Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ae7c07-9789-3345-a18a-ed058d1bfa4d.roa
File:                     08ae7c07-9789-3345-a18a-ed058d1bfa4d.roa (raw, json)
Hash identifier:          qc3Kcua/9qooAVSQBk2E27ZusdaHk240xJZhxHunVvs=
Subject key identifier:   EE:95:FE:23:19:EE:94:B8:DD:2E:EF:44:2E:C6:3B:7A:E1:52:B3:1A
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A8B0B4CBB06D61C2EB94E4FB0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ae7c07-9789-3345-a18a-ed058d1bfa4d.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     7029
IP address blocks:        71.30.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:4c:bb:06:d6:1c:2e:b9:4e:4f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=1d24603a-994b-4767-86db-0225061f98b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a2:c4:a0:1c:e5:65:11:3b:f4:c5:c9:82:a4:
                    36:92:a9:5d:43:f8:b0:8f:69:b9:c5:94:e8:75:ea:
                    0d:de:0d:5e:eb:3d:79:97:83:e1:c7:bc:de:28:23:
                    8c:98:dc:0e:9c:bb:2c:6e:aa:9a:3c:3e:8c:ad:e7:
                    d3:d2:02:3b:cb:28:a4:6a:ff:00:fe:22:c2:6e:a8:
                    73:a2:da:ec:97:2b:87:e8:67:78:92:2d:1b:83:27:
                    c4:4c:d9:34:21:77:78:90:17:1a:5c:ae:d0:45:eb:
                    9c:8b:51:b3:40:d1:49:0b:35:a2:1e:5f:d1:95:9d:
                    ef:21:81:ce:15:2d:18:7a:a8:45:cb:67:2b:f3:19:
                    a6:de:da:9d:ff:8e:e9:6a:94:f8:c1:6c:17:11:85:
                    4a:42:b2:1f:43:9a:75:21:88:7c:d5:19:c5:a7:3a:
                    52:12:da:61:31:fa:80:53:c5:86:8d:99:a7:dc:19:
                    68:99:55:49:0a:2b:a6:52:ef:a8:cd:6d:21:ef:83:
                    30:4b:c6:c8:d5:96:7c:70:9a:c4:90:d8:fa:2a:3c:
                    32:6e:04:a5:fd:7b:de:bd:28:6b:58:64:c0:58:c2:
                    d6:72:7f:75:84:29:8c:68:90:87:b3:20:82:4a:a3:
                    26:75:03:d6:98:7c:38:80:e7:e5:6d:87:bd:48:44:
                    c5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:95:FE:23:19:EE:94:B8:DD:2E:EF:44:2E:C6:3B:7A:E1:52:B3:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ae7c07-9789-3345-a18a-ed058d1bfa4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.30.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:d9:cd:6d:a4:e1:5b:3a:7e:6d:ee:1b:fc:6e:79:3b:a8:8f:
         6e:5e:42:46:78:44:9b:5d:5f:1d:8d:0c:bc:84:0b:52:46:9a:
         9f:75:ff:25:e3:a8:2c:ee:28:00:33:cb:9e:37:7c:f0:16:ee:
         9d:7b:04:a6:ca:02:08:14:4e:5e:bb:2c:5e:a2:1f:a9:d3:96:
         5c:66:84:28:87:55:69:64:63:0a:15:a8:70:7f:ca:97:e5:61:
         99:a5:1b:7d:87:3a:7f:63:ce:df:09:c0:f1:df:56:b4:86:97:
         0f:a5:92:aa:ee:62:29:3f:0f:5f:a1:15:4d:ee:cc:71:dd:ef:
         79:88:02:44:ed:7a:02:5b:57:3f:e3:ac:f1:1f:57:ad:87:3e:
         ae:70:69:59:ad:cd:c5:c9:ff:0b:7a:5a:61:f1:b3:b2:c4:d1:
         50:09:ac:49:ad:30:61:4a:3a:98:9a:f5:21:e0:3c:75:19:ca:
         a3:7a:61:61:e3:c6:26:61:34:8f:9c:6a:7d:8c:65:8e:f8:97:
         36:4c:22:b7:62:72:06:28:88:1d:2a:52:3c:24:65:dd:60:3f:
         88:33:25:e7:e0:c0:8d:3a:f3:f6:d0:7d:dc:5b:a9:3e:e0:c9:
         ac:de:88:0d:91:7d:b9:96:99:86:82:18:64:29:e7:f8:94:c7:
         10:98:9f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:14:43 2025 by rpki-client