Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/60d9d089-2a28-38fb-b012-53296696a4f3.roa
File:                     60d9d089-2a28-38fb-b012-53296696a4f3.roa (raw, json)
Hash identifier:          N8EBcS5W2jBTe+7oZx+R4d3wJeoqInzn/qgpfBwhP6k=
Subject key identifier:   FF:32:BB:5B:D6:BF:35:50:13:FB:B9:2E:6A:74:4B:2F:41:F1:BE:CC
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F024237319797E55071581000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/60d9d089-2a28-38fb-b012-53296696a4f3.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     7029
IP address blocks:        71.30.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:37:31:97:97:e5:50:71:58:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=d2cb0b42-8720-4fb0-b0e6-7649a47c679e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:19:3c:9f:5f:ca:8b:5a:50:f6:2a:91:7c:8d:
                    bc:e4:1a:08:d4:2f:06:a2:e7:92:a2:29:47:01:dd:
                    0c:e2:74:09:d4:6a:76:2e:e3:57:ba:41:85:c5:03:
                    f9:07:9e:df:b1:cb:62:bc:c9:67:7a:d0:6e:98:69:
                    bd:03:f7:5b:c1:02:c5:26:f8:73:99:38:75:53:e3:
                    21:6d:4d:9e:e1:03:69:c9:e5:11:b4:aa:9d:2f:2a:
                    e9:ef:74:fb:f6:01:83:71:bd:2c:45:52:ac:fa:a7:
                    34:f9:f2:b6:a3:83:94:f2:44:7d:6a:97:66:90:c7:
                    ec:c0:0c:66:b7:9f:e1:37:47:25:09:49:8c:d9:df:
                    ab:1c:2e:de:c8:16:a3:5b:ed:2c:97:e4:f8:04:b6:
                    2e:f8:32:a0:e0:50:11:7a:90:cb:89:f0:c4:e6:70:
                    3b:93:49:fb:4c:d8:b0:12:c2:fc:38:86:62:89:6c:
                    4b:a5:40:16:ac:4b:2d:93:24:e3:28:1e:e9:ec:66:
                    9d:f7:c1:8d:5c:8d:3e:8e:e9:85:8d:9c:fd:9e:52:
                    14:72:6e:ae:01:9f:83:46:98:68:08:80:24:bf:30:
                    a7:28:f4:a0:8e:fe:02:e8:40:71:14:17:7d:ee:2e:
                    f9:a1:7a:82:08:35:32:43:43:17:41:03:82:5e:19:
                    6f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:32:BB:5B:D6:BF:35:50:13:FB:B9:2E:6A:74:4B:2F:41:F1:BE:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/60d9d089-2a28-38fb-b012-53296696a4f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.30.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:66:5d:55:f8:f2:c7:1d:6e:82:a1:c8:d0:1f:9e:ab:d4:ac:
         e3:c5:b2:fd:00:2e:e3:71:7f:0f:2a:e5:33:b2:19:04:c7:ca:
         a6:a8:d2:fe:9c:77:79:c2:cd:89:a1:50:06:49:0d:a1:a6:45:
         f3:95:46:75:f7:a2:90:80:2e:dd:a5:57:4b:f2:e6:1d:bb:fd:
         eb:db:ed:bd:61:76:f3:cf:69:33:a6:45:a8:10:39:98:4b:11:
         7e:e8:07:8d:b9:44:8f:5a:18:6a:3f:bf:36:13:09:b4:51:fd:
         54:2a:d5:c0:04:f1:76:a8:36:f1:79:a2:fd:59:f9:9e:e4:7d:
         1b:4e:b5:2f:08:e3:b2:35:db:bb:14:55:bd:cf:69:11:3c:32:
         62:14:35:25:34:d0:8b:8e:b5:13:21:fa:04:83:10:df:9e:c4:
         09:41:f3:0e:04:53:19:e8:27:cc:9c:de:c8:e1:9a:d0:2d:fa:
         c3:a8:b2:e1:65:a5:6b:20:12:82:85:4a:05:4c:56:4c:ef:30:
         a8:0d:d4:82:ae:4b:8e:42:6f:5b:f8:cd:5f:b1:5d:4c:d4:92:
         5d:8d:12:fa:c2:d1:3a:e5:f6:06:1b:9b:0c:db:b9:eb:f2:df:
         e1:04:6d:45:34:47:71:35:0b:3d:a0:ba:16:64:a6:5e:e3:e0:
         8d:2a:78:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:27:32 2026 by rpki-client