Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d3114700-ecc1-390f-8b8f-e4d642d26af4.roa
File:                     d3114700-ecc1-390f-8b8f-e4d642d26af4.roa (raw, json)
Hash identifier:          9O2dj+qLMOUB+C50gV9V4QL96kRM9yfXm8Jkaod98k4=
Subject key identifier:   0C:0F:BF:06:5C:43:3C:B2:2B:B1:A7:98:69:43:10:47:51:B1:92:AA
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584F7FE2FD830901C798B2F69C80
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d3114700-ecc1-390f-8b8f-e4d642d26af4.roa
Signing time:             Wed 14 Oct 2026 13:00:12 +0000
ROA not before:           Wed 14 Oct 2026 13:00:12 +0000
ROA not after:            Tue 12 Jan 2027 14:00:12 +0000
asID:                     62044
IP address blocks:        137.83.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:e2:fd:83:09:01:c7:98:b2:f6:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 14 13:00:12 2026 GMT
            Not After : Jan 12 14:00:12 2027 GMT
        Subject: CN=69481292-9e84-4cc8-96f2-d5a73613e1af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:68:38:8f:92:81:09:82:38:c6:b9:59:7c:b9:
                    ec:9f:cb:2c:27:e6:4d:32:b5:4a:4a:64:94:03:3b:
                    4d:e3:8c:aa:56:e3:11:26:24:a3:53:44:a3:bf:7d:
                    d1:0c:af:c1:04:4e:87:0b:03:e8:5c:b0:40:d4:f6:
                    a5:8f:ad:0e:69:91:79:5d:58:7c:19:1e:d6:8e:3f:
                    09:9e:31:43:9a:04:74:73:a2:1a:fd:7e:7e:01:9b:
                    e9:40:6a:f2:32:20:f0:85:2c:db:39:02:71:10:10:
                    4d:d5:66:6c:2d:83:43:27:d2:da:3e:2a:83:a1:39:
                    98:4d:19:76:19:56:9b:64:b1:8b:14:0a:df:93:72:
                    ef:fa:c5:c6:38:46:42:09:5f:e6:6b:99:6a:01:aa:
                    9a:7a:79:8e:a6:50:d3:f1:69:33:36:0a:f3:ea:5b:
                    8f:d8:0f:1c:00:16:95:3e:dc:2f:49:90:d8:9d:c9:
                    d9:72:0f:23:1b:61:52:ed:40:c3:cd:39:35:6d:6c:
                    23:04:15:27:ad:0c:09:b6:0f:3d:71:7b:d7:dd:d4:
                    dd:89:7c:d4:06:00:be:d3:c2:a4:13:e7:9a:36:9c:
                    db:64:c5:c9:a0:3d:74:e4:cd:12:3a:45:bf:61:a1:
                    74:5b:54:8c:91:4d:e8:f1:b8:55:d6:cf:ac:9a:c9:
                    fa:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0F:BF:06:5C:43:3C:B2:2B:B1:A7:98:69:43:10:47:51:B1:92:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d3114700-ecc1-390f-8b8f-e4d642d26af4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:25:ad:5d:35:8a:86:fc:5b:a6:b4:3a:8f:32:4c:9d:22:b6:
         d1:e9:bd:f0:92:a6:d4:e6:d5:38:0f:4a:6a:6f:25:e2:9a:d4:
         50:c3:be:bc:01:84:af:6d:1a:a7:65:53:57:a5:44:83:6d:0a:
         b9:0b:8e:6d:14:b7:d7:57:2c:7e:15:17:e3:01:4b:d7:31:b8:
         62:c5:c3:6a:d5:95:22:e1:0e:50:29:f1:d8:25:8a:5d:44:35:
         3e:43:2f:c3:92:3e:b3:d1:4b:aa:c4:ac:49:1f:00:b4:6b:2f:
         2b:40:43:8f:9f:bc:6a:86:5f:24:c2:d3:fa:55:ad:97:ce:4f:
         cf:cd:97:27:1b:06:b1:8f:9c:80:a5:80:8a:db:5d:88:5b:bf:
         41:7f:73:a0:22:1f:4d:bb:0d:cf:a9:84:c4:57:07:bd:b3:09:
         96:2f:09:61:25:f2:b3:72:87:79:c2:84:05:67:45:3c:9b:51:
         5e:72:14:c8:78:39:04:e6:41:1e:26:e4:b5:df:2d:ae:88:eb:
         01:79:75:d5:d9:15:84:26:c1:61:a1:66:15:b6:73:e6:7b:81:
         38:4e:3a:38:32:82:93:f5:c3:5d:65:bc:79:2b:0e:0c:73:36:
         f5:0b:9f:87:8c:21:e3:1c:55:bc:27:83:0f:f2:ff:c0:6d:08:
         82:29:6f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:23:00 2026 by rpki-client