Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95ac5d77-1af3-35ce-8e6a-3a6289863538.roa
File:                     95ac5d77-1af3-35ce-8e6a-3a6289863538.roa (raw, json)
Hash identifier:          EAIIv1P/noJpCoNiiqq+4HEhLmbmQnKynz8bJhPOv70=
Subject key identifier:   C0:7B:A5:4A:E4:06:00:2A:EC:82:2E:67:78:22:58:8C:8E:EC:95:D7
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584B2A2C433DB778B13E26245700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95ac5d77-1af3-35ce-8e6a-3a6289863538.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     7029
IP address blocks:        166.82.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:43:3d:b7:78:b1:3e:26:24:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=20b1ab1f-471d-4a93-850e-172e4e068852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c1:2f:8f:05:f4:2b:bf:92:7e:7f:95:d7:e5:
                    4d:8d:2f:73:fd:76:10:14:14:04:3a:17:e2:9f:a7:
                    98:a9:01:96:f0:a4:b0:b8:75:88:db:7d:e4:43:44:
                    a4:6a:de:78:fc:c2:53:e8:e9:2e:5a:2a:c0:02:de:
                    f3:9e:c2:e8:2e:16:c8:f4:8e:64:a6:68:ba:ea:97:
                    38:49:6f:a0:0c:c0:9a:e4:b2:53:8e:ef:8a:60:eb:
                    4b:13:0f:d3:2c:6f:04:52:32:04:b1:32:db:2b:f0:
                    0a:ef:c3:c2:c9:45:21:1b:9f:5e:9e:26:a5:ea:c6:
                    d7:11:8a:12:15:05:8c:5a:e1:3c:ae:d1:c5:2a:cf:
                    4b:65:e9:c0:fe:2f:e0:bb:58:47:6c:d9:ef:dd:8a:
                    58:73:84:a5:dd:a6:71:69:2d:c2:b2:7f:5d:70:8b:
                    91:7e:27:1c:48:d9:30:9d:c8:cd:ce:18:07:19:14:
                    72:6e:9b:44:53:77:d0:5c:11:3f:12:6e:71:b9:bd:
                    4c:95:9c:7c:7c:64:26:19:ff:15:ce:02:a5:ad:86:
                    6a:60:a8:5e:9f:1f:3f:a8:57:b5:4e:e3:22:cc:33:
                    05:cb:2e:ef:20:43:93:7c:9c:4a:37:34:c6:50:b9:
                    f1:4c:9a:c9:29:3b:fa:93:e9:e9:fd:4a:42:6b:d1:
                    be:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7B:A5:4A:E4:06:00:2A:EC:82:2E:67:78:22:58:8C:8E:EC:95:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95ac5d77-1af3-35ce-8e6a-3a6289863538.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.82.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:b6:05:2f:04:af:e1:02:dc:9f:e0:02:05:d6:6c:22:83:e7:
         d5:dd:58:5d:9b:08:46:9a:2f:77:2b:ea:3e:ba:e9:7b:7e:95:
         3f:a6:60:d3:cd:fd:60:34:7c:19:02:77:60:83:1c:59:96:23:
         e6:bf:20:19:1f:5f:6b:c5:2e:ca:ab:04:35:68:21:d8:7f:33:
         d6:40:70:d5:94:34:87:bc:58:82:9c:a5:13:cf:0f:78:34:79:
         68:65:27:8f:1d:ee:35:0e:ee:c5:c3:28:cf:c6:00:e6:1c:0b:
         49:70:11:32:21:92:95:0c:52:23:88:fb:6f:16:1f:62:e0:38:
         40:b0:16:1e:3f:cd:fd:c2:76:78:4f:20:74:21:68:47:5d:1d:
         b0:13:f7:6a:a1:3a:4d:94:6b:ba:9d:f6:4d:fe:99:cf:d6:b1:
         5d:05:5d:5f:f8:b7:ff:bd:0e:9a:34:64:91:83:84:76:3a:1a:
         14:b2:e5:8c:b8:13:f6:71:42:ac:6f:1c:44:f1:fe:11:52:21:
         15:d7:12:b5:75:38:b2:20:09:f8:66:e4:5c:d5:26:12:6a:9b:
         56:d9:62:e7:b2:d8:61:57:9a:bd:94:aa:2a:08:79:e6:0c:78:
         04:15:5a:fc:5d:6d:49:90:18:19:b3:c5:6b:a4:38:3e:3b:62:
         86:35:89:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:09:35 2025 by rpki-client