Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9517fde8-a2e0-37e5-91f2-d5586b23dd61.roa
File:                     9517fde8-a2e0-37e5-91f2-d5586b23dd61.roa (raw, json)
Hash identifier:          Z0Xhdn1RUrNcLsj0Y8RZ6R0u7HNmEDZc7R9jmGHEqzY=
Subject key identifier:   CE:2B:3B:19:11:7D:50:F6:5C:5C:E0:C8:88:5B:C5:60:C9:D3:9D:F5
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3CF2F2EEBAAE97D2DE2900
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9517fde8-a2e0-37e5-91f2-d5586b23dd61.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     53813
IP address blocks:        137.83.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3c:f2:f2:ee:ba:ae:97:d2:de:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=61a7c4e1-40b1-40b2-9c41-1a6829c7bb04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fc:df:a0:37:e4:c6:02:c8:d2:fa:61:29:bc:
                    39:06:08:2b:27:f2:4b:d8:1f:db:42:c6:4a:0b:ae:
                    67:76:99:8a:8d:2b:f0:74:87:70:eb:2c:ce:50:7c:
                    2f:53:3b:21:ae:13:c2:59:04:12:8c:0b:d9:c9:00:
                    63:92:96:5c:1a:dd:c1:3b:fc:6e:46:e9:96:29:95:
                    d4:d8:6b:28:7d:73:79:a3:2c:00:8c:7f:9a:3e:aa:
                    75:4d:55:a3:6d:34:b9:e0:46:5c:9b:a8:23:67:14:
                    14:10:f7:6a:4f:d6:3c:0d:f5:8d:3a:fd:8d:c5:e9:
                    55:a8:49:af:e6:7c:fc:98:8c:f8:fd:6d:88:10:aa:
                    ba:15:34:2b:6b:ea:fb:c4:7e:37:72:8f:15:84:0f:
                    90:c0:fe:10:d3:fb:e9:9f:ca:bf:0d:38:0a:b7:9e:
                    cd:2f:5b:f0:21:0f:de:72:aa:00:12:e6:54:ca:d6:
                    13:b0:33:e0:57:cd:6c:d8:1d:a9:6e:66:37:20:36:
                    b4:d8:d4:f8:15:a0:54:93:cb:87:92:73:58:7f:ac:
                    43:65:56:b3:ce:71:13:1d:05:81:6d:14:07:20:2a:
                    b3:59:5d:0f:b5:b0:f7:c2:a5:85:af:71:b4:00:91:
                    d4:2f:28:80:92:fe:45:b9:69:4c:eb:3c:f5:0a:54:
                    b4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2B:3B:19:11:7D:50:F6:5C:5C:E0:C8:88:5B:C5:60:C9:D3:9D:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9517fde8-a2e0-37e5-91f2-d5586b23dd61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:53:97:b5:bb:5e:c7:3d:b4:d5:b4:cf:44:0f:da:cb:cb:48:
         c9:63:34:90:00:8e:bd:89:12:76:e2:b9:c8:dd:da:32:43:08:
         a9:89:27:9d:ad:4e:eb:44:f2:8f:ff:6b:b0:95:92:70:dd:df:
         71:be:00:4d:6a:c7:e0:87:e5:0d:3f:09:53:d8:16:82:14:f1:
         62:c1:06:5f:b6:61:b3:b0:3e:48:8b:c3:7f:a1:6b:77:95:c5:
         60:85:8a:83:73:59:c2:6b:85:a0:3a:d0:e7:a5:26:a5:88:ad:
         ac:09:82:98:ed:9a:8c:49:07:de:1f:8c:5e:4b:d7:89:83:51:
         bc:11:0c:86:c0:7f:0c:cf:78:0f:46:10:9d:c0:76:42:d0:34:
         d7:40:be:df:59:a3:ce:5e:e9:aa:8b:27:0c:ca:ea:85:c0:e9:
         bd:fd:23:3b:ce:1c:83:0e:c9:8d:e4:d4:f3:bd:6d:d0:df:ef:
         67:5f:a9:42:a2:3a:1b:ab:16:38:da:63:e8:47:5d:74:88:85:
         a5:45:33:b1:94:eb:72:c0:ca:ee:8b:ca:ea:bb:42:d8:1c:b1:
         2f:29:7d:85:3a:3a:d9:04:d5:45:fa:27:e8:96:1c:b0:36:6e:
         77:26:5d:0c:45:c0:cc:76:8a:6a:c5:f4:6a:5d:41:65:c4:cf:
         4e:0d:51:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 02:14:19 2025 by rpki-client