Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d825951c-1999-3b64-a1f3-dd5399525b23.roa
File:                     d825951c-1999-3b64-a1f3-dd5399525b23.roa (raw, json)
Hash identifier:          sRvo0yLjo+GdIPIaWCjq1SlD0/fqEdkhNl5Nqa4cgvs=
Subject key identifier:   EF:94:56:71:A5:DE:65:75:02:58:B1:7D:75:28:F5:08:F4:4A:22:4F
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584F7FE2FBFE5440419695D73C80
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d825951c-1999-3b64-a1f3-dd5399525b23.roa
Signing time:             Wed 14 Oct 2026 13:00:12 +0000
ROA not before:           Wed 14 Oct 2026 13:00:12 +0000
ROA not after:            Tue 12 Jan 2027 14:00:12 +0000
asID:                     22616
IP address blocks:        137.83.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:e2:fb:fe:54:40:41:96:95:d7:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 14 13:00:12 2026 GMT
            Not After : Jan 12 14:00:12 2027 GMT
        Subject: CN=f335c92b-d435-4710-8f47-406f334a1953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f8:4c:26:cb:a7:38:4a:05:9c:49:5f:7a:e6:
                    4a:0a:39:e5:a3:87:4c:fb:43:44:17:86:a3:6c:47:
                    dd:66:f4:cb:9b:3e:01:c3:06:c6:47:64:38:a5:1f:
                    81:fc:4d:41:1c:5a:7c:18:13:fd:4e:c6:b3:33:4d:
                    79:ee:e3:20:86:6d:74:04:55:45:07:25:85:5b:ce:
                    a8:0d:73:14:e4:62:83:30:d1:f9:49:33:b3:9d:2a:
                    b7:35:a7:5d:96:84:b3:5b:1b:26:f3:05:8b:42:3e:
                    79:da:24:7f:4e:ea:3f:60:fb:26:11:2d:57:92:fa:
                    d6:93:61:55:91:fa:1d:e9:56:21:66:77:4c:19:40:
                    0e:0a:e8:88:e1:5f:c6:fc:ee:bc:14:a9:f3:94:a9:
                    a9:a3:5c:f0:9e:cb:a6:83:a7:8e:66:46:0a:c8:25:
                    a8:a3:38:f9:82:71:d0:89:a4:ec:6e:a8:2e:19:c6:
                    86:8e:dd:1d:92:35:d4:53:b9:f8:01:95:c0:8c:24:
                    a5:65:ed:b8:2d:1c:4d:64:8d:b8:de:2e:5c:d3:ad:
                    34:61:ee:37:57:6d:62:44:ee:a3:f9:e8:8c:84:0b:
                    6a:36:3b:14:4d:95:a3:eb:ea:31:8e:71:d4:a4:1c:
                    82:b4:2c:f3:81:41:7b:40:ca:d9:86:14:53:7a:c7:
                    f5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:94:56:71:A5:DE:65:75:02:58:B1:7D:75:28:F5:08:F4:4A:22:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d825951c-1999-3b64-a1f3-dd5399525b23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:2c:e9:45:8c:29:40:59:27:51:3b:ef:d7:cf:67:99:0c:ec:
         da:88:19:fa:7b:f0:93:8d:5e:88:b6:73:07:24:df:05:63:e5:
         99:4a:ab:de:e9:9d:e1:fe:3e:36:ca:fd:fe:9e:97:d6:d9:e8:
         43:2a:25:bf:de:21:96:87:74:c3:76:b1:00:af:7b:91:4d:ca:
         54:1d:91:39:6d:d9:06:1b:b3:26:26:f8:42:ed:45:7b:75:98:
         95:97:0a:ad:9d:f6:68:c6:a2:ce:d0:0a:b3:c8:51:38:3c:04:
         f7:ab:3a:5e:c3:62:ac:7a:ee:3a:4f:58:ad:41:e8:77:d7:3b:
         fd:9d:5f:57:71:5e:a1:90:2d:bf:f5:10:24:8a:2f:95:95:46:
         a2:73:89:ef:a4:a9:04:64:0b:3a:3c:b2:ba:e1:d0:f4:0e:26:
         8e:c1:c8:3a:04:a8:56:c2:33:7f:03:b4:ac:86:af:d6:33:d4:
         27:b4:3f:c6:f8:3b:9a:ca:4e:31:a3:b2:e8:36:ac:73:95:ce:
         ee:b2:d9:fe:20:d8:ce:29:63:cb:d1:de:58:79:9b:fd:04:14:
         6f:cc:fb:e7:d4:12:90:76:c0:43:51:4c:5e:79:41:30:fd:55:
         04:60:c9:e2:f0:b0:1c:f1:d5:0c:13:39:be:d0:99:60:af:dc:
         51:38:9f:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/4vv+VEBBlpXXPIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk
ZjMzNWM5MmItZDQzNS00NzEwLThmNDctNDA2ZjMzNGExOTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivhMJsunOEoFnElfeuZKCjnlo4dM+0NEF4aj
bEfdZvTLmz4BwwbGR2Q4pR+B/E1BHFp8GBP9TsazM0157uMghm10BFVFByWFW86o
DXMU5GKDMNH5STOznSq3NaddloSzWxsm8wWLQj552iR/Tuo/YPsmES1XkvrWk2FV
kfod6VYhZndMGUAOCuiI4V/G/O68FKnzlKmpo1zwnsumg6eOZkYKyCWoozj5gnHQ
iaTsbqguGcaGjt0dkjXUU7n4AZXAjCSlZe24LRxNZI243i5c0600Ye43V21iRO6j
+eiMhAtqNjsUTZWj6+oxjnHUpByCtCzzgUF7QMrZhhRTesf1DQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO+UVnGl3mV1AlixfXUo9Qj0SiJPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZDgyNTk1MWMtMTk5OS0z
YjY0LWExZjMtZGQ1Mzk5NTI1YjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiVOaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJcs6UWMKUBZJ1E779fPZ5kM7NqIGfp78JONXoi2cwck3wVj5ZlKq97p
neH+PjbK/f6el9bZ6EMqJb/eIZaHdMN2sQCve5FNylQdkTlt2QYbsyYm+ELtRXt1
mJWXCq2d9mjGos7QCrPIUTg8BPerOl7DYqx67jpPWK1B6HfXO/2dX1dxXqGQLb/1
ECSKL5WVRqJzie+kqQRkCzo8srrh0PQOJo7ByDoEqFbCM38DtKyGr9Yz1Ce0P8b4
O5rKTjGjsug2rHOVzu6y2f4g2M4pY8vR3lh5m/0EFG/M++fUEpB2wENRTF55QTD9
VQRgyeLwsBzx1QwTOb7QmWCv3FE4nwk=
-----END CERTIFICATE-----
Generated at Fri Oct 30 20:26:49 2026 by rpki-client