Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/5db4edd1-aa2e-399f-8b8d-946cfbab4c6f.roa
File:                     5db4edd1-aa2e-399f-8b8d-946cfbab4c6f.roa (raw, json)
Hash identifier:          g5kprVhS+NYvLSPwSGPy8haHMbBYER3HdQkH9QLT//4=
Subject key identifier:   2D:3B:1B:BB:3A:56:D6:30:5B:9B:5C:ED:31:35:4B:3C:B4:B5:7E:F5
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584B9E07BE8D189BF395368308E0
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/5db4edd1-aa2e-399f-8b8d-946cfbab4c6f.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     16696
IP address blocks:        137.83.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:be:8d:18:9b:f3:95:36:83:08:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=6e678daf-8e01-4cfd-89b5-fdb47b053a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1f:a3:b6:26:d5:53:6f:3b:74:b4:40:41:78:
                    2a:c4:65:29:42:6b:2e:ef:f2:27:c3:bc:ce:9f:5e:
                    b9:d7:67:54:d2:04:10:c6:e8:45:5a:34:74:18:46:
                    de:12:46:ca:2c:cd:24:76:ba:ef:a1:63:a4:48:b5:
                    ac:56:e6:2b:29:41:5f:41:73:7e:83:b9:6c:71:6f:
                    2a:73:35:28:20:9e:55:65:db:86:7a:44:1b:fe:28:
                    e8:b5:d4:f5:57:52:ed:94:e4:bb:5f:51:2e:8f:ca:
                    55:12:30:bb:e4:c7:fc:dd:30:6a:5e:5f:aa:9d:33:
                    84:4a:49:11:f2:81:5d:b2:d8:a5:51:8c:68:4a:1a:
                    1f:fb:d9:c7:09:3c:e7:26:e3:56:af:41:d2:96:c5:
                    ca:b8:be:63:c0:98:c6:20:73:ae:0e:1d:b1:ed:c5:
                    31:c7:cc:9f:ec:bb:ea:de:6d:6b:aa:11:9a:84:88:
                    ae:d2:c4:a6:48:11:2d:2d:a2:6e:53:81:49:13:ee:
                    ac:dc:86:09:22:a5:9f:fb:ff:52:17:fe:c9:b2:bf:
                    08:45:7a:57:bb:fa:96:da:04:1f:75:3d:c3:ae:6a:
                    f4:cc:b0:74:ad:af:8e:d3:4d:08:bc:9b:95:ad:6a:
                    ce:75:8b:8e:64:43:07:8d:e3:6b:44:53:0b:b1:70:
                    17:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3B:1B:BB:3A:56:D6:30:5B:9B:5C:ED:31:35:4B:3C:B4:B5:7E:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/5db4edd1-aa2e-399f-8b8d-946cfbab4c6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:f0:b2:1a:f6:e3:08:00:d8:49:da:4e:d8:92:f6:e3:2d:d8:
         fc:2d:5f:f8:46:ed:32:1c:29:94:17:5a:78:9d:db:87:82:e3:
         c3:ad:a1:ff:23:1a:19:a6:db:da:ae:f5:42:7b:c6:3c:d6:d1:
         ab:de:92:ec:2a:76:c5:26:13:57:7b:b8:56:0f:52:04:ae:2a:
         a6:f3:12:87:79:ab:eb:a5:6c:92:b0:0c:c0:f6:58:67:76:b4:
         b1:96:e7:5b:7c:53:ce:71:2e:1e:20:2f:35:76:3e:ba:93:31:
         f8:8e:da:99:d3:ff:8b:8c:f4:9b:46:56:bf:e3:6d:4b:8d:19:
         6c:b4:75:04:4e:ba:39:99:55:9d:53:dc:1e:e7:0f:2e:da:e8:
         c9:e5:ee:11:9d:16:b8:f1:e4:94:1f:bb:cd:7a:ad:34:ff:7d:
         10:fe:e5:ab:0f:9c:00:cd:a9:a3:e6:eb:33:8d:ad:d2:b2:5e:
         78:18:15:4a:e9:66:d3:2e:10:e0:5a:6a:e6:59:49:4e:f0:6a:
         fd:de:51:5b:95:3a:de:f4:7a:97:99:eb:01:2c:48:b3:ab:1f:
         bd:5c:a0:9c:67:13:f5:7c:4d:6c:b0:7b:3a:8f:a3:cf:f2:1f:
         45:c9:68:ac:78:c9:6c:ae:09:23:8d:ef:1e:27:28:3c:01:63:
         d3:f4:f5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 08:50:06 2025 by rpki-client