Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e98ca503-51af-350a-804e-a8fbf09be96e.roa
File:                     e98ca503-51af-350a-804e-a8fbf09be96e.roa (raw, json)
Hash identifier:          i6RfVZbiL8moXUV3hCzAd4z8L8SHR0rr6DC5ADjdXcU=
Subject key identifier:   D3:43:B8:17:13:E2:D0:97:99:7C:16:65:F0:92:3E:E7:75:36:27:48
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E7FFA4FF305C3A0E50CBC42A0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e98ca503-51af-350a-804e-a8fbf09be96e.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        71.30.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:4f:f3:05:c3:a0:e5:0c:bc:42:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=8988711c-9246-4828-9506-5696901b9c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8a:ef:c1:0f:8f:d4:63:85:1f:63:63:e4:23:
                    ba:18:f6:87:11:3f:36:05:b5:c5:18:14:da:ba:d2:
                    c8:b9:93:57:26:38:0c:d1:54:8a:a0:07:c3:7a:64:
                    9e:c3:60:49:98:d9:d3:26:c6:6e:80:a0:b9:2c:56:
                    a0:50:5d:f2:a0:8e:4f:db:f0:55:5c:00:2a:ab:f1:
                    8f:e5:20:f9:e9:f5:dc:e7:e7:8e:2a:3a:00:c6:3a:
                    91:f2:53:99:fc:a7:f0:74:8c:53:39:96:c9:79:94:
                    a5:9b:47:a5:27:1d:28:70:d3:1b:aa:34:5c:46:66:
                    cf:ce:83:b6:a4:93:60:4b:b3:78:6e:ec:fc:58:b8:
                    2f:04:c4:6c:06:0d:a0:61:a3:e7:cd:b4:60:21:a9:
                    1f:43:91:6b:ab:0d:9c:07:cf:ae:dc:d5:1d:6d:10:
                    03:41:49:6f:41:0d:6e:a2:a9:f9:20:26:05:7a:5b:
                    30:ce:74:c4:c1:cb:9b:9a:05:20:49:8e:d1:f3:40:
                    55:83:52:ce:33:fc:49:f2:ce:ee:b3:ab:57:52:e6:
                    ef:c2:06:4e:f2:39:c5:b6:65:9d:d0:1f:79:ae:ea:
                    b8:fc:2a:02:9a:95:92:7d:ef:24:14:ca:0c:c3:6c:
                    62:46:27:f4:f4:87:c8:91:39:81:e1:45:40:32:18:
                    96:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:43:B8:17:13:E2:D0:97:99:7C:16:65:F0:92:3E:E7:75:36:27:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e98ca503-51af-350a-804e-a8fbf09be96e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.30.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:e2:ee:68:f2:50:ff:8b:d3:56:c3:ae:e2:7b:fa:c8:af:15:
         3e:c8:d3:a3:cc:65:8f:ff:4a:ed:94:f1:01:a9:2f:94:f0:b2:
         d7:77:89:52:47:24:8c:07:95:ad:29:54:a7:d2:72:ee:17:45:
         a6:00:af:bc:b8:aa:56:69:2b:a2:fa:46:34:74:c7:73:7a:32:
         eb:d9:e7:f9:77:46:d8:2e:e9:10:23:2a:e5:30:89:2b:97:4b:
         88:d4:7e:fa:ac:a2:4b:bd:f3:86:90:42:af:21:87:55:73:d2:
         6e:63:cc:1a:30:31:4b:0f:96:9d:9c:23:2f:1d:c1:bc:2c:5c:
         7f:12:ae:4a:19:cf:0a:10:54:fe:21:e4:0d:55:28:52:d9:cf:
         c7:3a:43:35:a4:36:71:bd:94:24:53:3f:d2:6c:5e:28:e5:2a:
         2b:2a:c6:d5:36:6f:83:3d:7c:89:42:9c:f9:00:e1:2d:39:5d:
         0f:c3:74:96:4b:01:f5:ea:83:f7:e7:e1:d4:f8:d9:4f:a4:89:
         49:8b:82:b3:d8:1e:74:69:96:18:14:4d:8f:c1:cd:e2:db:b8:
         0f:91:d2:65:81:72:7b:1c:2b:e0:4e:6c:4c:86:32:c2:a4:10:
         0f:8b:c1:bb:3d:45:bf:ee:96:15:cd:4d:f6:e3:f5:e0:a4:25:
         0d:a5:14:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:52:11 2026 by rpki-client