Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f247c08-da54-303e-bd38-05ed013d791a.roa
File:                     4f247c08-da54-303e-bd38-05ed013d791a.roa (raw, json)
Hash identifier:          mPzMgA2tapmW/EfVS+EFbS87q/NwoQ7S8uEcfRnw2Ac=
Subject key identifier:   D4:6F:A5:33:34:B6:A0:0B:7A:0C:1D:A3:A6:72:51:E4:A2:85:70:F2
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E7E94E1C19A87AEF065472000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f247c08-da54-303e-bd38-05ed013d791a.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     7029
IP address blocks:        71.30.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:e1:c1:9a:87:ae:f0:65:47:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=b0e864c7-6776-4db0-9168-e00e04783f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fd:cb:d3:13:f7:88:ac:19:74:2e:dc:be:cb:
                    7c:d3:7c:2b:39:2d:01:c9:78:b3:c7:35:db:10:87:
                    76:11:e3:60:8e:ad:03:f7:96:6c:6c:7b:ef:f3:53:
                    a9:a8:7d:c4:80:fd:b7:bc:69:72:a3:41:07:cc:46:
                    4f:3f:5e:b5:0f:53:7b:c8:fa:29:80:de:10:63:fd:
                    32:df:d1:e0:2f:1d:02:48:d1:e7:94:68:8c:47:fa:
                    1d:f1:c0:55:17:dd:ef:5d:40:3b:af:8b:e3:46:08:
                    d4:3e:a2:5b:af:43:fc:ae:12:91:b0:c8:bb:63:2d:
                    f6:1b:20:dc:94:52:d9:1f:fb:66:3d:d7:91:bf:92:
                    ac:2b:b6:52:43:d1:3b:d9:d7:c4:19:28:17:85:5f:
                    9d:28:f1:cc:c3:3a:d3:1e:3a:b3:80:0e:83:0f:37:
                    38:69:a5:08:0f:ae:9b:b7:93:73:98:83:4f:e2:f2:
                    65:31:67:cf:75:b9:ff:39:b8:3a:75:c4:61:83:34:
                    77:b0:54:0a:91:39:0d:c3:07:ea:64:45:6b:a8:94:
                    9c:df:54:c4:7c:90:b7:09:cd:15:8d:93:cb:81:86:
                    f6:d0:90:50:67:cf:27:25:60:95:67:a4:64:21:8f:
                    71:b8:6d:82:b6:3e:00:b6:1e:f9:1a:7a:f7:61:10:
                    1a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6F:A5:33:34:B6:A0:0B:7A:0C:1D:A3:A6:72:51:E4:A2:85:70:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f247c08-da54-303e-bd38-05ed013d791a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.30.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:92:e8:f3:90:30:71:5a:10:13:18:a6:fe:83:fb:34:e4:70:
         9d:52:af:17:6a:df:e4:4d:60:19:ba:bb:fc:98:1c:54:4a:52:
         a4:01:d8:ab:a8:52:07:1e:14:d0:66:17:15:51:49:56:d9:c7:
         33:99:88:09:b5:4b:8d:5f:c2:38:ee:13:4a:7e:31:bb:40:cf:
         dd:c8:07:17:d6:a7:c9:04:0a:a4:45:60:f1:17:ee:c0:5f:14:
         49:31:df:8d:46:bb:14:26:3c:c3:09:a1:ec:c0:b3:80:ba:a5:
         1f:2b:c8:b6:a0:b8:7b:58:89:c0:48:9a:8d:d4:69:9c:ab:8e:
         5a:13:eb:a9:55:fe:24:16:bd:69:38:03:54:5d:fe:4c:73:7e:
         f6:b0:3f:f1:3a:63:23:66:8a:b4:84:b7:ef:cb:75:09:f3:f5:
         4a:21:d3:3b:91:b3:58:59:c6:55:67:4e:86:7a:a1:a1:76:03:
         a1:3c:45:6a:17:ae:e8:d1:21:2e:9c:c1:4f:f0:01:b8:2a:bd:
         b6:bc:0c:11:a6:c9:72:7a:08:55:fe:9b:49:10:e6:59:db:1c:
         82:03:89:ec:55:47:09:8d:9f:27:ae:9d:8b:77:95:03:29:b5:
         56:5f:34:ef:cd:cb:94:81:86:70:11:90:03:d6:58:fb:03:bb:
         f7:8b:23:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:18:06 2026 by rpki-client