Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e778c926-bae9-347d-82e9-114816be8614.roa
File:                     e778c926-bae9-347d-82e9-114816be8614.roa (raw, json)
Hash identifier:          LfLRk6ok3s8pgbAu0AHQ2rf0Yfvr9pMSc36CXLyijUw=
Subject key identifier:   D2:D3:58:DA:C4:B4:61:09:95:0B:85:33:F1:64:C2:5D:65:F7:0A:FD
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584B9E07BE7C5572B9A3577AD100
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e778c926-bae9-347d-82e9-114816be8614.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     16696
IP address blocks:        137.83.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:be:7c:55:72:b9:a3:57:7a:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=ec7e8d6a-81ac-472d-9492-3b0756eef026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4d:ad:c2:2d:40:f3:ed:b3:e8:a4:24:94:c6:
                    84:f9:92:11:24:75:ef:bd:ad:fa:c8:2b:83:77:87:
                    b5:95:b0:97:64:68:f5:3f:88:3a:3c:bd:0f:61:9d:
                    aa:5f:6e:1b:6b:a7:9c:2c:ae:b3:97:65:65:48:7e:
                    b4:63:d1:fc:f4:bc:df:d9:20:af:02:3c:98:3e:fc:
                    42:c9:ab:4b:5c:6c:ec:bf:a5:a2:89:da:ae:05:c3:
                    38:8f:ab:17:98:fa:21:35:78:55:b7:01:4a:9d:ea:
                    9f:2c:e8:44:d5:dc:a4:40:e0:37:b3:af:42:81:fe:
                    3a:ba:85:e7:f7:b8:3a:f2:e9:e9:cb:fa:bb:ef:66:
                    6b:98:78:e7:f5:b6:ba:e2:ad:74:25:b0:8b:67:0a:
                    76:5e:a4:d8:dd:5b:2e:be:82:ed:3a:5e:c8:a4:ff:
                    50:51:f1:17:6c:3a:18:07:17:63:4e:c3:d5:7c:76:
                    fe:03:d2:9b:6b:0b:fe:1d:46:f3:a4:aa:09:b3:b7:
                    9c:a7:0b:0f:4f:62:37:a3:35:a9:41:48:49:13:e9:
                    35:a7:c6:72:27:b6:92:17:07:e2:8b:82:ba:fa:ef:
                    9d:d0:cc:f4:01:e6:53:e9:88:25:27:27:10:14:ce:
                    30:2f:eb:d8:4a:6a:bd:07:43:49:52:1f:55:96:e1:
                    2e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D3:58:DA:C4:B4:61:09:95:0B:85:33:F1:64:C2:5D:65:F7:0A:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e778c926-bae9-347d-82e9-114816be8614.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:7f:d7:14:32:0b:78:28:46:3c:d9:2a:f2:ba:0c:01:f2:3a:
         2e:ca:56:d3:d1:58:43:63:98:7a:df:72:06:38:b5:8c:75:93:
         2f:b8:b2:7c:a5:05:f6:75:ae:4a:85:25:fd:c3:c3:54:a6:01:
         cf:22:e3:a0:60:77:c0:b6:d7:d4:00:5f:16:69:d4:96:96:8b:
         fe:39:12:7d:1c:32:2d:5f:5a:a9:64:77:dd:e4:03:ca:18:6f:
         62:bd:86:c7:89:e5:01:66:b3:54:37:63:63:d2:3b:da:c2:d9:
         a0:40:0f:89:7f:5b:f2:dd:1b:b0:a1:80:e6:e8:1e:01:39:64:
         06:15:28:7b:b1:ce:ac:03:1b:54:cd:a3:de:06:6e:32:7b:6f:
         6f:00:95:3b:bd:38:ab:5e:62:45:e9:eb:2f:63:ef:51:11:69:
         c6:c2:94:eb:38:d1:e3:b2:5d:55:dd:21:2c:d2:f1:ee:7b:71:
         88:ea:b6:66:4c:0c:f9:b5:9a:c8:88:20:24:5d:1f:9f:64:31:
         5c:2b:f5:19:5f:2b:1f:77:82:28:d8:a3:ad:55:5e:3e:20:f0:
         f3:48:6d:98:f4:86:bc:1d:65:a2:f4:0d:bb:79:00:6d:b9:12:
         13:d1:37:db:98:bd:17:08:3f:e4:bf:b4:5e:cb:6b:14:90:b7:
         5a:75:3b:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB758VXK5o1d60QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk
ZWM3ZThkNmEtODFhYy00NzJkLTk0OTItM2IwNzU2ZWVmMDI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE2twi1A8+2z6KQklMaE+ZIRJHXvva36yCuD
d4e1lbCXZGj1P4g6PL0PYZ2qX24ba6ecLK6zl2VlSH60Y9H89Lzf2SCvAjyYPvxC
yatLXGzsv6WiidquBcM4j6sXmPohNXhVtwFKneqfLOhE1dykQOA3s69Cgf46uoXn
97g68unpy/q772ZrmHjn9ba64q10JbCLZwp2XqTY3VsuvoLtOl7IpP9QUfEXbDoY
BxdjTsPVfHb+A9Kbawv+HUbzpKoJs7ecpwsPT2I3ozWpQUhJE+k1p8ZyJ7aSFwfi
i4K6+u+d0Mz0AeZT6YglJycQFM4wL+vYSmq9B0NJUh9VluEuBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNLTWNrEtGEJlQuFM/Fkwl1l9wr9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZTc3OGM5MjYtYmFlOS0z
NDdkLTgyZTktMTE0ODE2YmU4NjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiVMwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI1/1xQyC3goRjzZKvK6DAHyOi7KVtPRWENjmHrfcgY4tYx1ky+4snyl
BfZ1rkqFJf3Dw1SmAc8i46Bgd8C219QAXxZp1JaWi/45En0cMi1fWqlkd93kA8oY
b2K9hseJ5QFms1Q3Y2PSO9rC2aBAD4l/W/LdG7ChgOboHgE5ZAYVKHuxzqwDG1TN
o94GbjJ7b28AlTu9OKteYkXp6y9j71ERacbClOs40eOyXVXdISzS8e57cYjqtmZM
DPm1msiIICRdH59kMVwr9RlfKx93gijYo61VXj4g8PNIbZj0hrwdZaL0Dbt5AG25
EhPRN9uYvRcIP+S/tF7LaxSQt1p1OzE=
-----END CERTIFICATE-----
Generated at Mon Nov 3 08:47:05 2025 by rpki-client