Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8cb7ceae-61fb-3aac-b34c-4b978bac0836.roa
File:                     8cb7ceae-61fb-3aac-b34c-4b978bac0836.roa (raw, json)
Hash identifier:          VaYuxfxS9l+1IpzM6XnXxNh6ukG0AU4/rnYoi8T6l/s=
Subject key identifier:   E1:24:02:F7:FF:CF:C6:3D:A5:85:07:F0:2B:D3:02:1E:CD:53:C3:87
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAAFFF4119218C25F8A80400
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8cb7ceae-61fb-3aac-b34c-4b978bac0836.roa
Signing time:             Sun 03 Aug 2025 02:35:44 +0000
ROA not before:           Sun 03 Aug 2025 02:35:44 +0000
ROA not after:            Sat 01 Nov 2025 02:35:44 +0000
asID:                     22616
IP address blocks:        137.83.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:af:ff:41:19:21:8c:25:f8:a8:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:44 2025 GMT
            Not After : Nov  1 02:35:44 2025 GMT
        Subject: CN=314cbf1d-41be-4d7b-aa87-e7d2e12db87a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ff:66:69:a7:52:d3:1e:3a:17:cc:e4:12:f5:
                    9b:48:2a:69:48:45:7c:14:df:dd:d8:ac:9d:7c:e2:
                    76:2f:ba:3b:98:be:f3:6c:00:9d:70:3c:4d:79:90:
                    66:f1:ec:aa:aa:71:a7:27:dc:92:72:87:b3:1a:51:
                    bd:52:be:61:a8:b7:f6:74:b5:c1:d3:f7:4f:9a:a8:
                    ef:78:39:ab:96:e7:9d:b5:11:eb:be:1b:f7:d6:d7:
                    9f:6c:84:4f:f1:7a:7d:3f:f1:1b:6c:2d:94:b1:95:
                    c0:5a:cc:50:39:31:40:30:f2:0b:96:28:ef:3d:a0:
                    71:13:65:29:9f:c3:f0:66:79:05:4f:84:ec:bc:b6:
                    ba:0a:56:ba:2a:46:27:fd:b7:a6:e9:d4:99:a8:a1:
                    66:3d:7f:22:27:55:93:5d:c5:96:c7:39:5a:90:d2:
                    1a:0f:d0:ef:d7:39:70:11:67:5d:20:0e:79:7b:27:
                    e0:e9:8f:31:80:fd:ab:9b:cd:72:3c:6c:e3:52:2a:
                    10:16:ee:cb:77:bf:fb:52:9f:44:f8:a7:25:e5:fe:
                    c5:bf:18:36:43:af:73:ce:8d:c3:b3:3c:1a:57:1b:
                    b7:74:fe:e5:ae:44:38:c4:e6:31:1e:71:49:a9:b2:
                    01:2b:a8:09:ea:3f:38:f1:ce:03:55:20:5f:cf:35:
                    91:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:24:02:F7:FF:CF:C6:3D:A5:85:07:F0:2B:D3:02:1E:CD:53:C3:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8cb7ceae-61fb-3aac-b34c-4b978bac0836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:25:5b:c2:8b:c6:a0:fe:cd:17:b2:8a:21:08:6f:b6:da:b1:
         f2:b2:bb:d6:0e:85:81:c4:d3:70:7d:18:3d:11:e9:69:ed:a5:
         7b:89:2a:c2:af:a5:9a:45:20:17:ba:bf:f0:84:75:d8:a3:08:
         66:b9:2b:ef:15:23:a3:28:06:3e:31:f2:2d:98:7f:99:8d:2f:
         8f:c9:0d:42:f5:ac:76:cb:7a:44:66:da:1a:93:6d:c2:64:93:
         d8:f8:9f:3a:fc:68:a5:52:b6:61:b3:26:af:b0:c4:4f:4f:54:
         8c:ff:3e:40:20:fb:f4:11:60:e0:c5:ed:5d:97:fe:ed:3f:00:
         aa:65:a2:64:34:e3:d1:8c:45:fe:ba:56:fb:95:a2:c3:36:db:
         8c:2c:49:9e:33:55:61:c6:37:96:97:df:e6:d1:43:46:74:ff:
         ba:5b:d8:70:cb:96:18:67:01:c1:9d:9f:93:81:f7:71:c9:00:
         d7:6e:0c:87:40:3d:cc:55:81:c6:ff:46:23:14:e8:82:16:cd:
         00:55:d6:b5:d4:d8:ba:14:3c:50:c7:59:6e:9b:e4:04:f1:19:
         57:17:5e:df:2b:e4:d5:01:0b:1c:79:16:67:0d:f9:9f:4a:13:
         b1:72:89:98:59:ff:0a:5e:95:95:db:16:2c:8c:97:f4:41:f9:
         4e:d5:fd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:20:14 2025 by rpki-client