Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/43696143-d8db-364a-981b-da18b0951f51.roa
File:                     43696143-d8db-364a-981b-da18b0951f51.roa (raw, json)
Hash identifier:          FFp7lcYfWBd7ESc2b19mTQpiTj+XY8Hox0F0FwvadTQ=
Subject key identifier:   7E:75:FE:33:B8:14:72:43:D7:E3:02:ED:94:ED:55:5F:02:E3:D9:E4
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584ABD4BA16EE8463D380480DF40
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/43696143-d8db-364a-981b-da18b0951f51.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     16696
IP address blocks:        137.83.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:a1:6e:e8:46:3d:38:04:80:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=78f5a152-1c3d-4706-9fa2-47ff11b47f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:72:67:66:c5:7e:31:7f:53:4e:67:25:d7:3e:
                    15:2f:d2:70:49:55:bb:69:37:a0:4b:85:a6:58:46:
                    03:8e:17:ad:49:89:c7:f4:2e:68:9a:e3:c5:70:29:
                    5c:4c:3c:41:71:9e:ff:89:c2:7c:b5:5f:93:f6:f0:
                    7b:70:ae:5d:9f:81:a9:b5:1e:56:57:ce:d6:aa:94:
                    f6:d1:37:70:72:4b:73:e8:d8:c1:e2:19:e9:14:02:
                    b7:9c:1a:86:03:ea:74:4d:9d:9a:a7:c1:40:55:77:
                    98:b0:86:c4:96:de:bc:02:f3:be:3e:96:f0:2e:57:
                    fe:d9:52:5f:e4:62:64:8f:7e:30:44:b3:8a:df:12:
                    ee:2e:30:cb:1c:69:91:49:1b:4b:67:f5:9e:e0:b3:
                    e5:12:08:bb:8c:fa:04:cc:8c:7f:0a:94:0b:5b:51:
                    05:50:74:39:49:ab:7e:11:55:97:5f:b7:e0:6f:52:
                    4c:b4:09:f8:89:47:9b:b5:1c:19:f3:c1:8a:b0:cf:
                    a3:aa:7c:ec:4e:4e:7d:8b:4b:70:5f:71:dc:0a:d5:
                    f1:89:26:ee:03:4d:04:9a:07:3f:33:40:8e:37:59:
                    e8:79:e6:65:53:70:64:3d:8d:6a:65:1c:95:c1:37:
                    a3:dc:a8:0a:9a:5f:c7:56:e8:77:e9:3c:da:dc:e2:
                    04:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:75:FE:33:B8:14:72:43:D7:E3:02:ED:94:ED:55:5F:02:E3:D9:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/43696143-d8db-364a-981b-da18b0951f51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:44:34:79:2f:5d:35:57:0c:7d:d2:c7:ec:26:01:35:17:11:
         8c:66:14:7d:25:ca:05:c4:62:d0:f5:1e:6f:b4:f7:99:de:91:
         13:38:62:06:c8:69:9b:8d:fa:c9:06:34:fa:21:b5:9d:23:7e:
         f9:72:ba:0f:f7:dd:18:50:cc:fb:c7:84:79:bb:ff:1c:fb:6e:
         ae:c4:2b:cd:ec:d2:06:fa:00:a7:f3:0a:d5:86:0e:29:60:5c:
         01:c1:5c:89:4d:b2:b6:2d:e4:ff:b6:dd:49:ec:6b:90:c9:47:
         b2:d3:4f:fd:d4:f6:b8:4d:08:0e:ad:f8:3f:81:53:22:de:e3:
         c0:a2:94:86:62:63:b8:f1:b5:f3:40:28:f7:a7:57:d5:19:1e:
         24:c1:5d:b9:b5:de:e5:92:e8:ed:84:19:ed:85:b3:1e:90:04:
         d8:29:dc:38:7b:3a:20:9a:09:e0:6b:63:a3:13:5d:d5:e6:eb:
         fc:fc:d2:a7:ac:0c:86:c1:22:90:86:8e:b4:cf:2e:1d:d9:45:
         ca:b1:31:1c:2d:3c:93:5f:cd:f9:61:c2:51:e1:05:d7:3e:32:
         6c:93:fe:dd:b5:a6:45:a5:6e:63:14:22:93:4a:9c:2a:16:45:
         82:eb:af:98:fc:18:2f:74:10:38:97:88:f3:61:11:15:9d:eb:
         74:41:90:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:13:13 2025 by rpki-client