Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d5c8ec6-b4dd-3f2a-b245-0e05f8236151.roa
File:                     5d5c8ec6-b4dd-3f2a-b245-0e05f8236151.roa (raw, json)
Hash identifier:          k+UPfDQOOv24XNzbbnpV0qyfpFQL9Y306JfbK+r4qnU=
Subject key identifier:   5E:4B:70:56:80:EF:73:5B:EB:31:EC:9C:9E:BC:5B:FD:3C:62:55:68
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F498621377B4DA56118BD1200
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d5c8ec6-b4dd-3f2a-b245-0e05f8236151.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        166.82.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:21:37:7b:4d:a5:61:18:bd:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7b36edae-f8b6-4fed-bd75-ec8dec764f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:34:b9:2f:0b:33:7a:98:d1:af:4b:a4:51:eb:
                    86:e4:dc:ff:c6:34:c0:2e:c2:35:f2:40:ca:2d:94:
                    7a:c8:15:fd:0b:15:b3:ea:29:43:a7:63:8c:f0:c4:
                    05:c5:03:ad:04:fa:77:25:9f:ee:ca:35:f7:5e:47:
                    57:b5:66:7a:d1:cd:47:b7:04:e9:e2:5d:07:2e:f5:
                    e0:96:45:ca:5a:10:ef:1a:3a:04:93:c3:af:87:1f:
                    50:91:8e:6a:55:e0:dd:c6:20:6a:31:96:09:b8:b1:
                    38:39:2e:92:85:e3:ba:88:46:34:c6:a6:a4:08:b0:
                    4a:0e:42:e1:2d:15:a7:13:6f:80:66:40:bf:ed:5d:
                    74:83:e5:e2:e0:85:03:86:7a:60:b6:9c:31:3d:60:
                    da:58:cb:3e:5c:d7:b0:72:0f:db:0b:57:b0:64:b8:
                    7b:3c:54:2d:4b:99:38:46:3b:af:cd:9e:32:6d:02:
                    89:65:d9:68:5c:13:cb:61:fa:37:d8:0e:e7:a9:5c:
                    41:67:1d:3e:0f:1d:dc:73:32:33:a5:e3:0a:23:32:
                    8f:39:3b:65:a0:9a:14:27:d9:c8:51:6e:c5:e8:e4:
                    84:4a:0b:5d:33:0d:30:fb:68:3a:e7:0a:c0:dd:3c:
                    96:d9:c0:2e:c6:4f:7d:fe:4e:52:58:9d:e7:e0:38:
                    1d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:4B:70:56:80:EF:73:5B:EB:31:EC:9C:9E:BC:5B:FD:3C:62:55:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d5c8ec6-b4dd-3f2a-b245-0e05f8236151.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.82.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:56:64:11:ff:f3:e2:00:8a:c4:42:ee:2c:eb:24:e6:6a:d2:
         04:ea:da:8c:2f:e9:4c:4c:b1:72:27:d7:69:1c:36:fa:97:38:
         a6:26:9a:52:6a:72:5e:1a:8f:2b:5a:96:be:18:58:b9:c0:d4:
         e6:c0:d9:b2:e1:89:7f:f5:57:64:2b:5e:be:4f:f8:ac:4a:18:
         c6:c1:60:9a:9e:4d:fc:bb:59:2d:6b:7d:33:a9:7f:a5:b9:93:
         82:4d:4b:7a:6a:36:e1:b0:5a:cf:0d:3d:58:92:3b:78:fa:29:
         13:ab:30:20:42:f2:fc:d6:7c:9d:f5:0c:ab:9d:02:c0:66:28:
         a6:c9:0f:d6:8b:db:47:94:f2:8f:0c:52:b9:6c:23:2c:89:46:
         bf:1a:ea:d3:74:89:6d:9d:6c:0f:95:b2:e5:f5:25:ac:79:6c:
         53:4a:1b:b8:6b:24:9f:4e:c3:dc:25:8a:a0:35:07:02:01:4a:
         9b:0d:e9:05:a3:06:a6:df:77:e9:20:0c:d0:6c:90:d0:c6:ba:
         3d:9b:9e:b7:8f:24:4a:38:17:6c:0d:de:bc:d1:eb:f7:19:c9:
         35:f6:e8:56:f4:9c:49:47:4e:a0:7d:64:e4:2a:8f:b2:c9:62:
         c9:ff:8c:cc:81:42:64:65:4a:f8:53:26:70:7e:8a:6c:ae:19:
         1b:13:56:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 07:52:40 2026 by rpki-client