Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a9ac8f4-97e9-3f75-a57f-0d08d5538632.roa
File:                     7a9ac8f4-97e9-3f75-a57f-0d08d5538632.roa (raw, json)
Hash identifier:          Thrk8QBFNiDXHse7ej4wcN6bLDGUfEGb4SugZ4SdH90=
Subject key identifier:   33:32:6C:6F:8C:26:F0:AF:35:6E:D6:8E:8B:8A:98:1E:20:4F:DC:74
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EAFE6FA4962408EA09948C240
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a9ac8f4-97e9-3f75-a57f-0d08d5538632.roa
Signing time:             Sat 01 Aug 2026 01:00:12 +0000
ROA not before:           Sat 01 Aug 2026 01:00:12 +0000
ROA not after:            Fri 30 Oct 2026 01:00:12 +0000
asID:                     7029
IP address blocks:        71.30.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:e6:fa:49:62:40:8e:a0:99:48:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug  1 01:00:12 2026 GMT
            Not After : Oct 30 01:00:12 2026 GMT
        Subject: CN=7c97d513-560e-4830-9d3b-d36b0f3a859e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1a:b7:3c:02:f0:f9:0f:7e:83:13:8c:e8:98:
                    84:df:52:5d:9c:dd:82:fc:9b:45:4c:99:82:30:cd:
                    71:eb:90:cc:5d:19:55:31:28:4e:90:7d:d4:33:52:
                    29:e9:16:4d:55:eb:54:d9:a1:12:aa:f9:0b:05:c9:
                    60:c9:28:f1:2a:c6:a6:09:70:0f:b6:58:e4:07:a0:
                    41:8e:1d:88:ed:75:02:b9:01:b6:88:5a:cd:6c:7b:
                    b2:aa:5e:b9:cc:13:a5:47:b5:07:06:cb:87:73:ae:
                    85:b8:bb:41:cd:10:3a:7f:0f:e4:d2:44:45:33:44:
                    a7:7b:ef:84:0d:5c:23:da:22:d5:4f:f1:a1:1b:2e:
                    a6:3f:5f:18:5e:c8:67:ce:fc:dc:66:c4:6d:ab:14:
                    c9:c8:a1:da:ce:fe:81:55:55:f9:1b:c6:42:fe:13:
                    7f:ac:a5:5a:87:15:a5:01:68:71:ad:84:a8:b4:0b:
                    9e:bd:60:05:79:67:0c:5b:41:40:3d:9a:2f:a2:b0:
                    91:be:75:e0:42:52:ff:09:e2:be:a4:4a:99:77:87:
                    30:25:7c:f3:d9:30:fe:e4:e5:9f:e7:2b:5a:bc:5e:
                    46:e9:28:95:a6:1e:ea:9b:9d:12:9c:0c:df:82:22:
                    17:cb:5c:8e:6b:ba:cb:a3:2b:fa:c7:9a:3f:92:83:
                    f7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:32:6C:6F:8C:26:F0:AF:35:6E:D6:8E:8B:8A:98:1E:20:4F:DC:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a9ac8f4-97e9-3f75-a57f-0d08d5538632.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.30.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:48:27:86:b4:ed:15:7d:09:53:43:bb:0d:10:fb:89:82:2a:
         c0:0f:25:3d:d3:9a:17:19:66:52:d0:98:16:1d:d0:55:48:34:
         dd:f3:db:be:d5:7b:73:72:4a:fd:fb:4d:f9:e7:25:dd:0e:a9:
         38:d8:b5:14:7c:fe:a5:de:05:48:95:8f:a9:64:6c:06:8a:30:
         3c:ae:5e:46:09:53:56:74:b4:97:ca:25:ce:81:0e:30:e4:7b:
         29:69:3b:4a:62:97:4b:6e:62:dd:40:64:1c:24:8c:a6:41:90:
         07:f2:97:8e:a2:5f:3e:f1:77:4d:41:04:06:20:ed:ce:cf:b8:
         9b:27:25:a2:58:aa:7e:dd:20:3d:aa:d1:92:85:0c:fd:d6:cd:
         f8:3d:38:50:84:e8:6e:0f:26:5f:7f:98:dd:4a:ea:39:f4:9b:
         db:3e:0e:88:05:da:52:fd:fe:40:0e:74:e9:dc:bf:6b:9e:c2:
         db:0e:ed:c0:49:cb:81:cc:97:f2:07:a5:c4:33:dd:3b:6a:1b:
         2a:70:fe:1d:bd:f7:e1:7d:96:b1:2c:60:7d:67:5e:1e:bd:26:
         83:79:bf:85:9b:e9:2f:9c:d8:0b:1e:b8:c7:5b:bd:14:80:d1:
         8d:27:fc:32:80:31:a9:5a:a6:43:6f:89:35:ef:ac:e3:05:d7:
         28:c3:18:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:08:08 2026 by rpki-client