Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4922b4a4-1e67-34bc-8a79-d4664b544e31.roa
File:                     4922b4a4-1e67-34bc-8a79-d4664b544e31.roa (raw, json)
Hash identifier:          CYl0QwixISGO6ti/H6qaaVffFmKmQAur90lBJq7plT0=
Subject key identifier:   9C:FC:E4:91:88:66:80:F8:D3:35:D0:C0:29:43:30:66:CC:11:94:2A
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D5B4FA6A10BCAFBA7C9D9A480
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4922b4a4-1e67-34bc-8a79-d4664b544e31.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     62044
IP address blocks:        137.83.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:a6:a1:0b:ca:fb:a7:c9:d9:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=8d38552d-29d2-4d95-8b3f-725f187faf25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:56:f6:c6:98:e4:24:c9:19:eb:73:a1:09:d5:
                    4b:79:c1:61:d0:a6:e8:ee:a3:c0:a3:a7:97:e1:f1:
                    9f:82:c6:36:0d:6a:3b:c8:c4:06:5d:e0:f9:69:fc:
                    7e:5c:c6:a3:02:f5:6f:17:81:a4:93:7c:ad:21:5c:
                    92:db:84:0b:ad:8b:75:21:6a:f7:7e:b7:a0:1a:f1:
                    28:d2:32:50:86:e7:43:49:da:7d:8b:63:14:d4:5c:
                    66:44:9f:ba:e9:f8:f1:cb:86:eb:1b:12:53:11:f3:
                    ef:0c:75:28:2a:b1:46:53:09:70:46:24:c4:40:b3:
                    75:93:44:2b:32:c7:26:98:ad:f1:26:d2:34:4e:ba:
                    98:4a:db:90:45:99:06:60:bd:9d:90:14:7d:eb:b6:
                    61:6d:4e:f6:e0:e7:fc:e7:38:dc:d7:ef:0c:56:d6:
                    70:84:56:05:b6:b2:e5:37:fd:a9:a9:86:9d:2d:fb:
                    91:2b:b1:16:e7:5a:b1:b6:84:5d:0d:fe:48:d3:9f:
                    51:24:18:81:d4:d2:b0:1a:ac:89:93:5a:78:8c:a9:
                    1a:ec:ba:b1:55:1c:f2:9c:4d:6e:b9:fb:9d:96:9f:
                    22:61:c2:d3:4b:bf:96:9a:73:57:8a:1f:f4:30:3e:
                    24:08:d2:99:82:e0:a0:15:44:0d:f5:9c:2c:b8:62:
                    0b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:FC:E4:91:88:66:80:F8:D3:35:D0:C0:29:43:30:66:CC:11:94:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4922b4a4-1e67-34bc-8a79-d4664b544e31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:9d:66:e8:77:5b:87:41:64:38:91:54:0d:f0:82:57:06:cb:
         3b:ff:a6:c6:de:b0:cf:b2:0d:fe:ac:28:9f:1a:6c:9b:d1:46:
         c5:af:e5:17:9e:f4:0b:0a:f6:a3:48:d1:e1:57:7b:92:c3:02:
         36:8a:e2:fb:5d:21:f4:14:06:4c:70:a5:83:aa:f8:81:84:0d:
         a5:f5:24:d5:52:3b:eb:90:eb:bc:61:a5:d7:09:f3:aa:93:db:
         1d:05:17:d9:5d:2f:da:5f:b9:ff:d6:be:bf:1c:a7:53:46:1b:
         e2:f6:20:8e:a4:70:17:bf:d2:80:90:00:be:c6:93:5d:ba:1b:
         83:d9:40:ee:9b:53:47:06:d6:14:be:34:26:b5:f1:90:c0:a2:
         29:c8:ec:66:d2:65:7e:81:e8:20:5e:a8:eb:15:d7:9e:27:84:
         31:8e:e3:0c:ea:fd:27:5c:c1:18:61:96:30:37:0a:67:19:9f:
         11:9b:ba:f6:44:f7:d0:cb:64:1b:0a:58:78:a4:5a:e5:29:4a:
         29:67:ad:c7:f5:7d:b9:d1:11:ca:e7:78:84:6f:01:07:d2:4f:
         4b:e4:82:09:05:dc:63:08:a6:3b:32:8a:8e:c5:16:0f:c3:a9:
         ad:4d:b6:cf:b5:cc:f0:91:95:32:e2:53:de:f1:ca:37:90:80:
         4c:90:e4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:42:23 2026 by rpki-client