Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8cb7ceae-61fb-3aac-b34c-4b978bac0836.roa
File:                     8cb7ceae-61fb-3aac-b34c-4b978bac0836.roa (raw, json)
Hash identifier:          wTarbWcSPHP/nY74QNwI0X3Ps3FaUdVVotb54fNreGw=
Subject key identifier:   F1:0C:20:72:ED:06:69:17:1E:C3:7E:BB:0B:FA:F6:FA:56:2E:A7:9B
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584F7FE2F5B931F47C92020EDE00
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8cb7ceae-61fb-3aac-b34c-4b978bac0836.roa
Signing time:             Wed 14 Oct 2026 13:00:12 +0000
ROA not before:           Wed 14 Oct 2026 13:00:12 +0000
ROA not after:            Tue 12 Jan 2027 14:00:12 +0000
asID:                     22616
IP address blocks:        137.83.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:e2:f5:b9:31:f4:7c:92:02:0e:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 14 13:00:12 2026 GMT
            Not After : Jan 12 14:00:12 2027 GMT
        Subject: CN=a78c7162-5579-4a20-8a01-d1030e8051a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7b:8c:55:81:ab:ea:0e:f4:d0:d2:69:43:f9:
                    ff:04:97:8d:be:32:73:dc:91:a1:7a:00:02:f6:10:
                    13:53:df:80:bd:0e:46:cc:2b:da:5e:a2:ef:b5:e5:
                    28:74:64:b0:b0:d7:2f:b3:dd:c5:91:46:32:f5:d6:
                    19:2e:2e:eb:cf:26:b5:c5:31:51:ef:60:90:61:1f:
                    ec:0e:07:6d:81:eb:32:63:41:d3:4b:22:bc:e4:1e:
                    a5:c4:32:75:99:dc:3f:bf:bb:a9:04:84:dc:ae:af:
                    9e:04:90:67:b8:4e:5d:72:4b:90:18:bd:02:c3:c6:
                    c6:e4:7a:54:85:ad:92:a8:09:d1:22:64:e6:8d:9c:
                    2f:89:89:ad:5b:65:a7:bf:07:be:07:7f:e8:99:a1:
                    01:2c:de:a4:45:33:2c:fc:e6:f0:26:0d:42:cc:2e:
                    5a:f6:aa:ea:c9:e8:8d:08:f4:41:79:1a:4f:a9:87:
                    e9:55:53:c3:1b:5f:d6:23:53:df:5f:0e:07:86:25:
                    eb:25:21:46:16:f6:1c:85:7c:21:2b:ff:f5:3a:b7:
                    59:c9:93:73:e7:10:3c:25:69:a8:e2:f6:c8:18:3a:
                    8c:a0:9b:c4:34:ce:bc:a8:97:08:fd:bc:1d:b8:b0:
                    63:0f:72:17:ac:fd:21:0b:bc:da:f7:54:ca:40:97:
                    15:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0C:20:72:ED:06:69:17:1E:C3:7E:BB:0B:FA:F6:FA:56:2E:A7:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8cb7ceae-61fb-3aac-b34c-4b978bac0836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:c1:e7:9d:7c:f8:bd:39:b0:e2:93:55:17:cf:92:dd:31:89:
         bb:dc:26:0c:26:e7:f9:56:96:8e:54:c5:44:31:1f:d7:3a:cb:
         38:4e:af:8a:ea:d1:2f:a9:a6:85:47:fa:cc:c5:d2:c3:65:20:
         48:c2:52:a0:5c:8c:71:cb:f0:b4:1d:ea:7e:21:9b:8b:32:ee:
         92:b0:a1:c7:91:b1:69:bf:3c:6d:68:ae:c1:84:46:ec:8c:fe:
         86:c9:68:5e:dd:56:0d:d5:68:d4:b2:27:97:84:e7:3a:c2:1c:
         60:33:04:2e:12:82:5b:df:5f:a5:21:74:00:8a:60:f0:f7:a7:
         95:cd:69:b2:2f:1a:00:41:94:68:c3:f7:7e:9c:d6:3b:b1:10:
         e1:b1:8c:c4:f4:72:e8:86:22:3c:b7:52:e9:6a:16:36:b9:cc:
         65:f6:9b:e7:45:a0:4c:92:b9:6c:37:49:09:a8:c9:fc:19:c5:
         56:0a:a1:b8:b4:b7:66:c6:df:62:9d:2c:b6:10:77:16:3a:37:
         3a:e8:43:a9:c1:e0:a5:17:8f:3c:82:90:ba:3a:72:4f:60:9b:
         b1:a4:1a:ab:84:82:3f:1f:92:e4:58:30:7b:b0:eb:bf:39:48:
         73:fa:89:a0:5d:8b:65:89:80:43:ec:cf:4d:4e:3a:04:6c:21:
         8a:36:c8:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/4vW5MfR8kgIO3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk
YTc4YzcxNjItNTU3OS00YTIwLThhMDEtZDEwMzBlODA1MWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHuMVYGr6g700NJpQ/n/BJeNvjJz3JGhegAC
9hATU9+AvQ5GzCvaXqLvteUodGSwsNcvs93FkUYy9dYZLi7rzya1xTFR72CQYR/s
DgdtgesyY0HTSyK85B6lxDJ1mdw/v7upBITcrq+eBJBnuE5dckuQGL0Cw8bG5HpU
ha2SqAnRImTmjZwviYmtW2Wnvwe+B3/omaEBLN6kRTMs/ObwJg1CzC5a9qrqyeiN
CPRBeRpPqYfpVVPDG1/WI1PfXw4HhiXrJSFGFvYchXwhK//1OrdZyZNz5xA8JWmo
4vbIGDqMoJvENM68qJcI/bwduLBjD3IXrP0hC7za91TKQJcV0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPEMIHLtBmkXHsN+uwv69vpWLqebMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvOGNiN2NlYWUtNjFmYi0z
YWFjLWIzNGMtNGI5NzhiYWMwODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiVOsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE3B5518+L05sOKTVRfPkt0xibvcJgwm5/lWlo5UxUQxH9c6yzhOr4rq
0S+ppoVH+szF0sNlIEjCUqBcjHHL8LQd6n4hm4sy7pKwoceRsWm/PG1orsGERuyM
/obJaF7dVg3VaNSyJ5eE5zrCHGAzBC4SglvfX6UhdACKYPD3p5XNabIvGgBBlGjD
936c1juxEOGxjMT0cuiGIjy3UulqFja5zGX2m+dFoEySuWw3SQmoyfwZxVYKobi0
t2bG32KdLLYQdxY6NzroQ6nB4KUXjzyCkLo6ck9gm7GkGquEgj8fkuRYMHuw6785
SHP6iaBdi2WJgEPsz01OOgRsIYo2yK4=
-----END CERTIFICATE-----
Generated at Fri Oct 30 13:49:40 2026 by rpki-client