Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/736dd3da-b7fc-332b-a64b-9670e8707f23.roa
File:                     736dd3da-b7fc-332b-a64b-9670e8707f23.roa (raw, json)
Hash identifier:          d5Y7oQFkHGVbM9gbCfnfZex1SOKqfCZ/EHSC6vV3a8s=
Subject key identifier:   28:99:11:E9:6E:07:6C:E0:BF:5A:A0:E9:D7:8E:A6:35:DB:A1:E5:35
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EC0A74549D040BBC027F32BC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/736dd3da-b7fc-332b-a64b-9670e8707f23.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        71.29.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:45:49:d0:40:bb:c0:27:f3:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=95b105f2-05ec-425c-877b-75c07566ef4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:39:53:ae:aa:e5:c9:c6:61:c9:01:2c:c9:fd:
                    c6:48:64:8c:c4:70:0f:05:4a:1a:6a:3c:ea:43:d9:
                    80:4a:6d:5d:7d:f0:72:66:0c:d1:0b:f7:61:95:63:
                    b9:1a:ff:59:8a:20:b3:54:4d:f4:b8:6e:61:13:77:
                    07:fd:e2:d0:4a:48:7c:e4:7c:ac:63:91:dc:c0:f3:
                    27:9d:d1:72:03:8a:4d:e9:fc:c9:91:3c:3a:c3:eb:
                    62:14:3a:f2:7c:f3:b3:1b:d5:ec:ae:a0:39:a9:ff:
                    61:de:b2:09:21:6f:50:d4:13:6d:61:29:6a:3f:5a:
                    7e:a8:4b:a1:d5:15:51:31:76:46:e9:ba:02:83:3a:
                    3e:20:f5:b5:60:73:42:47:da:68:6a:cd:8c:ce:e9:
                    b7:53:e0:db:6a:66:e7:93:9a:df:cd:73:e3:be:b7:
                    59:3e:4a:7f:d8:62:cd:12:81:d7:a2:a9:11:95:84:
                    9a:2d:a5:4d:e0:e5:60:a4:2a:bf:eb:30:a2:58:15:
                    74:b0:e3:61:34:51:1b:41:b4:10:f9:5b:c4:d8:8f:
                    6d:8f:11:e0:b2:2f:ee:32:a1:37:fb:5c:5d:29:43:
                    73:55:28:4e:ec:49:7c:b6:0f:3e:2d:97:14:35:90:
                    2f:6e:8f:26:8b:fd:81:7a:d1:53:b4:cf:5e:75:ee:
                    fe:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:99:11:E9:6E:07:6C:E0:BF:5A:A0:E9:D7:8E:A6:35:DB:A1:E5:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/736dd3da-b7fc-332b-a64b-9670e8707f23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.29.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:91:6d:c6:4e:7a:fd:57:33:9c:88:c0:15:2d:bb:96:6f:4b:
         58:94:41:80:5c:57:a8:fd:a5:93:51:db:2b:9d:37:1b:86:4b:
         9d:84:5b:1e:43:22:7e:ae:37:bc:0e:e3:81:08:15:7a:1c:fe:
         85:34:5c:87:2d:f5:f4:1f:3c:d3:16:74:44:ee:fd:d5:e4:69:
         36:13:00:92:34:b8:c4:4b:33:4e:d5:c0:91:12:be:d0:3b:ea:
         8e:4f:2a:51:93:6c:1b:cd:95:f5:fd:ff:75:5d:4e:2f:af:52:
         67:7f:de:30:a4:81:e9:9b:b7:a9:23:d9:6c:22:40:51:5a:28:
         8a:1a:20:6c:d2:d5:15:57:ff:81:f9:96:f7:ac:33:d4:77:7b:
         4b:73:5a:5c:18:b0:0a:bb:5a:65:b0:3b:b6:30:52:00:cd:19:
         43:62:62:fb:ce:94:ed:d1:e9:1d:dd:5a:dd:39:1d:14:7f:55:
         a0:80:59:e6:49:f2:4e:c9:c5:b5:93:bd:e8:0d:00:de:ea:c9:
         49:c2:82:f7:c8:9f:69:7b:85:b4:55:5c:d4:a8:72:e6:62:49:
         95:d5:dc:d5:65:15:ce:90:e3:83:0f:df:08:cd:48:f3:93:f1:
         a9:45:2b:e7:39:d2:70:e4:23:8b:00:b6:c3:3f:4d:d9:04:01:
         82:e4:03:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 14:19:48 2026 by rpki-client