Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/95e902ee-311c-3edc-9d77-851c51f25f24.roa
File:                     95e902ee-311c-3edc-9d77-851c51f25f24.roa (raw, json)
Hash identifier:          8HoZjO4NYPnY5dUlW4g1s+EJAsFVYosHx955vkMYHAE=
Subject key identifier:   17:A0:FE:4F:A0:E6:12:F1:E1:29:85:2F:BC:0B:06:8C:83:2E:19:A6
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D5B4F9B7005AB2FC0B57459C0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/95e902ee-311c-3edc-9d77-851c51f25f24.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     22616
IP address blocks:        137.83.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:9b:70:05:ab:2f:c0:b5:74:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=95de62fd-f3d4-4c25-8ecb-a794f5134ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:73:2f:5c:da:b6:86:58:65:26:1f:70:e6:46:
                    30:ea:88:7d:ee:82:86:ea:a0:fb:24:ec:ec:fb:76:
                    f5:bd:c3:4f:bc:02:1b:35:7d:12:63:1f:fb:98:a0:
                    f1:82:03:0b:4b:12:f6:90:47:d1:73:ad:50:8a:16:
                    09:58:cb:fd:7d:4a:19:aa:3d:70:92:6c:72:c9:c4:
                    25:4a:49:63:1c:37:20:ee:7f:d1:db:2e:d1:b5:8f:
                    22:7a:b5:c8:ad:88:38:82:96:15:ad:a7:b7:dc:41:
                    74:06:ee:d2:e3:33:0c:45:dd:2b:8b:ed:23:be:80:
                    ce:81:6b:0f:eb:ba:fc:8d:69:95:77:b0:4c:64:3a:
                    98:f8:63:c8:63:94:84:77:02:78:2b:f2:eb:28:11:
                    57:14:13:92:5c:57:1a:04:ba:f9:60:2c:d3:3a:ef:
                    51:f9:d6:44:9f:6a:a3:43:8c:c8:1b:7b:7b:37:f8:
                    75:cb:d7:3d:e0:7a:ed:55:95:97:43:2f:9b:37:06:
                    a0:c3:90:3b:30:22:a0:fd:56:38:f4:d8:25:b8:f9:
                    06:7e:94:b9:ff:73:dd:56:1b:b2:34:b6:c6:bb:8a:
                    41:5b:94:ef:ce:58:f5:99:3a:42:31:ad:3f:10:75:
                    79:63:14:25:55:8c:c6:59:90:93:e4:3f:72:10:e4:
                    ad:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A0:FE:4F:A0:E6:12:F1:E1:29:85:2F:BC:0B:06:8C:83:2E:19:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/95e902ee-311c-3edc-9d77-851c51f25f24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:a2:84:93:ce:39:61:fd:b4:8d:a2:40:e0:24:67:6b:2c:f3:
         94:c7:84:5d:16:04:30:f6:7e:e4:11:f3:f9:e8:7a:df:00:ae:
         43:91:50:90:21:5a:ba:d0:43:7c:dc:e1:61:32:03:c3:2e:26:
         02:64:6a:b6:eb:cd:42:ab:fb:17:fc:dd:b0:fc:e6:9a:d5:44:
         e1:f6:d4:13:1d:09:a7:3e:1f:46:a0:51:23:e6:ba:33:d0:1e:
         ba:c6:69:5e:11:5e:68:d8:47:ee:f8:13:81:a1:53:01:ef:af:
         24:a3:59:f4:a7:63:75:48:e0:e5:28:df:a5:3a:1d:12:e7:cb:
         09:03:61:b2:c1:a4:f3:8c:d2:20:11:dd:8c:33:0c:23:69:0c:
         ce:8a:b4:b1:7f:74:16:af:fd:c3:d1:4b:4a:47:90:60:ed:ac:
         e6:6d:a0:8d:c6:ca:6e:ef:e5:12:30:c0:90:9b:74:aa:9a:69:
         48:3d:1d:76:75:ea:d7:75:29:d9:18:6b:0f:ce:00:cf:a2:e9:
         9a:0e:8a:e6:53:c1:59:0f:1d:05:e4:d8:d3:6d:d3:7f:e9:20:
         21:6c:62:ef:d4:9b:49:67:92:33:6a:52:5f:fd:65:96:5a:72:
         8b:c7:1c:d0:97:d4:cc:f9:d7:c7:88:e8:59:cf:d1:19:d3:18:
         20:b4:f6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:10:57 2026 by rpki-client