Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ae158e8b-9bf3-373e-8e12-aa952bd4a686.roa
File:                     ae158e8b-9bf3-373e-8e12-aa952bd4a686.roa (raw, json)
Hash identifier:          z7IlDyapTkjwqNC6b8b5X9JYTc84MuSnwahpcHymfpI=
Subject key identifier:   01:28:D5:AC:30:2A:5F:34:74:0B:6C:57:54:FE:EC:F5:4C:0B:26:37
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584B004BF3E586E41C159D47D380
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ae158e8b-9bf3-373e-8e12-aa952bd4a686.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     33392
IP address blocks:        137.83.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4b:f3:e5:86:e4:1c:15:9d:47:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=495f283e-c415-42fc-855c-a66845b88d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:75:9b:b2:ea:59:56:56:b9:35:76:11:b9:c9:
                    5a:b9:21:5f:18:8c:1a:fc:cd:4a:9b:f2:b0:14:f9:
                    56:d7:d9:3c:f0:7c:10:a8:15:80:07:aa:68:6d:3f:
                    29:12:9e:ba:b4:be:dc:a2:c7:4c:5a:28:5f:72:2f:
                    ca:e0:bd:95:01:86:c4:dd:e1:73:4c:de:b1:74:61:
                    05:ba:ad:22:15:8d:33:e4:d9:b9:f5:4d:81:58:c7:
                    29:f6:65:32:00:25:25:7f:d2:c7:9f:d1:a4:d8:38:
                    24:bd:3f:16:1c:a7:94:e3:a8:73:12:3b:6c:cc:44:
                    8c:b2:73:01:21:ab:57:72:0e:72:12:3e:70:bf:59:
                    d5:7f:9a:5a:a5:81:c3:2b:85:d6:6d:18:2d:76:4d:
                    0f:a9:bc:4d:b8:b2:33:5d:1c:0e:ef:d4:72:e4:a8:
                    85:3b:c1:fd:dc:18:2e:33:af:eb:32:19:ab:32:52:
                    b8:0d:93:d3:09:89:7f:20:9d:9e:50:14:f0:7c:fe:
                    b3:24:aa:80:4b:91:33:f5:5a:69:ff:9f:07:14:be:
                    52:2d:ae:a6:38:70:8d:7c:47:a4:86:e8:02:d3:e0:
                    24:83:d8:88:7b:99:0e:bf:d5:b3:d8:ed:0a:20:19:
                    69:1d:71:66:63:4c:ac:8c:61:c2:9b:fd:55:df:b8:
                    4f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:28:D5:AC:30:2A:5F:34:74:0B:6C:57:54:FE:EC:F5:4C:0B:26:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ae158e8b-9bf3-373e-8e12-aa952bd4a686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:dd:17:c3:38:08:7c:0a:32:8e:7d:1b:45:83:83:2d:76:47:
         73:33:a6:46:f7:f7:78:18:63:91:21:99:ad:ea:e0:79:76:68:
         6a:a7:7f:97:0e:d4:61:a6:fc:ac:42:1a:e5:0f:ea:e5:0d:77:
         f6:4b:4f:96:30:ed:71:19:90:c4:ca:ec:9a:bb:96:fb:32:0a:
         d6:8e:fd:f1:9e:6c:ad:61:9b:50:4f:28:0f:44:77:39:c3:3c:
         fd:2f:58:4a:12:d5:3d:40:5c:3d:3f:31:3e:1a:17:b0:4e:49:
         68:28:a4:94:22:36:3d:31:55:67:1a:01:69:b3:93:d3:bd:be:
         db:50:e2:f1:1a:90:8f:80:ea:a6:38:45:18:e1:3f:6c:8a:e1:
         9b:5a:c5:0c:fb:2c:a4:8b:3e:a8:43:e0:6d:a2:24:2d:e1:49:
         43:7d:53:9d:2e:f8:f6:aa:4a:e6:46:d0:f8:10:35:82:a0:b2:
         1c:63:6c:06:04:50:95:d7:09:57:2b:fb:43:a7:8e:bd:0d:9f:
         ed:f3:7b:b1:26:76:56:0b:ca:08:bc:9a:e1:94:a7:2c:46:37:
         06:5a:7f:7b:a1:65:a0:ed:8a:71:e1:9b:54:f5:1a:f2:2a:6b:
         18:90:ca:de:d5:17:7a:c7:a1:f3:26:18:6a:0f:37:7f:5e:d7:
         97:39:8d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 10:08:51 2025 by rpki-client