Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d4cf01e-d2a3-3beb-8ea3-41c365188a9f.roa
File:                     3d4cf01e-d2a3-3beb-8ea3-41c365188a9f.roa (raw, json)
Hash identifier:          WQW0MQkIh2fLvOZ0tGkJJmx9YXxowxKg22xY81nc2eA=
Subject key identifier:   99:E5:3C:A3:9D:38:37:BF:90:2D:14:F5:42:43:11:C1:C1:61:DF:00
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D9FB570D229AF363E407A6A00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d4cf01e-d2a3-3beb-8ea3-41c365188a9f.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     7029
IP address blocks:        71.30.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:70:d2:29:af:36:3e:40:7a:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=f4af56d7-30b0-4e18-a72a-cbd1b885150c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:49:21:37:71:00:07:71:00:b1:ff:a8:5b:85:
                    a7:77:da:82:84:6f:08:48:a2:8e:bd:0f:3f:be:0e:
                    73:7c:49:4a:d4:b8:98:63:ac:5b:be:cd:fc:31:b7:
                    50:64:f3:d5:40:80:d5:db:f8:b8:37:61:6a:8f:f9:
                    e2:3d:af:51:68:15:ba:d9:d4:31:be:f4:cb:74:1f:
                    aa:ab:fb:d8:53:fe:66:56:dd:1c:0e:f1:4a:c8:6a:
                    07:38:b3:88:f7:7d:c4:27:5d:dc:c6:c7:67:3a:7c:
                    df:6e:47:d1:6c:c6:60:c0:4f:a1:15:1e:e7:96:72:
                    8d:6c:e3:36:eb:4f:e5:8c:ff:0c:30:6c:07:0f:dd:
                    4b:39:ed:44:50:0d:6e:aa:cd:b7:14:ed:a9:36:8c:
                    41:d8:9d:d3:76:3a:03:2d:df:f1:44:14:6f:a9:91:
                    c0:18:6d:59:d0:36:d4:a5:fc:5d:a9:39:21:29:0e:
                    d1:0e:3d:92:f7:77:9e:3d:32:41:74:d3:d4:08:8c:
                    91:9d:d7:db:61:ec:e9:a8:dc:10:c4:db:a9:0b:fb:
                    40:83:d8:4d:aa:da:86:73:d8:4f:6c:ff:2f:21:25:
                    34:e7:80:cc:61:d0:ff:7e:2d:9b:fe:c4:f3:58:a7:
                    5f:e5:d1:36:df:8c:ba:3a:97:26:1e:73:2a:78:ac:
                    ee:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E5:3C:A3:9D:38:37:BF:90:2D:14:F5:42:43:11:C1:C1:61:DF:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d4cf01e-d2a3-3beb-8ea3-41c365188a9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.30.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:5e:a3:b4:6d:35:82:22:59:a9:52:8b:6b:5d:f4:62:47:e4:
         d8:86:57:02:b1:96:b4:ee:86:f2:7e:15:c0:e2:46:a8:c4:d4:
         fa:cb:37:04:75:e9:9c:6b:1a:b9:67:bb:9f:4e:01:61:53:6e:
         97:40:f4:2a:b5:fd:4f:f9:3a:bc:d5:a5:3a:f1:85:63:58:d8:
         73:b0:12:ea:47:9f:90:fe:c2:5e:34:7c:fd:b8:44:bc:18:9c:
         7b:1d:42:a4:bb:d7:99:0b:d3:59:2f:da:7e:a2:5a:c0:a5:bf:
         95:f1:a9:a7:52:e3:33:a9:3a:9d:8e:9b:ac:93:05:6d:68:b8:
         71:b5:d6:ac:93:81:a8:b7:04:d4:35:1e:58:cc:71:35:e4:53:
         79:e8:47:c0:4d:8a:83:61:aa:e0:72:6f:53:b0:ce:57:e0:0f:
         22:b8:23:ad:42:27:8f:82:28:88:93:98:50:f9:89:21:25:27:
         ab:72:fb:63:54:3d:ed:f2:23:8c:56:05:5e:8a:39:b5:21:44:
         ac:bd:6d:41:47:d0:34:09:0a:9a:53:2f:13:63:e3:11:d2:46:
         9b:f8:da:2f:c9:82:59:42:9b:67:90:d6:b6:2c:8e:af:cc:69:
         14:05:02:cf:17:02:92:8a:90:94:0d:54:8b:30:04:59:9d:d4:
         03:71:3f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:06:51 2026 by rpki-client