Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a9ac8f4-97e9-3f75-a57f-0d08d5538632.roa
File:                     7a9ac8f4-97e9-3f75-a57f-0d08d5538632.roa (raw, json)
Hash identifier:          BjlJp3x4J39nPYxn0+DjtHzTY5GlbElAB1B7EJw9OZE=
Subject key identifier:   3F:E5:F9:D4:35:9B:7A:1E:5B:F2:E3:37:4C:BE:51:17:65:44:F1:8C
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584B6D2C9E20C693DF9013A9F0C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a9ac8f4-97e9-3f75-a57f-0d08d5538632.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     7029
IP address blocks:        71.30.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:9e:20:c6:93:df:90:13:a9:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=4bb210cf-960a-4b95-b54a-27eba987cade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ce:75:da:68:7c:f9:f5:81:ae:b6:54:bb:62:
                    61:e3:52:39:ba:30:2e:f3:72:a2:0b:ae:c7:f5:88:
                    21:91:a0:0f:1d:7e:0c:73:49:c3:c8:13:a4:77:a7:
                    d6:e5:4b:33:e0:ec:ba:36:42:62:09:c9:ec:31:58:
                    78:9c:77:5b:ec:ef:a9:dc:55:35:7c:22:68:6b:2f:
                    04:a4:6c:ae:25:77:35:3d:1e:20:3a:1b:3f:2b:b3:
                    a3:4e:0e:09:3b:78:25:81:90:84:b3:a5:74:27:be:
                    b4:fb:84:5e:45:98:31:03:e3:f4:9e:4c:3c:39:5e:
                    9c:71:0d:2a:da:f0:3a:eb:62:e2:cb:39:85:fb:92:
                    11:df:65:9e:cf:54:59:b5:81:ac:a5:80:6f:dc:23:
                    35:de:b1:38:29:85:07:ac:f1:ae:1b:86:e2:7f:02:
                    bc:98:d2:9d:b2:93:6d:68:61:8e:cb:18:2a:54:b7:
                    04:ca:6c:26:27:38:19:69:ac:be:93:60:6c:55:e8:
                    c0:f9:3d:ec:91:b5:e8:0d:95:4b:2c:fb:90:aa:d1:
                    10:d8:53:20:ce:e1:08:26:1d:c0:ab:ef:74:58:88:
                    14:44:aa:b8:c2:00:3d:a6:6a:41:5c:d5:3d:3d:d5:
                    c2:31:41:bd:ac:66:44:cb:fe:12:65:17:e3:70:51:
                    c8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E5:F9:D4:35:9B:7A:1E:5B:F2:E3:37:4C:BE:51:17:65:44:F1:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a9ac8f4-97e9-3f75-a57f-0d08d5538632.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.30.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:3a:37:4a:ed:b4:b1:cb:eb:d3:61:2a:8f:78:70:40:c1:df:
         1d:5a:16:ed:f2:33:4b:d3:ca:2b:82:21:30:fc:ae:32:6a:13:
         23:d8:12:15:15:ae:b8:b1:48:df:f7:91:02:52:db:52:3a:f4:
         0d:9b:d3:05:54:ad:0c:80:28:ab:8b:ea:6c:27:61:c9:25:ae:
         f1:f7:c1:bb:9c:a8:a6:7c:7c:cc:c1:d3:0a:0b:7e:c6:57:2d:
         11:2b:5c:c0:40:50:77:3d:97:d4:30:aa:6c:ff:cf:65:62:a2:
         fc:6f:21:c9:7b:d5:45:64:9c:5f:80:fb:82:ff:1b:41:6e:fe:
         09:93:08:8e:b4:5e:b5:a5:dc:cd:9b:f8:7a:cb:8a:b8:f6:7c:
         0c:a7:72:dd:56:42:4f:1c:bb:f9:28:4f:e1:1c:36:ea:32:69:
         77:be:30:f6:12:89:6d:1a:91:21:d0:04:14:a1:7b:74:bd:7d:
         6b:de:1e:2f:34:fe:3b:6b:e7:a6:3a:9d:8d:0a:cd:e6:76:57:
         92:e9:97:e3:55:e9:fd:eb:3b:fc:35:a8:2e:78:75:d4:00:3f:
         f2:eb:95:b0:61:2c:87:04:89:e6:b6:2d:26:a2:7a:6b:3c:1e:
         5d:4b:0d:d5:dc:fd:20:97:c9:22:3f:d8:7d:e8:fc:ea:38:9e:
         eb:0b:2f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:21:57 2025 by rpki-client