Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3511831e-2159-3645-ac13-21cd5f048ce7.roa
File:                     3511831e-2159-3645-ac13-21cd5f048ce7.roa (raw, json)
Hash identifier:          I7tjhbSupWJiwcU42t78d8XqMo7qElODUK3Kgq5uiIw=
Subject key identifier:   C5:B8:6E:2B:16:7F:1C:03:A8:87:8C:E3:12:00:67:75:F7:22:F8:EA
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAAFFF341B8AD8894FA8AE80
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3511831e-2159-3645-ac13-21cd5f048ce7.roa
Signing time:             Sun 03 Aug 2025 02:35:44 +0000
ROA not before:           Sun 03 Aug 2025 02:35:44 +0000
ROA not after:            Sat 01 Nov 2025 02:35:44 +0000
asID:                     22616
IP address blocks:        137.83.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:af:ff:34:1b:8a:d8:89:4f:a8:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:44 2025 GMT
            Not After : Nov  1 02:35:44 2025 GMT
        Subject: CN=0dcb4c25-8a10-4e33-9381-928753acb9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:28:72:bc:20:2c:96:5b:b4:87:de:3f:c7:ec:
                    30:48:03:52:7a:39:80:ba:fa:9c:8f:e8:2c:ff:2a:
                    66:31:28:a8:1a:4a:11:c3:f0:c6:9f:77:ca:1c:2f:
                    d1:da:aa:39:2f:d5:dd:5e:7d:8b:a8:21:01:18:5f:
                    86:85:3b:bc:5b:8d:a0:de:6b:33:67:fc:3d:be:f6:
                    23:9f:f4:2d:e9:c7:bc:db:6c:2a:1c:f4:0c:57:99:
                    3c:db:f3:32:29:06:91:9c:7e:d0:ca:b6:0e:e5:09:
                    3e:55:45:a2:02:03:b3:12:37:8f:97:6c:17:d0:88:
                    6a:51:c4:de:ba:3c:63:a3:d1:68:47:59:6d:0f:2e:
                    c4:1d:ec:da:9b:c7:e9:e8:46:5b:9c:5c:ea:ac:18:
                    e2:9c:9f:d4:47:75:33:22:e5:37:80:9c:7c:6f:90:
                    d8:00:ef:bd:a2:37:02:82:75:53:42:af:e2:22:5f:
                    44:42:80:f6:68:2a:10:ff:59:32:50:59:54:44:f1:
                    16:e7:8e:e3:f8:e8:20:80:f4:7e:98:4a:40:be:f7:
                    1b:c5:5e:83:ad:e8:db:dc:09:5c:a4:4f:e4:de:6d:
                    40:8e:9f:e2:f6:19:58:80:5c:6e:90:b0:2b:59:ff:
                    cc:ea:11:63:79:6c:08:d2:71:d0:a4:84:6e:00:e2:
                    87:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B8:6E:2B:16:7F:1C:03:A8:87:8C:E3:12:00:67:75:F7:22:F8:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3511831e-2159-3645-ac13-21cd5f048ce7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:99:d2:6b:fc:fc:c5:6a:84:9d:c1:ca:c4:fd:87:4b:e2:cc:
         af:18:13:23:dc:17:42:0b:55:da:99:34:91:92:14:8b:89:70:
         28:aa:93:1b:2a:0e:b6:b1:d1:47:6d:4d:aa:6b:d2:e3:22:b3:
         01:9f:89:05:8c:40:4b:2d:af:23:f9:88:32:0e:c0:b5:db:68:
         80:6a:23:7f:42:40:82:3e:e3:ef:bc:60:d2:0e:1a:a3:87:e2:
         ef:b9:0d:21:47:64:0a:55:66:c9:98:65:b0:22:0d:65:e8:fc:
         c1:b6:a4:65:8c:d0:1f:f0:62:d2:c3:e9:34:fb:dd:36:33:b6:
         a2:d0:86:36:19:ce:df:3e:9b:42:86:4e:5e:54:8c:97:c9:a1:
         6c:2e:22:68:60:d9:2e:1d:7a:c5:be:79:2f:39:0b:6e:1a:ef:
         eb:04:46:fb:c1:8f:2f:7d:1f:de:9c:24:09:88:91:27:c4:82:
         87:88:8e:d8:a0:1f:a0:b6:ea:75:30:f8:4d:c2:dd:40:d4:8e:
         26:77:2e:5a:00:ee:fc:c4:c6:46:2f:58:21:b0:1d:a7:fa:95:
         d9:9e:c7:0b:c5:85:b4:1d:57:0e:a7:76:6b:b4:88:b6:49:1c:
         a6:10:d6:0a:97:f8:b6:02:ca:50:03:ff:43:d7:71:63:f6:91:
         66:42:c9:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6r/80G4rYiU+oroAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI1MDgwMzAyMzU0NFoXDTI1MTEwMTAyMzU0NFowLzEtMCsGA1UEAxMk
MGRjYjRjMjUtOGExMC00ZTMzLTkzODEtOTI4NzUzYWNiOWMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApChyvCAsllu0h94/x+wwSANSejmAuvqcj+gs
/ypmMSioGkoRw/DGn3fKHC/R2qo5L9XdXn2LqCEBGF+GhTu8W42g3mszZ/w9vvYj
n/Qt6ce822wqHPQMV5k82/MyKQaRnH7QyrYO5Qk+VUWiAgOzEjePl2wX0IhqUcTe
ujxjo9FoR1ltDy7EHezam8fp6EZbnFzqrBjinJ/UR3UzIuU3gJx8b5DYAO+9ojcC
gnVTQq/iIl9EQoD2aCoQ/1kyUFlURPEW547j+OgggPR+mEpAvvcbxV6Drejb3Alc
pE/k3m1Ajp/i9hlYgFxukLArWf/M6hFjeWwI0nHQpIRuAOKHKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMW4bisWfxwDqIeM4xIAZ3X3IvjqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMzUxMTgzMWUtMjE1OS0z
NjQ1LWFjMTMtMjFjZDVmMDQ4Y2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiVOrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGaZ0mv8/MVqhJ3BysT9h0vizK8YEyPcF0ILVdqZNJGSFIuJcCiqkxsq
Drax0UdtTapr0uMiswGfiQWMQEstryP5iDIOwLXbaIBqI39CQII+4++8YNIOGqOH
4u+5DSFHZApVZsmYZbAiDWXo/MG2pGWM0B/wYtLD6TT73TYztqLQhjYZzt8+m0KG
Tl5UjJfJoWwuImhg2S4desW+eS85C24a7+sERvvBjy99H96cJAmIkSfEgoeIjtig
H6C26nUw+E3C3UDUjiZ3LloA7vzExkYvWCGwHaf6ldmexwvFhbQdVw6ndmu0iLZJ
HKYQ1gqX+LYCylAD/0PXcWP2kWZCyQY=
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:15:50 2025 by rpki-client