Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/71a70251-1310-373d-a2b3-3aecbe490726.roa
File:                     71a70251-1310-373d-a2b3-3aecbe490726.roa (raw, json)
Hash identifier:          wHRpqyyIZsmotUGY6avrxsXfD3xa6+nvPxa+hd0ntQQ=
Subject key identifier:   CC:17:16:59:79:67:EA:A2:DB:53:AB:19:50:67:9F:7E:DD:B9:6A:8F
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584DC135E0F4A2F013AF68653EC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/71a70251-1310-373d-a2b3-3aecbe490726.roa
Signing time:             Thu 07 May 2026 13:00:31 +0000
ROA not before:           Thu 07 May 2026 13:00:31 +0000
ROA not after:            Wed 05 Aug 2026 13:00:31 +0000
asID:                     7029
IP address blocks:        71.29.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:35:e0:f4:a2:f0:13:af:68:65:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: May  7 13:00:31 2026 GMT
            Not After : Aug  5 13:00:31 2026 GMT
        Subject: CN=dc471b74-03ae-43a3-a22a-e0573d17f5e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4e:bd:c5:b1:6f:4e:b3:87:82:ad:40:61:7e:
                    02:6a:04:42:ee:67:a9:3f:05:cf:dc:a0:81:fb:c5:
                    3e:0c:19:a0:bb:3a:9f:9f:7b:58:13:9b:2d:99:d0:
                    f3:04:e4:0c:54:30:1f:85:44:f8:66:79:78:a6:c8:
                    d5:72:b7:fe:bd:73:ab:37:f4:c5:20:a4:26:10:7b:
                    f5:61:99:a5:57:e7:a8:b0:6d:d7:38:5f:ce:2f:bd:
                    a4:93:e2:57:8a:5b:c4:50:df:26:6a:4b:39:50:f0:
                    e2:24:84:a9:dc:37:63:ec:4c:43:fe:31:c0:0d:af:
                    cd:5a:2d:e6:21:11:e0:1c:d6:73:f2:d5:ed:41:fa:
                    32:cb:b4:0f:a1:1f:d4:a0:39:1b:15:e7:c8:84:c1:
                    06:87:45:6e:d1:b3:56:00:83:de:28:b8:85:b6:47:
                    ea:bf:f6:16:40:a1:59:2d:cb:71:2d:9a:0a:2e:71:
                    fc:1b:ef:6f:3f:d2:49:c3:63:9a:b9:b1:94:e7:a7:
                    64:d5:1c:be:64:a5:97:ee:80:d8:e5:51:46:b4:a2:
                    c2:8f:f0:d2:ae:f2:dd:20:2e:a4:0d:5e:d6:88:5a:
                    83:2c:f2:9a:36:7d:97:67:57:7c:60:be:9a:96:62:
                    17:04:21:75:e5:ec:55:fc:63:3d:a7:0c:63:6e:08:
                    b4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:17:16:59:79:67:EA:A2:DB:53:AB:19:50:67:9F:7E:DD:B9:6A:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/71a70251-1310-373d-a2b3-3aecbe490726.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.29.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:69:bd:2c:75:d6:dc:51:17:fd:8b:36:b5:43:22:1e:c0:61:
         7a:8f:b3:86:89:87:a6:37:db:76:55:e0:40:cf:37:3a:b5:38:
         42:f6:54:61:07:3e:ed:cd:d0:70:ec:17:a3:d3:37:40:1b:2c:
         63:a3:ae:10:0e:34:65:46:46:95:50:9a:4a:8f:80:5b:20:8d:
         a6:eb:51:be:c6:68:73:59:86:b5:68:6f:f3:c9:c4:97:97:d0:
         67:40:d4:c3:d9:ff:85:86:83:81:ad:ea:ad:bb:0f:a5:dc:44:
         e9:83:71:63:37:59:25:09:20:12:8e:b5:56:c8:f2:ef:54:35:
         15:fd:11:ab:61:41:0c:73:32:4e:d2:c1:c9:dc:d0:5d:58:1b:
         f7:87:a6:28:e0:a7:05:b9:cf:ac:9d:20:ea:5d:91:df:33:ed:
         42:1f:e4:01:2e:fb:e3:9c:08:24:80:84:db:e1:ff:97:ea:9c:
         3b:13:85:00:73:08:ee:50:17:ce:c3:73:0e:9c:ee:fe:2a:97:
         2c:ec:52:fe:dc:a3:a4:39:6e:37:84:0f:1d:54:05:7f:e8:cb:
         12:d6:50:9d:81:0c:6f:cf:87:25:45:a2:6d:14:56:28:ff:f6:
         4d:1a:6d:56:05:99:68:a0:99:e1:7c:87:c7:b5:c5:c2:7d:4c:
         bc:ed:5e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:43:52 2026 by rpki-client