a:f1:12:7d:71:fe:50:
                    3a:65:44:2b:6c:ae:f5:bc:20:c8:08:8a:54:57:47:
                    83:55:49:f7:ea:3c:b4:a2:2c:b3:5c:90:1b:a8:8d:
                    b6:69:9e:84:85:85:10:f9:12:f8:03:35:92:d7:69:
                    e1:37:34:31:eb:af:43:59:f4:ec:cc:72:bd:82:64:
                    6f:b0:3f:1e:25:86:07:b3:82:ac:77:26:06:cb:92:
                    fc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D9:89:71:BD:23:4C:55:A3:45:34:90:A2:7C:E4:D6:9E:CB:5A:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb373ad7-d7d1-390a-a62e-87f009262355.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:d2:80:63:ae:e4:00:ef:e4:d4:03:38:0c:9b:3f:58:9d:87:
         89:ae:d3:16:f6:13:1d:42:ba:79:7f:db:fb:a8:04:22:3a:e0:
         7c:93:15:b6:af:39:3b:e6:76:02:d7:4e:b3:5a:37:a0:97:e6:
         cb:10:a2:03:5a:4e:aa:12:11:e6:cb:f7:a2:a0:20:5c:80:95:
         b4:41:29:e4:a8:dd:52:a0:b0:a0:cd:cf:de:f1:dd:89:7f:05:
         1b:b4:01:6d:95:a3:08:72:ce:5f:0d:86:60:fa:1c:18:ab:b3:
         46:db:db:73:95:06:62:54:68:2b:9a:83:69:1d:b9:50:d9:27:
         d8:c2:d7:24:aa:b3:cb:f2:53:60:3d:fb:44:19:3b:fd:80:5d:
         8a:41:fd:b9:84:de:15:50:67:6a:1c:86:ef:7d:ea:6b:9e:3d:
         af:e4:1a:69:8c:78:fa:3a:89:92:7a:68:e6:9f:3e:d8:53:03:
         62:83:ab:8d:be:a7:15:2f:d9:23:fe:5c:21:8b:35:21:d7:e1:
         a4:59:2d:82:c9:84:30:49:a3:ee:20:97:a2:5f:cf:22:07:16:
         e8:12:a8:3c:9b:3d:c9:c0:93:8d:4f:ef:9f:42:4b:50:83:17:
         82:69:2e:ae:57:ac:48:85:69:5c:5a:65:b2:d3:71:31:d4:87:
         36:d1:bd:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcNAtAWLWld0Rq6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk
NGIwY2NlNTgtMjNiOC00NGZlLTkyYzUtZDFjZjUzMzM4ZWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhp0KLS1uUjoluY4klPjBJ+pBnegxlcrHI//J
5pnuVs6ND5CY08Gby4HwTsVFr8z1qyzCMkONPEGVG88DMKcEn/Q/743SmicpWDkk
PC/QIoFnV1XyYyXTahwExFdCaO5eht1piwwX7sK7bC1ljdiz5hfMnpFZDcfQKvsx
R0nQW5CwJzpHOoz91zXbvuYBxDiks88B5jIJXDuhLk0/hOCA12fuP4DDzKBJ9nYr
CXrxEn1x/lA6ZUQrbK71vCDICIpUV0eDVUn36jy0oiyzXJAbqI22aZ6EhYUQ+RL4
AzWS12nhNzQx669DWfTszHK9gmRvsD8eJYYHs4KsdyYGy5L88wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCHZiXG9I0xVo0U0kKJ85Naey1qTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmIzNzNhZDctZDdkMS0z
OTBhLWE2MmUtODdmMDA5MjYyMzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAnSgGOu5ADv5NQDOAybP1idh4mu0xb2Ex1Cunl/2/uoBCI64HyTFbav
OTvmdgLXTrNaN6CX5ssQogNaTqoSEebL96KgIFyAlbRBKeSo3VKgsKDNz97x3Yl/
BRu0AW2Vowhyzl8NhmD6HBirs0bb23OVBmJUaCuag2kduVDZJ9jC1ySqs8vyU2A9
+0QZO/2AXYpB/bmE3hVQZ2ochu996muePa/kGmmMePo6iZJ6aOafPthTA2KDq42+
pxUv2SP+XCGLNSHX4aRZLYLJhDBJo+4gl6JfzyIHFugSqDybPcnAk41P759CS1CD
F4JpLq5XrEiFaVxaZbLTcTHUhzbRvd0=
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:17:12 2025 by rpki-client