Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/736dd3da-b7fc-332b-a64b-9670e8707f23.roa
File:                     736dd3da-b7fc-332b-a64b-9670e8707f23.roa (raw, json)
Hash identifier:          XWNxEwQLRt7U2+OZbm0NWbBK+zH179DMmXlpTqVqKVw=
Subject key identifier:   1E:A0:1F:BF:FF:DF:58:6D:7C:C1:FF:C0:AB:40:DC:15:E7:61:A8:47
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584B7F523FC08A32F6FCD8554380
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/736dd3da-b7fc-332b-a64b-9670e8707f23.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     7029
IP address blocks:        71.29.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:3f:c0:8a:32:f6:fc:d8:55:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=e1edbeb6-f892-4490-9586-be062d53ccae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fe:54:45:75:6d:7c:b3:9b:e2:cc:ce:7d:96:
                    0d:3f:f7:b7:b3:53:a7:d6:46:f2:2b:f3:a2:15:b3:
                    c0:05:0a:f4:e7:c6:7d:0f:cb:22:6a:42:86:13:d7:
                    66:3a:67:02:05:98:c3:90:fd:21:aa:95:0b:18:79:
                    d4:bb:68:c6:2a:fb:b1:96:c9:e6:9f:af:45:4e:0d:
                    24:12:c2:d9:70:8f:92:e1:1f:62:bd:2d:7b:93:eb:
                    c1:6a:5a:71:da:2a:84:87:52:bb:70:56:23:4e:ef:
                    8f:30:8a:38:90:6f:96:d2:05:96:7f:1c:a3:f3:80:
                    c6:17:bc:75:f7:35:71:23:1d:75:2d:fe:0b:29:77:
                    e2:d1:f1:fc:98:91:7b:b8:a1:69:f1:96:69:d3:3d:
                    24:e5:6a:c0:b4:d2:4b:b0:64:41:6b:5e:52:24:ab:
                    38:73:de:b0:7b:7a:8d:7d:93:b6:b0:cf:62:ed:31:
                    31:a8:1c:8f:9a:f1:3e:76:71:03:18:3f:b7:f0:f5:
                    cf:32:37:82:29:35:3d:db:5c:e3:10:b9:9e:ab:b8:
                    85:bc:d7:ad:86:15:3f:4c:65:a3:b5:fe:7e:a4:9a:
                    da:d1:8f:34:20:95:ff:50:66:68:16:6f:de:17:e5:
                    b9:a3:f7:14:df:a7:b6:9b:e8:2c:75:76:58:b8:dc:
                    a5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A0:1F:BF:FF:DF:58:6D:7C:C1:FF:C0:AB:40:DC:15:E7:61:A8:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/736dd3da-b7fc-332b-a64b-9670e8707f23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.29.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:46:f3:d8:9a:be:48:14:92:f0:9f:30:c6:f1:09:7c:84:4c:
         33:38:30:b5:c7:49:3a:fe:0c:c7:5e:67:a3:df:66:02:8d:83:
         d2:dc:1d:14:b1:cd:65:c7:21:e9:5e:36:02:e7:e7:72:e4:b3:
         81:cd:b7:1e:61:6a:5c:cc:b2:66:9e:10:05:2b:5a:4b:94:f5:
         b1:74:67:ca:13:ef:26:49:f2:96:85:40:5e:cc:ab:75:d8:3a:
         41:b3:a7:64:96:de:b9:7f:d6:64:aa:c0:26:d3:3a:82:95:fb:
         f8:78:2b:ea:e7:4e:e6:57:30:d5:6f:3b:a0:37:a2:8b:fd:47:
         bc:ae:50:b9:53:f4:25:94:d2:3f:21:82:89:dc:5d:e3:41:d6:
         28:cf:d9:03:96:ee:49:b0:c2:62:c2:77:97:62:c6:80:22:74:
         09:8f:e3:d7:7a:6b:d0:1b:35:8c:b6:a6:fa:65:81:d8:69:b3:
         ce:30:74:4d:a4:70:3a:ec:55:2a:a0:d0:c3:10:a5:07:51:60:
         5e:84:18:67:cc:4b:a3:13:cb:c6:27:2e:fd:46:76:d9:cc:0e:
         46:3b:ba:ff:ce:97:e3:91:d3:2c:5c:fc:91:df:bc:09:03:5d:
         76:e7:43:26:1a:ae:86:67:a8:c1:cb:52:7d:2d:9e:fe:01:1b:
         28:d7:0f:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Uj/AijL2/NhVQ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk
ZTFlZGJlYjYtZjg5Mi00NDkwLTk1ODYtYmUwNjJkNTNjY2FlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP5URXVtfLOb4szOfZYNP/e3s1On1kbyK/Oi
FbPABQr058Z9D8siakKGE9dmOmcCBZjDkP0hqpULGHnUu2jGKvuxlsnmn69FTg0k
EsLZcI+S4R9ivS17k+vBalpx2iqEh1K7cFYjTu+PMIo4kG+W0gWWfxyj84DGF7x1
9zVxIx11Lf4LKXfi0fH8mJF7uKFp8ZZp0z0k5WrAtNJLsGRBa15SJKs4c96we3qN
fZO2sM9i7TExqByPmvE+dnEDGD+38PXPMjeCKTU921zjELmeq7iFvNethhU/TGWj
tf5+pJra0Y80IJX/UGZoFm/eF+W5o/cU36e2m+gsdXZYuNyldwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB6gH7//31htfMH/wKtA3BXnYahHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzM2ZGQzZGEtYjdmYy0z
MzJiLWE2NGItOTY3MGU4NzA3ZjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx34MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAItG89iavkgUkvCfMMbxCXyETDM4MLXHSTr+DMdeZ6PfZgKNg9LcHRSx
zWXHIeleNgLn53Lks4HNtx5halzMsmaeEAUrWkuU9bF0Z8oT7yZJ8paFQF7Mq3XY
OkGzp2SW3rl/1mSqwCbTOoKV+/h4K+rnTuZXMNVvO6A3oov9R7yuULlT9CWU0j8h
goncXeNB1ijP2QOW7kmwwmLCd5dixoAidAmP49d6a9AbNYy2pvplgdhps84wdE2k
cDrsVSqg0MMQpQdRYF6EGGfMS6MTy8YnLv1GdtnMDkY7uv/Ol+OR0yxc/JHfvAkD
XXbnQyYaroZnqMHLUn0tnv4BGyjXD9U=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:45:45 2025 by rpki-client