Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8e81ce99-7052-3d5a-a1c6-f58aa22a3e8a.roa
File:                     8e81ce99-7052-3d5a-a1c6-f58aa22a3e8a.roa (raw, json)
Hash identifier:          zYXC+rlTHeK9Hfn1zig5mpjJGf9g55kTr6j3XgpfiWc=
Subject key identifier:   17:D5:19:69:75:02:E5:B7:D7:06:06:80:08:A4:68:C3:A7:8E:9F:12
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584DCAFB12ED6F0B93276170F800
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8e81ce99-7052-3d5a-a1c6-f58aa22a3e8a.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     7029
IP address blocks:        166.82.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:12:ed:6f:0b:93:27:61:70:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=f68ded8e-a485-4fc1-9658-6f85f8d75d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e5:a4:04:ed:19:34:ae:6a:e2:a8:c2:29:1e:
                    a5:36:f3:f0:81:5c:0e:9e:b4:c4:92:19:a6:c1:b1:
                    2d:c0:46:f8:64:8b:69:34:53:8f:fc:1c:20:ad:81:
                    ca:7e:a8:97:35:9f:03:6d:2a:0e:e5:9f:9a:4f:90:
                    c2:c6:af:7b:8e:c5:df:2f:8c:ad:f0:63:2d:21:ed:
                    11:a0:bc:19:19:d1:48:06:0b:4c:52:d5:4c:e0:90:
                    cf:08:1d:a4:1f:57:a4:f1:f3:f1:d0:b5:f2:ba:c6:
                    88:9c:bd:65:9c:f8:50:3a:de:48:08:66:7e:54:9c:
                    2a:f8:82:44:31:fb:b5:56:78:98:e8:df:31:23:2b:
                    e9:c3:70:fe:f4:9a:68:88:c0:b2:62:de:37:88:cd:
                    27:2f:25:ea:a1:c1:01:3c:2b:52:b3:fd:9a:83:9f:
                    43:63:94:a0:03:e4:72:e8:25:67:2e:88:68:c9:f0:
                    59:0d:d1:70:4e:4b:0c:5b:f3:0c:51:43:c9:a9:fa:
                    0e:8a:6b:4a:31:f6:87:92:4f:0d:e9:eb:61:06:85:
                    5a:b2:1a:de:09:86:5d:aa:4c:74:44:f3:54:89:69:
                    0c:e7:af:e4:03:47:b8:04:3c:bc:e6:28:3d:55:c7:
                    0b:59:42:21:c6:ee:0d:82:31:87:1b:fb:5a:db:3d:
                    94:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D5:19:69:75:02:E5:B7:D7:06:06:80:08:A4:68:C3:A7:8E:9F:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8e81ce99-7052-3d5a-a1c6-f58aa22a3e8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.82.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:09:e7:fc:57:89:5a:0c:33:0b:42:49:c4:35:60:b9:13:c9:
         a5:5a:ad:60:f5:63:36:50:9d:43:49:a6:3c:b3:a6:c0:e7:73:
         8b:20:59:6d:4d:84:26:2b:8b:d4:ea:e4:85:07:d0:f7:16:96:
         f7:4f:d5:c8:f2:05:de:a8:51:d7:69:6e:d3:0d:68:89:38:d5:
         1b:3b:f8:62:35:65:fe:6f:45:1f:d8:d3:4c:03:cc:6a:f9:f5:
         aa:70:cf:a8:b7:39:15:50:44:30:10:95:9a:83:3a:33:5b:15:
         4a:be:55:8b:bb:00:f4:9a:d9:ce:bc:32:28:22:7e:43:79:4a:
         40:e9:75:80:b2:e5:c8:c2:ab:9d:cd:34:3c:36:74:ba:79:ee:
         02:ed:f0:ce:40:50:f0:45:69:90:a5:90:4a:81:4b:9c:42:0b:
         1d:f2:8c:b7:8f:ce:f1:a8:dc:d8:9a:67:a9:4e:fc:ab:44:9c:
         5b:98:dd:ca:83:86:05:4d:56:58:72:56:40:2b:27:aa:e6:28:
         70:40:ef:a6:a5:6d:6c:74:1b:64:8b:25:a8:21:9a:51:78:5b:
         6d:db:d2:2b:13:69:92:de:08:3f:e2:33:82:36:fb:2b:95:1b:
         21:9f:60:88:cd:9d:08:ec:43:1f:80:c9:f1:1e:62:2b:23:c2:
         a8:0a:c7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:02:20 2026 by rpki-client