Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5835c873-dfd6-36ae-9f40-3c5e863be306.roa
File:                     5835c873-dfd6-36ae-9f40-3c5e863be306.roa (raw, json)
Hash identifier:          OB3eeSKBMWMauoHXuYP+zqqXqzK5aewtmuXuLvPV1/w=
Subject key identifier:   8E:2F:0C:0A:4C:0A:E7:1E:6E:9D:63:2E:A2:3F:D7:21:67:07:A1:EC
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAAFFF0C00102282D7E74B00
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5835c873-dfd6-36ae-9f40-3c5e863be306.roa
Signing time:             Sun 03 Aug 2025 02:35:44 +0000
ROA not before:           Sun 03 Aug 2025 02:35:44 +0000
ROA not after:            Sat 01 Nov 2025 02:35:44 +0000
asID:                     22616
IP address blocks:        137.83.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:af:ff:0c:00:10:22:82:d7:e7:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:44 2025 GMT
            Not After : Nov  1 02:35:44 2025 GMT
        Subject: CN=88f35e2b-2e64-475e-a0b1-335ed63f4121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:60:2c:34:e2:34:f2:6b:71:9c:bd:99:d0:82:
                    f8:82:19:31:b5:0e:b3:0d:de:16:9b:9c:4f:a0:97:
                    b7:79:ec:ce:01:be:9a:e1:e8:e9:75:f6:b2:69:f4:
                    c8:c6:d6:4a:e4:3e:a2:6b:62:65:a2:a3:ea:18:34:
                    fe:02:fa:52:df:8c:13:19:99:96:af:a1:23:cc:43:
                    f4:ca:f2:e6:81:54:51:c0:4b:d6:0b:42:3b:36:10:
                    f0:a8:d5:85:05:74:36:0a:d5:77:9d:0f:4a:b9:2f:
                    0e:89:be:51:64:95:ad:8b:7c:5c:05:c3:a9:06:64:
                    4c:f8:74:8c:f8:be:61:82:79:76:55:0e:95:82:0f:
                    40:91:69:cb:1a:6a:64:81:6b:c4:27:da:a0:f6:00:
                    ed:50:f3:97:66:aa:af:bc:a1:ac:8d:80:d0:0c:b4:
                    02:6a:e4:62:91:f1:1d:5a:f8:a3:8b:be:6d:aa:84:
                    b2:79:7f:23:d1:c2:20:63:90:22:2b:3d:85:db:0e:
                    1e:85:9d:8b:99:e1:ba:b8:ab:ce:24:1d:48:7c:9a:
                    3f:12:fe:bd:0a:ea:65:f0:3c:52:01:9f:49:f0:1a:
                    b0:ef:63:8e:38:c3:c0:3e:03:a6:eb:02:58:2b:0c:
                    30:57:a5:d3:60:81:c9:57:fc:ad:d2:0d:65:40:90:
                    7a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2F:0C:0A:4C:0A:E7:1E:6E:9D:63:2E:A2:3F:D7:21:67:07:A1:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5835c873-dfd6-36ae-9f40-3c5e863be306.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:ff:74:41:8b:eb:62:93:94:5a:52:f4:ed:18:7b:c5:64:fd:
         26:98:10:bc:72:26:da:9b:6e:6f:94:51:f5:95:60:3d:8c:6f:
         e4:0d:17:a8:a0:e5:4b:a3:3f:3c:b1:e2:6b:66:7f:60:94:0e:
         c9:93:be:ee:dc:48:cd:28:df:d6:71:13:e6:a2:ab:c4:ee:b5:
         e2:9f:be:fd:94:8a:22:53:c7:86:5d:b4:59:85:72:09:9f:63:
         68:13:7b:9b:dc:6b:ea:f0:7b:8b:41:d5:d9:22:ca:e2:a2:3b:
         1e:75:fc:78:1f:8b:90:e5:11:a5:95:de:5c:0a:87:ee:5e:6b:
         c3:6c:3e:64:55:da:7b:82:2c:b3:07:db:de:af:9b:25:c8:d6:
         03:1e:20:2a:49:b1:21:be:a9:0a:91:70:eb:75:ce:38:2f:7c:
         af:b5:81:7e:0e:ee:f7:ff:d7:d2:76:3c:ec:90:fd:2f:51:6d:
         b8:6a:91:bf:85:3a:1d:f2:3d:41:7a:14:29:54:48:f1:ea:07:
         20:03:00:6d:6c:10:c6:77:dd:6e:a7:9a:f4:35:85:1a:11:fe:
         f8:5e:4c:22:ec:b7:2c:1a:f5:46:78:b8:45:ff:4c:0a:d0:00:
         cf:81:09:a5:74:9b:ba:f9:e7:0f:f9:a8:b2:f3:86:be:8a:0f:
         06:97:05:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:38:21 2025 by rpki-client