Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5298b356-3463-3962-ae50-3b3da68988a2.roa
File:                     5298b356-3463-3962-ae50-3b3da68988a2.roa (raw, json)
Hash identifier:          FnDiuyvBIBsTQUd+md5XG9/J/k0mrahYkmHezAj14vQ=
Subject key identifier:   23:D7:E3:4E:D3:CA:E4:43:55:6E:A2:47:ED:93:78:57:E8:66:4F:4F
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3CF1CF42A35D35AABC5A40
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5298b356-3463-3962-ae50-3b3da68988a2.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     62044
IP address blocks:        137.83.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3c:f1:cf:42:a3:5d:35:aa:bc:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=6b759393-9514-49b3-9a0d-3cfe289a6252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:77:49:2f:3e:2a:36:04:5f:17:69:48:67:f5:
                    cc:15:e6:b6:b2:b2:63:87:5f:a4:69:23:92:4e:96:
                    d7:da:ab:77:d3:3f:9e:0f:b3:33:32:d1:20:db:ff:
                    9a:97:50:60:50:92:57:b7:66:14:5e:c6:cb:2e:af:
                    de:99:1f:6c:b5:7e:49:2b:1c:bd:0d:cb:ed:b6:f4:
                    6b:3e:78:0a:99:17:ae:97:24:a1:34:b5:7d:2f:43:
                    8b:d0:de:0f:5e:88:a1:bd:76:62:3c:ce:bd:1a:4c:
                    14:9f:9f:d7:93:c7:5d:cb:11:4f:bc:24:ec:0d:69:
                    75:c0:5d:3f:33:c7:35:3e:17:03:90:9d:65:f4:9b:
                    f7:48:f5:15:a4:74:53:32:9a:f3:c2:06:0b:7f:19:
                    5f:6f:36:6b:e6:7b:89:ab:cf:57:2a:32:29:22:41:
                    8c:e8:bb:ca:76:46:8c:ca:f9:27:ca:8a:33:41:61:
                    d0:3e:dd:33:fc:7d:d1:48:67:35:d6:55:a3:21:40:
                    d2:f9:3b:53:28:c4:ef:ea:1e:35:06:ad:93:87:6d:
                    47:5c:6c:6b:43:56:d9:3a:98:86:ca:84:67:4e:42:
                    1d:c5:25:74:9f:6d:48:cb:54:17:b8:25:8c:70:a6:
                    fa:fd:4a:70:e8:d7:14:01:37:38:b9:2a:f1:53:29:
                    f7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D7:E3:4E:D3:CA:E4:43:55:6E:A2:47:ED:93:78:57:E8:66:4F:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5298b356-3463-3962-ae50-3b3da68988a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:31:ac:86:c6:35:c9:84:9c:fd:a6:bc:b9:0d:7a:28:6b:2c:
         aa:dd:cc:45:35:d7:bd:eb:aa:f3:65:0b:a5:2b:8e:ed:2a:0f:
         e6:86:5d:fd:7b:8d:66:dd:26:d1:97:59:73:95:23:1c:20:44:
         00:a4:fa:cd:3c:31:ee:c0:82:82:f2:4e:6e:63:5c:78:82:8f:
         8d:ee:d7:28:42:c1:45:0c:39:5b:74:65:dc:f7:e0:f8:10:79:
         b3:65:4a:27:79:ee:b1:33:ea:35:30:39:78:50:09:f2:cf:2d:
         f4:c9:c1:74:24:d4:b2:99:50:b9:8b:de:55:17:a8:e9:13:58:
         cf:98:6b:ab:f1:93:05:61:d3:b7:2c:fa:42:25:6a:1b:46:a0:
         bd:2b:de:92:c4:8d:d9:3a:ec:df:91:96:3f:8a:80:63:ea:51:
         1d:e5:ca:cf:2c:a6:e6:c3:88:59:0a:11:76:fe:87:58:10:04:
         f0:bb:18:af:e3:7b:d3:ed:13:11:03:34:d8:77:2b:d5:8b:75:
         69:9d:be:d8:89:dd:53:7a:21:0d:98:18:55:aa:4c:a8:46:2f:
         d6:a2:8b:64:97:7a:c1:f1:ed:4a:76:69:5a:02:23:7c:22:59:
         60:93:f3:c1:42:96:7b:83:99:63:e5:25:86:10:af:1d:7f:cd:
         92:5d:18:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 08:20:21 2025 by rpki-client