Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/fb9ffcd9-e341-358f-b3f9-9290f3543319.roa
File:                     fb9ffcd9-e341-358f-b3f9-9290f3543319.roa (raw, json)
Hash identifier:          i9I5VX1gZFLbHuSw16xWq6dV1K8+3G2L0DV70GpKvLA=
Subject key identifier:   37:98:3E:D0:C5:57:7B:7E:3A:B9:0B:EE:F5:2E:8E:00:3E:69:75:69
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAAFFE295E397BAC10993C40
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/fb9ffcd9-e341-358f-b3f9-9290f3543319.roa
Signing time:             Sun 03 Aug 2025 02:35:43 +0000
ROA not before:           Sun 03 Aug 2025 02:35:43 +0000
ROA not after:            Sat 01 Nov 2025 02:35:43 +0000
asID:                     53813
IP address blocks:        137.83.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:af:fe:29:5e:39:7b:ac:10:99:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:43 2025 GMT
            Not After : Nov  1 02:35:43 2025 GMT
        Subject: CN=6bac4594-5fce-4615-a790-627c3318d91d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e3:8d:59:c2:2f:b6:bc:80:e2:42:e0:ba:cd:
                    3d:82:53:50:d7:de:41:a1:71:b5:0d:9c:ed:1d:b0:
                    3a:6d:43:aa:33:ea:98:d8:ad:01:2b:84:35:d2:ea:
                    e2:11:68:d3:70:19:40:d1:61:76:9d:7f:d5:fd:bf:
                    7e:ed:e4:ed:8c:1c:37:48:28:c3:30:6c:cf:8e:ca:
                    65:47:6c:38:0d:67:b2:fb:0c:42:94:b9:a6:94:0e:
                    61:1e:5b:9b:ea:49:2d:83:38:01:3a:03:9c:ab:77:
                    be:b2:83:13:2a:60:63:c1:91:61:ed:ac:2d:fb:a8:
                    01:67:f3:a9:f9:62:b1:d1:c4:fd:e9:a7:18:b7:7a:
                    5f:f1:d6:9a:a5:71:01:b3:1e:76:f0:f9:c5:2b:b2:
                    fb:00:56:e9:f9:4f:a6:74:e0:c3:0c:3b:40:da:5e:
                    81:99:6a:87:fb:4e:30:3e:40:3f:60:b9:8e:0f:d8:
                    f9:96:f6:e1:6d:ca:94:e1:a5:ec:c1:27:c1:de:30:
                    cd:16:3f:20:05:dd:df:7d:3d:e8:33:cf:f7:8d:69:
                    2d:1b:64:23:83:80:d1:2b:8e:89:b1:66:aa:9d:be:
                    ea:f0:80:04:78:12:f0:5d:06:c5:be:c2:b4:64:4b:
                    17:c3:33:14:a6:b7:c0:0b:08:29:2f:18:72:33:ad:
                    80:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:98:3E:D0:C5:57:7B:7E:3A:B9:0B:EE:F5:2E:8E:00:3E:69:75:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/fb9ffcd9-e341-358f-b3f9-9290f3543319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:18:a9:96:71:43:9a:57:4c:80:e1:31:b2:c8:6c:cc:68:82:
         ad:86:8e:59:15:ad:a4:d5:49:7d:ce:c3:d1:04:28:65:74:fb:
         81:4d:3f:9f:b6:5c:92:a9:b9:93:97:ae:f1:4e:ca:ea:0f:96:
         8b:03:54:d4:7b:b9:84:7f:bf:c5:c0:e1:7c:56:04:ac:b4:1d:
         52:23:e7:1c:39:f2:7b:6e:a1:46:ca:44:da:27:4a:c1:f3:53:
         14:40:e7:c3:49:59:f9:63:fa:bd:3b:2e:fd:de:da:f6:33:fc:
         c1:29:51:66:5c:3d:9a:20:62:db:9e:c2:57:8b:35:8c:e8:bd:
         b1:1c:eb:e0:9b:22:c7:91:b2:a4:04:e2:3b:e4:9b:27:23:41:
         56:da:71:08:da:19:5f:67:90:98:0b:94:1a:79:08:cc:ef:e8:
         63:90:30:59:6a:5f:69:91:ed:35:93:53:9b:f8:25:33:36:a4:
         bf:10:cb:68:1c:7a:3d:44:12:04:a7:1f:2f:06:92:71:7e:87:
         f0:e7:07:cd:b2:95:f1:39:4b:6c:1d:ae:14:78:30:ca:98:42:
         0e:5f:33:75:da:77:a8:f4:29:fd:0f:b1:27:73:29:17:b7:a8:
         96:db:76:8a:87:a3:03:c2:0a:38:6e:45:a8:52:50:e4:07:09:
         39:b4:80:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:31:31 2025 by rpki-client