Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f258f4d-2d4c-35b8-aa8d-cafc78a0ad26.roa
File:                     5f258f4d-2d4c-35b8-aa8d-cafc78a0ad26.roa (raw, json)
Hash identifier:          mvHbbiiU44WdbdIsuX8haGTYJTFmSYl1JMDlsaGl4Sk=
Subject key identifier:   CE:7D:1E:CD:B0:75:25:83:C7:DE:53:97:A9:F6:2F:49:82:86:0C:DA
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584ECD478DB52B141748088EE0C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f258f4d-2d4c-35b8-aa8d-cafc78a0ad26.roa
Signing time:             Tue 11 Aug 2026 13:33:24 +0000
ROA not before:           Tue 11 Aug 2026 13:33:24 +0000
ROA not after:            Mon 09 Nov 2026 14:33:24 +0000
asID:                     7029
IP address blocks:        166.82.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:47:8d:b5:2b:14:17:48:08:8e:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug 11 13:33:24 2026 GMT
            Not After : Nov  9 14:33:24 2026 GMT
        Subject: CN=28e0540a-1d34-4667-b403-d3ddc96a867f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6b:2f:ff:b4:d5:3a:d9:c7:e9:c5:8a:e4:c6:
                    5d:a7:17:7c:69:ea:9e:73:a7:96:1a:13:5e:39:1d:
                    b1:cb:86:c7:39:24:37:6c:1e:82:1c:ae:77:c8:25:
                    71:e8:8f:2f:3a:ab:02:1a:82:8f:64:53:e8:80:6e:
                    a7:88:be:2f:e2:bb:56:0d:40:c7:6e:37:d9:39:c2:
                    28:c4:5e:08:12:66:a4:6d:5e:94:22:b3:6c:44:42:
                    99:35:23:a1:1f:df:6d:2a:4c:79:9f:e6:3a:f2:5e:
                    ee:d8:1b:23:8b:7f:1b:b6:56:ef:7b:85:1b:72:64:
                    8c:8e:56:9e:3d:a3:ca:fd:17:8f:e9:ff:5c:ba:84:
                    69:74:1e:25:18:17:4a:b9:55:63:95:97:36:ab:e6:
                    c7:10:75:17:23:d8:fc:b2:9b:3e:c6:1b:f8:84:03:
                    3f:bd:9b:45:be:43:73:fa:32:d4:9c:76:08:e4:d7:
                    a7:1e:1a:56:ad:54:d5:52:9b:be:c7:0d:01:d1:9e:
                    6b:99:7e:c0:23:bc:5a:cc:00:45:60:9c:59:06:30:
                    69:52:f4:d8:7e:4b:3e:62:4a:4b:66:12:d7:71:35:
                    97:08:dc:44:e5:68:97:2e:bf:37:45:18:80:71:04:
                    fb:ad:c8:87:ab:47:35:24:48:7f:92:15:55:d5:a3:
                    a7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7D:1E:CD:B0:75:25:83:C7:DE:53:97:A9:F6:2F:49:82:86:0C:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f258f4d-2d4c-35b8-aa8d-cafc78a0ad26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.82.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:52:ac:ee:44:ab:99:df:ea:1d:ce:47:c3:68:da:1d:9b:a7:
         e2:74:45:5e:fd:ca:84:0c:e0:73:46:71:8b:54:21:64:e9:e9:
         d2:d5:64:b4:7f:70:b8:6b:c9:5c:7a:7e:13:d2:c3:d9:76:c9:
         c9:b7:9f:76:3d:e3:ae:cc:47:1b:76:b8:cb:43:f9:01:2c:77:
         40:4c:49:4a:e0:d8:8a:a2:0b:09:9b:e0:3b:81:89:2d:6d:76:
         bb:37:c1:1d:45:5e:31:e5:05:78:4f:b7:c7:14:1d:37:dd:ce:
         3d:a6:a8:91:d9:34:bf:1f:2b:af:4a:88:97:d9:af:34:4a:f5:
         46:82:f5:70:96:08:01:32:fa:ac:e8:80:2b:6c:fe:b7:10:f0:
         93:ab:e7:38:01:45:11:52:d6:7b:f3:ea:c0:7e:cb:2a:61:e5:
         b8:b7:6a:54:15:e7:57:8c:ce:cc:df:2d:c8:3a:cb:42:8b:72:
         dc:92:0f:02:88:49:f7:6d:3a:5b:a0:dd:56:8c:bb:73:d8:41:
         11:45:a8:98:65:8f:aa:21:e3:cf:b3:c0:6d:8b:95:6b:fe:82:
         0c:ca:28:fa:d6:01:9a:50:a0:68:fa:a7:32:d8:98:cc:38:f1:
         26:5f:5c:a4:20:06:8a:dd:62:1b:38:5c:25:3b:b5:eb:4a:e1:
         33:4b:b5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:46:58 2026 by rpki-client