Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ae158e8b-9bf3-373e-8e12-aa952bd4a686.roa
File:                     ae158e8b-9bf3-373e-8e12-aa952bd4a686.roa (raw, json)
Hash identifier:          EeHo6Wm10d3Y6tzoS2AWYWO2Qdpdwd3k11REnw1jIi0=
Subject key identifier:   84:0B:C0:45:04:C9:95:3E:EA:AB:36:92:DE:C6:36:3D:A8:04:5A:5B
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584E815F9761DB374FF593DD3F40
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ae158e8b-9bf3-373e-8e12-aa952bd4a686.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     33392
IP address blocks:        137.83.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:97:61:db:37:4f:f5:93:dd:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=0250a5f7-bf23-4a9c-b282-5f1ad2606bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ab:eb:2a:c6:9b:fe:95:80:6e:1b:f2:ce:8d:
                    6e:97:5b:6f:dd:54:49:f6:7f:2f:67:74:f8:fa:b2:
                    65:78:33:50:b0:67:4d:78:61:4b:41:54:4b:15:95:
                    e2:e8:04:ac:6d:18:1b:c7:cd:84:2e:62:ee:6c:5d:
                    5b:bf:c3:06:4c:48:72:a6:07:13:c1:a3:1d:82:ab:
                    16:b3:6d:f3:66:f0:a9:98:ae:5a:10:4f:6e:90:ff:
                    38:3d:48:c5:bf:43:f8:3c:76:8c:6c:6a:30:b3:f1:
                    a4:76:78:39:94:9c:f3:8c:7d:39:75:f4:d7:4d:7e:
                    ed:68:51:27:92:47:a5:4d:f6:23:b2:e1:75:ae:64:
                    a7:d6:dc:d3:d9:9e:46:52:72:9a:88:7d:53:2f:de:
                    8c:a8:00:41:ae:27:dc:31:d6:02:cb:3a:dd:20:35:
                    12:60:d9:57:9c:51:57:28:92:00:ba:d0:81:60:e7:
                    f5:e0:4a:a8:51:be:5a:66:33:1b:04:7e:de:d7:45:
                    99:88:b1:53:94:27:64:18:ad:a6:7f:8e:68:cf:2d:
                    51:b9:52:c3:89:aa:84:10:84:d0:70:d1:0e:b7:f1:
                    17:59:90:36:fc:2b:8a:48:b9:b0:69:81:56:48:54:
                    3d:cd:9c:0c:20:d6:c1:83:60:c9:7a:d2:c1:fd:55:
                    17:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0B:C0:45:04:C9:95:3E:EA:AB:36:92:DE:C6:36:3D:A8:04:5A:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ae158e8b-9bf3-373e-8e12-aa952bd4a686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:15:7a:d5:76:1d:eb:47:bc:99:1b:39:b7:96:86:95:02:1e:
         04:6b:f0:25:92:cf:a4:f9:e7:5d:df:ac:f9:b1:71:11:a4:f9:
         b1:4a:65:2b:6c:34:f5:dc:a7:e8:1e:20:76:2c:d3:de:37:20:
         23:f1:08:e5:2b:e2:55:31:3d:21:d3:03:9e:a7:85:86:f1:e1:
         0f:2a:cb:3f:df:7c:ba:b3:2e:4a:31:f4:6c:7e:e6:95:b8:8c:
         80:4c:b5:55:c3:24:ce:68:a5:df:7e:53:86:1c:c3:a4:28:cf:
         cc:9d:3a:b5:5d:40:6e:5b:e6:42:db:51:37:b4:e7:07:2d:64:
         73:de:49:57:52:d0:c7:0a:11:e0:4c:55:17:f6:6f:0e:6b:5f:
         22:15:a0:b7:d6:54:6d:d8:36:9e:ec:f0:ed:5e:2e:f4:a0:85:
         f8:fd:30:ed:d8:f4:6d:51:da:87:ff:9d:a9:f3:8e:dd:54:60:
         c3:93:bc:69:18:02:73:98:fc:ac:53:1d:16:32:2a:46:44:61:
         76:f6:47:1e:81:8b:a8:99:70:a8:c0:2c:34:a7:36:c4:0f:e7:
         82:c1:77:ea:1b:65:3c:60:55:c8:cb:c7:70:65:6b:1d:e7:fa:
         9b:40:48:dc:ee:e0:7c:6b:98:f7:31:ce:5f:f1:f3:04:5f:1a:
         16:30:0d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:04:54 2026 by rpki-client