Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eb79f36f-5a92-333b-bb54-7cc24c5f2f7b.roa
File:                     eb79f36f-5a92-333b-bb54-7cc24c5f2f7b.roa (raw, json)
Hash identifier:          MDnNlcnNW4nGp2W1nW/wmVAC/+DBH6+rlq4p2cDdXrs=
Subject key identifier:   00:CA:C7:1C:22:49:88:7A:D4:34:10:0F:22:D9:3D:1C:4E:D8:20:83
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A90A0F9DF9C3AA66DF612FE00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eb79f36f-5a92-333b-bb54-7cc24c5f2f7b.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     7029
IP address blocks:        71.30.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:f9:df:9c:3a:a6:6d:f6:12:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=faa8aced-51e2-46ec-8a99-09dbbff42674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f6:0a:64:fc:ec:2b:d4:8e:5a:51:ff:b7:27:
                    45:bb:07:05:9f:fb:98:2e:a0:35:e3:8b:87:ed:83:
                    8e:fb:50:a0:bd:59:51:2c:b6:45:d2:a6:9f:19:8f:
                    20:cf:91:04:89:b0:ba:57:30:02:bd:27:6e:c0:ac:
                    9c:b3:ab:82:05:da:1b:99:c1:46:f3:83:ee:c6:8c:
                    a0:20:af:46:78:0f:9c:00:f1:e2:6d:1a:5d:fd:86:
                    c9:6e:a7:8d:0b:b0:eb:8e:05:4a:b6:b2:e0:5b:da:
                    51:96:e0:f8:30:ae:a6:37:a5:47:2d:c3:a3:3e:42:
                    48:22:38:04:03:f8:c2:d5:29:a9:db:0b:0b:41:91:
                    e1:f5:40:b6:8d:59:26:74:00:a2:a1:99:d9:4b:16:
                    1f:22:eb:0c:da:8a:f9:fc:46:14:ea:81:ee:2c:2c:
                    13:78:41:ba:a3:7d:45:32:1d:0d:ec:36:b0:b5:81:
                    a6:94:32:92:f0:59:4d:80:fc:48:c5:5d:c7:15:25:
                    06:b5:b7:d8:8c:0d:3f:79:a4:fc:d8:5b:72:3b:ec:
                    7f:3c:6d:72:c0:77:f9:32:92:e3:b0:41:14:73:35:
                    f4:dc:08:34:45:c8:6c:9a:f3:68:23:4e:b7:d3:2d:
                    d9:69:38:21:7d:d9:81:c5:b6:07:90:0b:c4:c0:5d:
                    4c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CA:C7:1C:22:49:88:7A:D4:34:10:0F:22:D9:3D:1C:4E:D8:20:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eb79f36f-5a92-333b-bb54-7cc24c5f2f7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.30.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:7a:a3:5a:be:9f:e1:ff:54:e3:2d:67:bf:ab:d1:cd:58:6f:
         7d:8a:03:6c:a3:09:1b:39:87:19:1f:a7:c8:9f:8f:29:b5:3e:
         cd:d8:34:63:17:38:78:d7:ae:67:3a:93:15:18:30:2e:83:b7:
         35:bf:48:d5:de:94:1e:01:b5:c4:aa:0e:3b:d2:d0:cd:5f:e2:
         38:c5:47:36:81:82:72:c8:9c:e7:23:eb:8d:42:f4:56:cb:42:
         ea:c8:c7:9d:ac:bb:34:38:b9:9d:fc:0a:ea:9d:46:bf:15:ce:
         c6:df:5d:a1:2a:97:37:5a:ca:81:2b:0d:87:bd:4a:37:b3:56:
         64:e6:cd:a7:1e:2c:ba:c4:54:4d:29:1d:fa:ac:af:13:9b:92:
         36:d0:a8:d4:d3:a0:29:a8:da:18:77:5f:a5:cf:e2:a5:21:8c:
         95:0c:b2:fb:30:ba:61:fc:00:bd:7b:a0:da:81:bb:67:77:5a:
         80:3a:9c:a4:9f:14:6a:6b:66:54:02:68:48:a9:96:bf:75:10:
         9e:93:b8:f7:3b:1a:1b:26:c1:42:3d:0f:48:f9:12:23:91:8f:
         7c:1c:34:ac:1d:6d:21:b9:7c:b4:6a:01:ab:fd:f5:96:6d:c9:
         df:da:b4:d2:7d:9b:f8:18:98:54:19:53:36:82:9f:bd:e8:6a:
         e7:25:01:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoPnfnDqmbfYS/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk
ZmFhOGFjZWQtNTFlMi00NmVjLThhOTktMDlkYmJmZjQyNjc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/YKZPzsK9SOWlH/tydFuwcFn/uYLqA144uH
7YOO+1CgvVlRLLZF0qafGY8gz5EEibC6VzACvSduwKycs6uCBdobmcFG84Puxoyg
IK9GeA+cAPHibRpd/YbJbqeNC7DrjgVKtrLgW9pRluD4MK6mN6VHLcOjPkJIIjgE
A/jC1Smp2wsLQZHh9UC2jVkmdACioZnZSxYfIusM2or5/EYU6oHuLCwTeEG6o31F
Mh0N7DawtYGmlDKS8FlNgPxIxV3HFSUGtbfYjA0/eaT82FtyO+x/PG1ywHf5MpLj
sEEUczX03Ag0RchsmvNoI0630y3ZaTghfdmBxbYHkAvEwF1M9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFADKxxwiSYh61DQQDyLZPRxO2CCDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWI3OWYzNmYtNWE5Mi0z
MzNiLWJiNTQtN2NjMjRjNWYyZjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx5oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGZ6o1q+n+H/VOMtZ7+r0c1Yb32KA2yjCRs5hxkfp8ifjym1Ps3YNGMX
OHjXrmc6kxUYMC6DtzW/SNXelB4BtcSqDjvS0M1f4jjFRzaBgnLInOcj641C9FbL
QurIx52suzQ4uZ38CuqdRr8VzsbfXaEqlzdayoErDYe9SjezVmTmzaceLLrEVE0p
HfqsrxObkjbQqNTToCmo2hh3X6XP4qUhjJUMsvswumH8AL17oNqBu2d3WoA6nKSf
FGprZlQCaEiplr91EJ6TuPc7GhsmwUI9D0j5EiORj3wcNKwdbSG5fLRqAav99ZZt
yd/atNJ9m/gYmFQZUzaCn73oauclASA=
-----END CERTIFICATE-----
Generated at Wed Aug 6 06:07:24 2025 by rpki-client