Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/77deb947-6e0f-3256-9c6b-59f6468d6dd5.roa
File:                     77deb947-6e0f-3256-9c6b-59f6468d6dd5.roa (raw, json)
Hash identifier:          wCKWmQIBUeokMxwUB/zJVcAG068V5F78o5pgGUWSqrQ=
Subject key identifier:   EA:F3:AC:46:A3:52:E5:D7:4C:A8:FB:2B:F3:DD:0F:D4:84:B6:0F:B6
Certificate issuer:       /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Certificate serial:       010D0C9F4328584F7A4D8D38CCF7AEE4D037D598
Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/77deb947-6e0f-3256-9c6b-59f6468d6dd5.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     17017
IP address blocks:        137.83.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4d:8d:38:cc:f7:ae:e4:d0:37:d5:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=8add201a-3d2a-47da-b778-f886a8b4f330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1b:2b:0d:7c:3a:81:a3:2b:a9:02:51:9f:30:
                    46:d6:68:16:c5:08:b3:d0:ed:2d:7b:04:0e:c7:07:
                    9b:30:fc:da:d2:78:41:e5:90:f9:9c:2e:bf:93:0d:
                    1b:56:a6:ca:11:60:aa:fa:21:98:38:12:e4:9c:19:
                    fd:11:9c:f4:af:64:d3:fe:2b:b9:e4:36:69:16:d7:
                    d3:ff:3f:85:9e:f5:39:f3:f8:e2:54:ed:90:78:19:
                    01:bf:ed:30:2b:ae:95:cc:bc:90:26:72:13:cb:d6:
                    c4:20:d5:4d:cc:98:ab:8d:d1:c4:b9:51:72:30:21:
                    87:4d:1a:49:69:d5:d3:e5:98:9c:ca:44:c0:3a:8c:
                    55:1a:fd:a8:ed:34:aa:6e:45:bb:7a:f5:bd:5a:be:
                    be:47:19:87:65:d3:b9:42:19:a2:4b:b2:51:b2:90:
                    7f:60:c0:f3:d5:38:53:0f:6d:21:05:c6:94:4c:c6:
                    0e:39:33:3e:04:9d:2b:73:03:cb:22:c0:1c:e9:30:
                    da:17:61:52:25:90:cd:ad:9f:d1:a4:a8:5c:46:1f:
                    c3:90:8c:b4:6b:1d:9b:a1:0e:75:be:18:60:07:bf:
                    f8:c7:76:51:c4:01:69:82:d9:bb:cb:c3:db:af:03:
                    c4:5c:b7:c0:d7:23:7b:ff:df:ec:3a:ed:cf:a2:f8:
                    0f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F3:AC:46:A3:52:E5:D7:4C:A8:FB:2B:F3:DD:0F:D4:84:B6:0F:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/77deb947-6e0f-3256-9c6b-59f6468d6dd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:76:3f:09:b5:8a:ce:42:33:e6:a2:c0:23:7b:b0:62:74:5f:
         e1:c1:28:1e:42:1c:b1:71:d6:59:21:4c:1f:60:52:70:73:30:
         7a:22:29:0d:c9:2f:b5:9a:9c:7b:12:5a:46:13:01:fa:1e:2a:
         13:40:0e:6a:db:ec:26:3a:c9:a8:6c:73:40:e3:d3:c2:94:32:
         86:9a:ca:85:05:6a:18:68:2c:5d:bd:c4:ca:70:a5:70:4a:1a:
         86:18:68:ca:9b:ed:ed:62:89:35:dd:e1:29:dd:b8:8d:03:86:
         ed:6a:d7:0b:fd:e9:a1:bc:ec:cc:71:b6:dc:33:a1:68:49:f1:
         71:97:05:74:03:a9:6c:2a:fe:4e:d3:d3:fb:eb:e1:2a:f4:ac:
         65:df:8e:06:1b:fa:61:fa:c5:c1:67:74:9c:77:87:1d:10:1e:
         77:56:09:35:8a:7d:10:06:79:dd:53:20:e8:b5:10:ca:7f:f3:
         72:de:22:ec:64:1d:ec:29:e8:b2:33:83:11:16:b5:d5:f8:ed:
         4d:d6:5a:54:28:6d:28:7a:de:c9:4c:12:73:38:e6:59:78:fa:
         cf:38:9f:7d:c1:e0:35:67:50:db:1b:f4:90:b7:06:e7:38:18:
         1f:34:8e:a0:09:fc:bc:42:37:8a:5b:7e:74:2f:35:bf:15:a6:
         00:6e:82:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:55:38 2026 by rpki-client