Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dc99c8f3-0cb4-33a4-a51e-f0d35e5cb001.roa
File:                     dc99c8f3-0cb4-33a4-a51e-f0d35e5cb001.roa (raw, json)
Hash identifier:          c19QEsXNx8cUSJOXVoKP+YD4t4VIfQIZyZ0Cq9ufJtk=
Subject key identifier:   52:FB:90:10:CE:54:97:D4:C0:4B:55:80:FC:D2:31:21:E1:34:EC:24
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3CF3865898BAF4F96AE858
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dc99c8f3-0cb4-33a4-a51e-f0d35e5cb001.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     62044
IP address blocks:        137.83.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3c:f3:86:58:98:ba:f4:f9:6a:e8:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=e8edb52b-1aa6-4cbf-92b8-d1bd42f8ad57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:19:73:09:16:18:48:25:ad:81:f1:d6:fa:4f:
                    b5:27:2e:86:ad:48:07:5e:cd:17:08:fd:03:0b:80:
                    58:7d:4e:5f:17:c0:ad:a4:12:da:2f:fb:32:58:2d:
                    08:99:ba:3a:3c:75:07:04:f7:8b:d3:ab:ce:9a:49:
                    e3:4a:4e:19:74:11:05:bb:90:53:03:be:f2:86:c8:
                    c5:33:76:b8:47:ac:19:70:31:64:2a:c7:62:d8:3f:
                    0c:59:8a:b2:01:c3:fb:4f:7c:cb:00:17:8f:f8:53:
                    11:56:25:1c:a5:9b:54:8c:e1:61:af:dd:37:23:04:
                    ff:ff:0f:9a:60:5e:fb:2e:57:ee:8f:de:42:d7:d2:
                    2a:33:75:95:13:30:3e:09:9b:41:eb:19:4d:4d:b0:
                    51:22:89:eb:f3:68:cd:df:8b:93:24:79:69:1b:d4:
                    a2:b5:1e:0d:cc:5e:fd:bf:2c:f1:1b:47:5b:a9:9a:
                    fa:95:a4:f4:03:c8:8f:85:f4:4c:44:4f:32:b5:3a:
                    54:c2:df:2f:56:1a:8d:3c:fe:bd:5f:b8:6a:32:df:
                    f6:5a:6a:9c:a7:cf:78:3f:45:2a:6e:ca:e3:a7:7d:
                    d6:a3:c7:7d:47:d3:91:f9:de:26:d0:a8:b1:0e:1c:
                    28:6d:e3:2c:72:ee:f2:ad:4b:24:bd:93:44:c3:05:
                    32:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FB:90:10:CE:54:97:D4:C0:4B:55:80:FC:D2:31:21:E1:34:EC:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dc99c8f3-0cb4-33a4-a51e-f0d35e5cb001.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:00:61:84:50:99:9b:c3:f4:26:00:de:8c:1d:ae:37:74:be:
         39:e7:32:31:f1:b8:3e:81:49:96:5d:33:8a:78:21:3f:82:fe:
         76:fd:a8:2e:fd:80:7a:6e:62:64:7b:04:ec:e0:4d:84:bc:ca:
         22:4e:4d:cb:3b:74:53:e8:aa:1f:09:f1:6f:c7:03:7c:d8:94:
         3e:ad:ce:c6:bc:8e:8d:10:5f:5d:5a:93:92:df:91:46:0f:31:
         02:4c:76:a2:3f:05:b0:a1:c8:20:1c:38:56:06:10:e6:7b:41:
         ad:f3:39:1f:dc:ed:1b:72:60:56:2d:0c:ec:a9:ab:d1:9c:fb:
         a4:de:18:dd:6b:8e:1e:9c:93:30:f8:68:71:3c:60:51:db:e1:
         b7:2e:c7:5f:49:4c:45:07:e9:f7:c7:50:c8:98:b1:d7:d9:15:
         60:7f:72:dc:1e:93:95:03:a6:36:c7:40:08:e2:98:a5:a6:60:
         90:32:56:a8:ed:d7:cc:e2:5b:63:96:1a:74:28:b1:54:f0:9b:
         37:f1:32:e5:b5:16:4d:1c:60:43:cd:6b:ee:93:5f:7c:aa:41:
         ac:8f:ab:be:a4:a4:87:33:98:2c:ba:90:39:de:81:83:9a:f3:
         bf:e3:53:7b:41:62:ff:6c:50:e2:9a:aa:06:36:ed:c6:22:42:
         3d:f2:5a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 08:15:49 2025 by rpki-client