Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a9466cf4-7af5-3659-a603-e5ae815d5685.roa
File:                     a9466cf4-7af5-3659-a603-e5ae815d5685.roa (raw, json)
Hash identifier:          Vy4Wz3ZsrGLG+33AgRR7IhWvGNW5Y4h95OuNjorMQHs=
Subject key identifier:   06:0D:2E:D3:53:3E:FF:9F:5B:A2:81:C5:33:E9:2D:79:F7:B5:72:79
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D5B4FACADD496E724A3641000
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a9466cf4-7af5-3659-a603-e5ae815d5685.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     22616
IP address blocks:        137.83.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:ac:ad:d4:96:e7:24:a3:64:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=8d2beffd-7b75-4e94-a15c-f72a53c5c08a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e0:88:7a:ef:93:2a:46:00:66:03:dd:93:23:
                    f1:77:b6:2c:34:67:99:ad:0b:ab:b9:db:3f:42:e9:
                    4f:5f:ef:c2:57:da:d0:8f:2b:bd:7e:80:00:bb:03:
                    b5:8a:e6:38:76:4c:27:dc:70:57:44:59:20:58:74:
                    d9:1a:9a:c6:28:d8:52:46:a3:8d:3e:ce:60:e5:b5:
                    c2:7a:13:62:7e:9c:62:2e:5b:f8:5c:2e:2f:bc:4b:
                    58:b2:11:6e:dd:9c:db:1b:b9:11:22:1a:11:98:3b:
                    be:67:ca:b0:b2:eb:26:aa:a8:ee:71:85:c3:19:59:
                    32:bf:13:b9:b9:88:42:23:aa:13:d0:ec:0a:d9:82:
                    6e:f0:05:b8:6e:d4:28:dc:88:73:af:da:84:0f:6f:
                    a7:04:5c:06:7b:1d:62:7c:9a:cd:61:75:03:f7:24:
                    2b:d5:5c:6a:58:ba:f1:74:66:8c:b3:0e:d2:32:55:
                    97:ac:8c:d6:e4:1e:d9:a2:5a:9d:ce:e9:06:80:a6:
                    42:5b:2b:55:39:8b:27:51:a8:f9:8b:2e:2d:54:5b:
                    c0:7f:ed:54:d7:54:42:d3:e1:0a:e7:e5:a9:52:e6:
                    c4:89:91:24:b2:c1:1d:f4:1d:2b:fd:e8:01:0c:2c:
                    9b:40:c3:12:e6:8f:af:cd:c8:16:fc:4b:e4:6b:92:
                    c5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0D:2E:D3:53:3E:FF:9F:5B:A2:81:C5:33:E9:2D:79:F7:B5:72:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a9466cf4-7af5-3659-a603-e5ae815d5685.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:07:a7:24:7c:94:da:a6:14:b7:c9:d8:7e:d3:e8:ef:17:b3:
         9d:6f:9d:e7:c2:f2:35:74:cd:cb:74:c0:aa:48:49:2e:5b:a2:
         66:35:87:4c:25:70:db:01:dd:1e:55:35:9c:e2:d8:32:4f:54:
         cd:71:f2:d3:66:f5:b2:6f:a5:6d:48:7d:99:38:3b:81:8a:44:
         90:d3:45:1b:5e:10:99:57:05:cf:5b:5c:34:b0:3a:0a:6b:26:
         07:5c:4c:4f:cb:2a:c9:e6:dc:e6:1f:e6:18:f5:3b:ba:aa:bd:
         f4:94:ad:1f:0d:4d:44:48:cf:41:7e:32:61:ec:46:a4:54:f6:
         3d:5f:b5:f4:2b:9c:eb:7b:76:a2:3c:98:2b:8c:2e:98:3e:56:
         c6:d3:d1:d3:27:c3:ab:5f:29:2c:71:02:7d:f2:73:01:af:69:
         53:03:7d:ce:17:56:12:ca:7a:2f:8d:b3:9a:62:3d:b8:ce:7b:
         40:ea:fb:35:8b:d4:0b:84:f3:30:cc:05:37:61:e6:f8:31:01:
         d3:d9:52:d0:0e:91:bd:f4:89:40:fb:cf:52:3f:7f:eb:05:84:
         f7:65:29:a4:00:04:46:04:50:74:d0:01:ee:8f:b5:a8:9f:e9:
         f5:ca:4e:28:76:d9:60:0b:88:d0:d3:69:ee:94:01:fd:5f:bb:
         45:89:3f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:41:12 2026 by rpki-client