Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b34ae979-a469-36da-a7ff-ca687665a8d3.roa
File:                     b34ae979-a469-36da-a7ff-ca687665a8d3.roa (raw, json)
Hash identifier:          vcb3Z9+sb4tFoOnssiSlGCw/h1XmyUk7Z5epwhtjpQI=
Subject key identifier:   44:E6:3C:EA:DF:2E:AB:3F:C0:DA:A5:0D:E9:B2:46:C8:09:01:85:F5
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584F7FE2FB4EAE8A2F63FFFFA4E0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b34ae979-a469-36da-a7ff-ca687665a8d3.roa
Signing time:             Wed 14 Oct 2026 13:00:12 +0000
ROA not before:           Wed 14 Oct 2026 13:00:12 +0000
ROA not after:            Tue 12 Jan 2027 14:00:12 +0000
asID:                     22616
IP address blocks:        137.83.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:e2:fb:4e:ae:8a:2f:63:ff:ff:a4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 14 13:00:12 2026 GMT
            Not After : Jan 12 14:00:12 2027 GMT
        Subject: CN=a3a8e85d-76ad-4310-b2ef-e1e988a38f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d5:12:0b:01:2b:c8:d1:7e:e8:f9:87:0d:1e:
                    54:9b:7a:10:e3:e5:3b:79:da:21:0a:e4:35:d8:41:
                    3e:e8:99:fa:af:6e:7c:d2:3e:53:8d:6a:c1:92:c9:
                    6c:96:56:55:b5:4f:72:31:17:77:72:c3:6c:90:12:
                    d1:9d:06:71:cb:d5:82:2b:e9:fb:b1:bc:b5:58:ce:
                    9a:c5:4d:c7:1b:ff:84:4e:9b:80:7e:c2:aa:a0:37:
                    a6:2d:6b:1c:5e:56:30:3e:c9:5d:2d:4d:fc:a2:5e:
                    b2:ad:63:48:c3:05:30:35:a2:bf:c2:6b:3a:01:25:
                    25:bc:69:b3:f4:d2:d1:4c:9e:0a:d4:22:9c:f2:32:
                    96:fd:b0:7d:ff:80:5c:2b:10:10:72:e7:db:cc:89:
                    9f:81:86:6e:ef:be:38:3b:47:13:31:f7:35:a5:bb:
                    ca:c6:0d:e2:b3:14:a5:6c:34:33:97:76:35:ea:e2:
                    ae:6b:f1:f9:1b:93:44:6a:79:d0:34:5f:38:45:1c:
                    a8:73:56:d9:b4:d2:23:23:58:3d:b7:85:6c:77:c7:
                    7d:f7:a6:4a:53:6f:96:ab:f7:b0:f2:ee:1d:69:c7:
                    6c:f1:17:da:c1:83:5f:9c:18:45:49:06:c9:9c:52:
                    df:ce:75:c9:d8:7a:95:30:91:ce:ce:da:90:1b:ca:
                    ae:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E6:3C:EA:DF:2E:AB:3F:C0:DA:A5:0D:E9:B2:46:C8:09:01:85:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b34ae979-a469-36da-a7ff-ca687665a8d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:e5:54:e7:54:73:5a:f1:77:a5:c2:2f:6b:96:78:d4:60:37:
         36:24:8a:4f:96:7f:1c:11:3d:97:31:dc:ec:b9:a4:80:3e:de:
         dd:3f:4f:8f:0a:e2:ce:eb:8c:96:14:bd:4c:12:a9:bf:24:ac:
         74:13:99:19:38:78:3f:a9:3a:09:11:d3:16:34:b6:b4:4a:c6:
         c7:7c:f9:91:50:6f:47:c1:8b:0c:00:5a:89:12:99:d7:f3:53:
         ef:92:54:b8:f3:50:c5:3b:33:b1:a6:3e:9c:0b:6a:d6:75:04:
         7c:21:e1:a4:8c:96:5b:96:36:dd:7c:fb:d2:03:f3:cc:66:d5:
         3c:1a:ed:d0:b7:9c:eb:5e:85:9e:5c:ff:85:c2:80:ca:d2:b7:
         23:b3:f6:4e:bc:df:41:2d:a0:75:10:b4:bc:47:3e:e2:99:7c:
         74:1a:b6:ec:b5:72:60:e9:77:5c:e9:8a:12:36:5f:89:c3:10:
         5f:a7:4c:31:30:25:dc:ae:c9:b0:4f:7d:25:48:3e:f3:d2:ab:
         bd:7a:0f:9c:f5:dc:3a:4b:13:ac:a7:26:75:83:61:01:b0:29:
         31:f0:79:fd:b7:3f:ac:62:18:f1:4b:d3:cf:9c:8d:6d:26:0c:
         07:88:6d:33:1a:76:c2:ab:1b:de:19:20:78:c8:3e:ce:2f:c4:
         29:12:e5:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/4vtOroovY///pOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk
YTNhOGU4NWQtNzZhZC00MzEwLWIyZWYtZTFlOTg4YTM4ZjRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtUSCwEryNF+6PmHDR5Um3oQ4+U7edohCuQ1
2EE+6Jn6r2580j5TjWrBkslsllZVtU9yMRd3csNskBLRnQZxy9WCK+n7sby1WM6a
xU3HG/+ETpuAfsKqoDemLWscXlYwPsldLU38ol6yrWNIwwUwNaK/wms6ASUlvGmz
9NLRTJ4K1CKc8jKW/bB9/4BcKxAQcufbzImfgYZu7744O0cTMfc1pbvKxg3isxSl
bDQzl3Y16uKua/H5G5NEannQNF84RRyoc1bZtNIjI1g9t4Vsd8d996ZKU2+Wq/ew
8u4dacds8RfawYNfnBhFSQbJnFLfznXJ2HqVMJHOztqQG8quTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFETmPOrfLqs/wNqlDemyRsgJAYX1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYjM0YWU5NzktYTQ2OS0z
NmRhLWE3ZmYtY2E2ODc2NjVhOGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiVOEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMPlVOdUc1rxd6XCL2uWeNRgNzYkik+WfxwRPZcx3Oy5pIA+3t0/T48K
4s7rjJYUvUwSqb8krHQTmRk4eD+pOgkR0xY0trRKxsd8+ZFQb0fBiwwAWokSmdfz
U++SVLjzUMU7M7GmPpwLatZ1BHwh4aSMlluWNt18+9ID88xm1Twa7dC3nOtehZ5c
/4XCgMrStyOz9k6830EtoHUQtLxHPuKZfHQatuy1cmDpd1zpihI2X4nDEF+nTDEw
JdyuybBPfSVIPvPSq716D5z13DpLE6ynJnWDYQGwKTHwef23P6xiGPFL08+cjW0m
DAeIbTMadsKrG94ZIHjIPs4vxCkS5b0=
-----END CERTIFICATE-----
Generated at Fri Oct 30 13:48:18 2026 by rpki-client