Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c1ea0d0a-8954-346e-8fba-aee5c0610c00.roa
File:                     c1ea0d0a-8954-346e-8fba-aee5c0610c00.roa (raw, json)
Hash identifier:          FnORkTaWU4oOnWAf/MntjOjBNSJvaiVywo2bONdulLE=
Subject key identifier:   41:26:11:45:98:65:1D:F1:74:B4:9A:D0:F0:76:32:F7:F7:65:1C:06
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EC0A757702EC931B99059BE80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c1ea0d0a-8954-346e-8fba-aee5c0610c00.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        71.29.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:57:70:2e:c9:31:b9:90:59:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=ff29a4e6-626e-49f5-b768-6bb00995ed3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:50:da:c4:53:db:fc:f4:aa:bd:57:56:33:17:
                    b9:8a:94:13:14:88:0a:67:55:fa:ae:77:95:26:f2:
                    ad:61:75:4e:26:cb:14:a0:3a:1d:1a:0f:c1:98:6f:
                    13:99:a3:54:33:e0:90:a0:ab:a0:3b:2c:4e:1e:be:
                    32:15:bb:f4:35:85:9c:4e:98:77:13:ad:e0:0d:c2:
                    51:4a:15:98:c8:f6:4b:8a:78:01:f8:c4:ee:ec:c4:
                    43:5e:67:af:4f:11:fe:f6:11:6b:89:ca:5a:2c:24:
                    d4:2b:55:9c:d3:23:9e:da:a4:40:96:88:41:12:ce:
                    66:0a:31:28:b8:59:82:87:44:e7:29:75:65:48:f6:
                    fc:7c:f2:af:2d:a2:1a:ed:84:5d:d3:e0:21:ee:bb:
                    c7:33:d2:d3:58:1e:77:59:d5:f8:d5:1b:b4:3b:9e:
                    88:d3:2b:a0:fa:3e:ad:c1:a8:74:f2:93:25:a2:36:
                    3f:0b:6f:a7:2f:fd:f0:c7:f6:6c:a8:be:b2:e1:04:
                    93:5b:de:1a:59:99:02:58:a1:56:fd:2e:4b:6e:c2:
                    af:ea:af:f8:76:17:e4:92:05:87:6c:f4:18:a7:e7:
                    f9:d0:0f:cc:0c:15:bc:1b:3d:37:9c:0e:36:06:d8:
                    01:35:0d:6e:17:9f:3f:a2:4d:da:04:cb:0b:c5:8b:
                    72:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:26:11:45:98:65:1D:F1:74:B4:9A:D0:F0:76:32:F7:F7:65:1C:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c1ea0d0a-8954-346e-8fba-aee5c0610c00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.29.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:03:e2:ff:29:50:b5:b7:df:ac:4f:57:f0:e3:33:86:c5:71:
         09:46:62:23:ac:72:d5:84:e0:e1:45:c1:90:8f:d8:fa:6d:02:
         05:07:91:72:03:cf:8c:ef:f5:82:3b:f3:96:22:2c:f4:f4:a6:
         c3:1c:43:6c:d6:c9:ab:a4:e1:50:89:c5:62:ab:72:25:b7:3d:
         11:77:10:90:a5:26:aa:fa:ce:f1:da:78:c6:71:3c:76:ac:fa:
         fd:eb:9c:cf:c6:28:fc:48:22:89:6d:94:36:ff:d8:36:25:17:
         ab:e0:48:7f:87:9f:06:bd:d4:1a:86:dc:c3:c5:c8:c5:87:f8:
         6e:32:75:5d:58:6c:51:45:e5:9e:8c:b7:c2:fa:22:e6:8a:15:
         90:5c:74:32:c2:e1:71:35:f3:b3:b6:50:d8:0c:69:d1:0e:8f:
         c7:f9:a0:10:62:60:06:7b:b9:48:e2:78:ee:a7:8d:5e:db:91:
         b3:4c:09:c0:4f:dd:5a:fd:db:bc:39:40:3b:28:69:44:32:89:
         91:22:22:64:3f:36:8f:e1:f5:a4:df:1f:dd:45:ed:d2:9b:95:
         5b:98:8e:33:7a:da:ad:3a:df:8f:4c:65:1d:e6:50:e4:3e:86:
         29:9d:78:bb:bf:96:7b:b2:69:85:91:53:56:1b:40:74:37:34:
         6b:7c:d7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:03:30 2026 by rpki-client