Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/185388e0-1b0a-34e2-b35f-b8f7cea7bd61.roa
File:                     185388e0-1b0a-34e2-b35f-b8f7cea7bd61.roa (raw, json)
Hash identifier:          1bfx8I5ohJDEn0bsPZ6/vRnIoJwjSi2qW96mjZR8IB4=
Subject key identifier:   D9:28:94:48:BE:69:FE:C4:85:C9:52:CE:50:85:13:C6:17:6D:37:3B
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584F7FE2EFAB4B7007B3E5C17820
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/185388e0-1b0a-34e2-b35f-b8f7cea7bd61.roa
Signing time:             Wed 14 Oct 2026 13:00:12 +0000
ROA not before:           Wed 14 Oct 2026 13:00:12 +0000
ROA not after:            Tue 12 Jan 2027 14:00:12 +0000
asID:                     62044
IP address blocks:        137.83.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:e2:ef:ab:4b:70:07:b3:e5:c1:78:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 14 13:00:12 2026 GMT
            Not After : Jan 12 14:00:12 2027 GMT
        Subject: CN=eed852db-031d-4255-8fd0-a729171476c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6c:7d:60:40:1e:3e:be:3d:a9:f7:17:88:cb:
                    d4:b2:c5:ae:9c:aa:08:64:49:4e:d5:2d:cc:c5:24:
                    a9:72:62:90:27:be:7f:5d:7d:8b:dd:ec:77:18:5d:
                    6b:47:6c:01:f2:29:9c:33:b9:3d:61:97:31:4c:84:
                    dc:d7:e9:a8:a9:9f:88:f1:6c:48:ab:c6:63:dc:11:
                    39:ec:36:a0:db:56:af:bd:24:2b:af:1e:32:2c:36:
                    26:ba:14:ef:ad:e3:b8:64:73:93:01:55:2b:c2:fe:
                    f5:48:28:48:04:dd:dd:9d:85:40:73:2b:69:f4:7e:
                    6f:dd:0f:f2:64:a4:ba:ba:f9:4a:8e:42:81:c3:15:
                    0f:54:1f:a6:02:47:d6:5b:11:45:5b:30:1d:5c:c9:
                    28:16:12:fa:1b:a2:2c:58:40:0d:15:a7:be:a1:5a:
                    c0:ba:76:5a:b1:97:a8:3a:ee:f2:9d:d7:bc:f4:9b:
                    2f:29:a9:d1:77:d3:47:b3:a4:dd:5a:75:91:0c:72:
                    1e:5f:e5:70:d0:0b:3b:04:ba:74:97:ce:a7:87:cf:
                    04:ed:58:0b:80:52:1e:38:56:58:b0:a6:ef:b6:e0:
                    af:ee:5c:e7:ea:16:32:37:3b:55:f0:a2:ad:c5:86:
                    c3:cc:48:8a:63:07:90:ff:eb:d4:17:66:1a:f5:7f:
                    34:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:28:94:48:BE:69:FE:C4:85:C9:52:CE:50:85:13:C6:17:6D:37:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/185388e0-1b0a-34e2-b35f-b8f7cea7bd61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:fd:68:aa:e0:22:0c:1e:4c:2e:53:00:b2:e7:e8:bf:ef:f1:
         85:d0:6b:ec:ab:b7:8e:d2:d9:7f:82:30:6e:4b:15:e6:5f:f5:
         82:b8:ba:07:fe:b9:d8:6b:5a:60:4c:3c:33:66:17:4e:89:a5:
         71:26:06:16:06:17:46:60:27:21:3c:8d:54:86:d5:17:8f:b3:
         3e:9f:a4:6c:15:82:4d:fa:07:14:63:e9:7d:44:24:ce:7e:2a:
         f1:4f:dc:e2:8d:25:ee:a1:57:13:b1:ce:f4:87:67:37:78:ea:
         07:c6:54:e3:d2:aa:d8:c0:1a:f8:e0:2f:61:67:ec:f1:1f:64:
         d6:b4:4f:e7:35:68:2e:69:38:28:2d:ba:5e:4f:f2:87:75:47:
         58:fb:94:8b:34:ea:6b:09:45:14:bb:da:13:d3:2b:bc:11:6a:
         ef:ef:0b:d4:c8:0c:ab:4d:bc:c7:a2:62:ff:b3:d2:cf:c1:2c:
         92:07:0e:d7:ce:01:a6:28:f5:67:de:6f:b8:80:e5:cb:4b:db:
         35:04:58:d1:5b:91:8b:11:30:f3:f0:04:f9:03:56:b2:e8:3d:
         cf:d4:ef:6a:03:f1:fa:c7:69:e2:88:2d:e1:d0:53:00:f9:c1:
         39:05:a9:de:d2:49:4d:08:be:9c:fe:c2:b9:de:51:98:f1:02:
         e4:3b:6b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:55:49 2026 by rpki-client