Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/48f10b89-5898-35f6-a8b5-3db508c46210.roa
File:                     48f10b89-5898-35f6-a8b5-3db508c46210.roa (raw, json)
Hash identifier:          gdL/QFXxGWhGi8gDwdX+6iVvef7n1cbUCtt3AehSK2U=
Subject key identifier:   DD:E8:68:CB:20:CE:9E:FE:03:5F:54:74:56:B3:3F:A3:00:89:B7:5E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EB2B1E3B22ED879945DC2DC80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/48f10b89-5898-35f6-a8b5-3db508c46210.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     7029
IP address blocks:        71.7.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:e3:b2:2e:d8:79:94:5d:c2:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=53bfdb62-7cf0-4103-9f13-0a67d57a2511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f4:d6:7e:81:69:38:d4:7b:08:a6:48:96:56:
                    8f:6d:02:4f:ba:4c:d9:38:39:71:ca:ed:e6:7f:14:
                    e2:11:5f:c4:8c:6b:10:88:d1:8d:be:fd:2a:2c:bf:
                    6b:7d:80:e1:17:85:29:1a:d3:15:0f:c0:1e:0a:1a:
                    4f:13:a5:90:ca:49:71:01:40:a8:e1:ba:7d:77:d9:
                    6a:11:9c:62:a4:0b:d9:e1:61:e3:22:94:d1:3b:84:
                    8f:99:a5:ae:ac:93:fd:63:cd:96:ad:f7:cb:65:09:
                    03:de:3a:15:b0:c9:14:cd:21:af:46:a1:ea:2c:4c:
                    bf:b3:08:a7:f1:39:ed:6f:59:9e:ef:c2:1e:f6:57:
                    c2:79:28:58:69:21:dd:10:1c:0e:ba:27:9a:23:00:
                    15:b5:80:03:bd:38:83:07:e7:84:3c:ed:82:42:06:
                    5d:c2:a2:a5:0d:e6:c9:f0:a9:d0:d7:a2:8b:c8:84:
                    29:ad:de:0d:63:f3:5f:5d:a0:3b:9f:73:b9:75:0a:
                    9e:bb:d0:3b:4c:97:14:bb:43:59:c0:bc:0e:42:35:
                    26:25:7c:4d:68:80:33:1c:cc:81:c2:d6:fd:77:a4:
                    e1:cd:6a:c9:63:a4:16:05:6c:14:20:30:c2:b4:5a:
                    df:72:58:6e:5d:34:53:0a:a0:3f:b3:52:66:ae:5e:
                    2d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E8:68:CB:20:CE:9E:FE:03:5F:54:74:56:B3:3F:A3:00:89:B7:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/48f10b89-5898-35f6-a8b5-3db508c46210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.7.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:49:69:6d:66:7d:a1:e8:a5:c0:99:79:14:6a:f3:f9:fc:b3:
         71:c5:05:60:92:3c:b6:5d:74:45:74:56:5d:1d:99:cc:d6:1d:
         72:b0:e5:c5:5b:65:c3:62:03:35:de:d3:5f:b7:6c:cf:a9:fd:
         de:2b:21:68:7e:30:33:7d:1c:f9:da:3a:20:07:87:fa:db:9a:
         32:75:c5:5e:8d:ad:0d:72:42:e9:c3:98:d7:0a:51:69:13:67:
         e4:b3:b0:0c:e6:54:10:28:b4:2b:44:a0:3e:7b:87:53:a7:61:
         ed:54:53:d2:ba:57:ce:d1:09:be:9d:1c:f7:be:f3:75:05:e0:
         e3:c5:1c:0b:d4:fd:41:3c:e3:ad:cc:4f:c0:e7:1d:9e:31:1c:
         e1:aa:ff:87:85:bc:26:34:f8:9e:c1:fb:70:b1:0a:85:c6:19:
         82:c4:ba:ab:56:db:cb:77:97:3f:3c:2d:05:36:6b:01:ff:a5:
         0f:23:c5:25:da:57:bc:c0:49:ef:16:53:c8:bd:bd:48:af:c0:
         9f:fa:8c:0b:5d:7d:d3:b0:59:58:37:18:6c:0b:b9:f2:f5:7d:
         02:65:3d:3a:48:50:72:1c:fe:ef:8e:0a:0c:73:cb:0b:4c:6b:
         a0:e5:86:31:ce:e1:dd:6e:9b:1d:48:b7:04:b3:d6:94:fd:06:
         59:97:a7:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yseOyLth5lF3C3IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
NTNiZmRiNjItN2NmMC00MTAzLTlmMTMtMGE2N2Q1N2EyNTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/TWfoFpONR7CKZIllaPbQJPukzZODlxyu3m
fxTiEV/EjGsQiNGNvv0qLL9rfYDhF4UpGtMVD8AeChpPE6WQyklxAUCo4bp9d9lq
EZxipAvZ4WHjIpTRO4SPmaWurJP9Y82WrffLZQkD3joVsMkUzSGvRqHqLEy/swin
8Tntb1me78Ie9lfCeShYaSHdEBwOuieaIwAVtYADvTiDB+eEPO2CQgZdwqKlDebJ
8KnQ16KLyIQprd4NY/NfXaA7n3O5dQqeu9A7TJcUu0NZwLwOQjUmJXxNaIAzHMyB
wtb9d6ThzWrJY6QWBWwUIDDCtFrfclhuXTRTCqA/s1Jmrl4t5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN3oaMsgzp7+A19UdFazP6MAibdeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDhmMTBiODktNTg5OC0z
NWY2LWE4YjUtM2RiNTA4YzQ2MjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRwcAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH9JaW1mfaHopcCZeRRq8/n8s3HFBWCSPLZddEV0Vl0dmczWHXKw5cVb
ZcNiAzXe01+3bM+p/d4rIWh+MDN9HPnaOiAHh/rbmjJ1xV6NrQ1yQunDmNcKUWkT
Z+SzsAzmVBAotCtEoD57h1OnYe1UU9K6V87RCb6dHPe+83UF4OPFHAvU/UE8463M
T8DnHZ4xHOGq/4eFvCY0+J7B+3CxCoXGGYLEuqtW28t3lz88LQU2awH/pQ8jxSXa
V7zASe8WU8i9vUivwJ/6jAtdfdOwWVg3GGwLufL1fQJlPTpIUHIc/u+OCgxzywtM
a6DlhjHO4d1umx1ItwSz1pT9BlmXp/w=
-----END CERTIFICATE-----
Generated at Thu Aug 27 12:36:01 2026 by rpki-client