Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bb05a216-1ac8-3c2c-9092-1a626aa882b8.roa
File:                     bb05a216-1ac8-3c2c-9092-1a626aa882b8.roa (raw, json)
Hash identifier:          hK4qH3IzokAaziCqF6wlLUIDG67cJZII570BIRzC13Y=
Subject key identifier:   DF:4C:15:2F:45:BD:76:CB:D5:C7:21:E8:60:37:01:24:BA:A8:32:31
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3CF3F8C1DB36682D60BA00
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bb05a216-1ac8-3c2c-9092-1a626aa882b8.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     22616
IP address blocks:        137.83.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3c:f3:f8:c1:db:36:68:2d:60:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=70783260-9541-44f6-936b-39f8e1891328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:71:07:1b:4e:5e:01:a8:ef:46:3a:19:db:45:
                    68:ee:64:8d:39:31:a7:16:a5:aa:79:ba:8b:35:e2:
                    2b:06:ab:2a:37:c2:67:4f:49:92:81:12:52:e1:6c:
                    c3:32:a8:7c:61:62:12:ba:93:2a:2d:d9:dc:8b:17:
                    5d:f0:f6:68:75:83:0f:68:9c:5e:89:fe:a2:a9:34:
                    c6:1e:de:97:0e:61:84:10:cc:f5:2d:a5:1a:99:3c:
                    28:89:3c:7d:7c:39:29:bb:f4:65:6d:4e:0f:71:69:
                    65:9a:8e:92:cf:19:c8:c2:ca:f4:81:af:54:ef:da:
                    3b:f8:c1:98:cb:67:9c:96:2d:aa:5c:7d:98:63:60:
                    24:e4:c6:b0:f0:fc:8c:da:b9:a2:f4:8f:97:a9:b1:
                    80:4e:47:32:90:4e:a4:3a:4d:5f:27:c0:cd:e0:1c:
                    6a:da:6a:28:5a:bb:d4:bf:39:76:25:ee:e0:b9:20:
                    70:1e:f9:32:79:70:f9:39:d9:5c:06:af:cf:d8:c7:
                    e3:7b:e8:dc:66:e3:b3:50:54:38:6b:d3:21:cd:a9:
                    37:40:29:d4:bc:d0:0d:7a:5d:67:5c:0b:8d:05:87:
                    d6:0c:14:67:9b:7d:41:0e:9e:2a:d7:62:21:26:a2:
                    d8:3d:a8:72:fc:10:f6:e1:20:b6:3b:68:ea:0d:fd:
                    31:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4C:15:2F:45:BD:76:CB:D5:C7:21:E8:60:37:01:24:BA:A8:32:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bb05a216-1ac8-3c2c-9092-1a626aa882b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:9b:23:00:c4:99:04:12:6e:ae:b7:55:ca:33:5d:d8:a7:7b:
         bf:44:f1:f3:b5:a3:6f:98:32:4f:b4:1e:80:3d:dd:3a:77:09:
         1c:31:ba:59:a2:7c:9f:29:03:d1:e5:b0:3b:a4:91:b0:e1:43:
         aa:fc:d8:82:50:75:81:c8:7f:a0:8c:c3:a1:95:96:f0:d6:b1:
         22:93:ba:29:df:7b:22:d8:bc:b4:02:ab:60:e3:6a:2a:64:f8:
         36:da:48:72:8c:0f:93:48:19:37:ea:6c:a1:c9:eb:7c:5d:6f:
         09:68:ed:01:2d:c4:6e:3f:bf:b5:2b:88:c7:a2:47:dc:65:20:
         73:a3:c5:28:8a:e1:82:6c:06:87:e9:28:0a:39:9b:64:46:0f:
         73:30:47:6f:80:cc:92:d8:1c:9d:ae:bb:72:ee:2e:71:4e:4d:
         d2:c4:b0:a0:4b:69:48:d7:0a:ea:a6:b2:e1:78:83:f3:0f:24:
         89:49:4c:bb:87:45:34:62:64:af:03:10:48:6b:d7:e3:e4:c7:
         30:04:8a:94:06:71:98:d0:7f:fa:33:7d:2b:12:20:00:02:ed:
         56:aa:97:66:cc:9b:e5:c8:d0:53:9a:02:37:48:13:f2:3e:48:
         e5:9e:4e:7e:77:42:01:70:89:8b:0d:fc:12:a3:3e:bb:a0:4c:
         7d:93:43:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:54:50 2025 by rpki-client