Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b070f9e8-2be6-3915-acc7-509b56ce39ec.roa
File:                     b070f9e8-2be6-3915-acc7-509b56ce39ec.roa (raw, json)
Hash identifier:          6/oP5wwfJyLNzWnANn/w1K3EEP2szDqXLMfVJb8kj4E=
Subject key identifier:   2B:88:1B:F5:94:46:DC:D7:48:B3:E8:C8:68:C9:4C:99:68:E4:6E:9D
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E0D842ABADF35203A5129F240
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b070f9e8-2be6-3915-acc7-509b56ce39ec.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        71.30.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:2a:ba:df:35:20:3a:51:29:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=5aba246e-b62d-4a55-8613-de8257d872f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b6:7f:c9:c5:b4:d4:cb:d6:f0:8c:a3:ac:f4:
                    ad:91:cd:54:0a:7d:ba:a1:98:b0:cb:8f:85:7b:af:
                    c9:84:66:72:b9:af:0e:0e:bf:4f:2e:3e:87:f7:15:
                    56:82:28:08:06:09:58:5e:e3:1f:97:d3:a9:cc:74:
                    a0:76:af:ca:11:71:91:5d:89:79:cc:1f:c3:c6:68:
                    9e:95:d3:8f:b4:ee:1d:1d:09:88:7c:e8:fd:d1:0d:
                    2c:70:5f:d3:8e:b8:a1:fd:75:99:dd:eb:3e:59:34:
                    42:00:ad:74:09:c7:68:4b:6e:0e:42:7a:bc:c7:00:
                    ef:58:ed:4a:d2:e4:cb:a7:e7:65:7e:0f:2a:bb:24:
                    e7:d8:bf:81:be:79:e0:5b:8e:e0:48:a3:c3:79:4b:
                    15:da:68:8d:35:5e:95:ee:7e:49:d6:03:71:c0:4c:
                    98:cc:0d:5a:47:a4:00:e2:b7:ec:71:09:e7:9f:4d:
                    30:6e:ab:d0:0d:dc:1c:87:20:07:a0:32:28:06:52:
                    d9:24:16:f3:74:40:dd:e4:92:7c:4b:f4:c5:30:78:
                    ed:db:68:49:9c:e4:e9:4f:a6:7c:ce:ff:8b:79:5e:
                    8f:86:e3:72:7c:f2:ce:f4:bc:80:1c:d9:55:93:22:
                    66:32:93:b2:4c:c6:b9:b5:d5:c6:8d:72:3b:02:02:
                    33:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:88:1B:F5:94:46:DC:D7:48:B3:E8:C8:68:C9:4C:99:68:E4:6E:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b070f9e8-2be6-3915-acc7-509b56ce39ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.30.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:6a:de:bc:96:8e:9a:d3:68:17:75:aa:1a:da:37:0c:d1:f7:
         c3:b9:cb:bd:9c:5b:54:59:30:50:8b:67:7b:c0:16:3c:69:07:
         e9:22:43:4a:0d:13:36:72:20:0f:19:20:7f:a4:19:49:f1:2c:
         88:f0:c7:7f:e5:44:06:f4:82:42:6e:5e:84:6d:e6:8a:57:e4:
         c3:16:31:26:e4:35:ee:89:7f:ce:f5:fe:0b:16:ac:b4:4f:d3:
         29:32:eb:4e:46:7b:be:c5:11:cb:ff:f0:0c:3b:c9:84:fb:49:
         39:c0:96:b3:35:56:fb:04:4c:fc:05:14:22:82:cc:41:65:1a:
         e7:32:9d:8e:ca:c4:bd:77:8b:cb:02:a7:17:86:51:58:4e:fd:
         3b:44:c6:5e:a2:b3:6d:57:4b:9b:08:48:e3:45:f1:25:11:35:
         97:47:65:15:51:cb:ca:27:2e:fc:2f:f1:08:a4:8c:6e:12:84:
         68:42:4b:d8:b9:63:b4:50:e4:45:f1:a8:f3:ba:ae:78:89:4a:
         26:2c:06:03:f4:48:0f:0a:43:34:e8:b1:2a:17:60:79:ff:fd:
         21:a9:c5:e9:e6:8a:4b:47:35:12:6d:09:4e:86:a8:b5:d4:21:
         81:bd:98:79:7d:59:97:68:0f:67:cd:9e:04:1a:68:a9:ab:af:
         44:eb:5f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:44:29 2026 by rpki-client