Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/5db4edd1-aa2e-399f-8b8d-946cfbab4c6f.roa
File:                     5db4edd1-aa2e-399f-8b8d-946cfbab4c6f.roa (raw, json)
Hash identifier:          GcErduD9tb0AqY+JQ6kSd1NBWHXNKn6/p3Iw7MIp5uI=
Subject key identifier:   F6:1D:7C:29:52:6F:72:5B:A8:44:55:D2:10:41:05:07:25:3E:56:1F
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584EE0C20C6CB1EF374277795B40
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/5db4edd1-aa2e-399f-8b8d-946cfbab4c6f.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     16696
IP address blocks:        137.83.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:0c:6c:b1:ef:37:42:77:79:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=5db1d618-8695-4a29-9f2a-5424a52c513b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:90:b1:7b:69:80:8a:ab:30:1d:91:20:c3:db:
                    42:42:bf:79:bd:fd:3f:91:45:7d:7e:0a:b1:c5:4a:
                    95:be:07:7e:47:a5:9d:d1:7e:78:5c:07:4e:a9:fd:
                    dc:6b:73:6c:ac:17:8f:10:e8:ed:81:d3:70:94:55:
                    a8:ad:e6:74:1d:69:cb:c8:15:62:bc:94:a1:c3:57:
                    be:a5:12:f1:d4:09:5f:c9:f5:5c:e1:94:fd:a1:68:
                    8d:b1:6a:8d:13:d2:4e:23:99:7b:19:a8:35:84:7d:
                    2b:a2:ba:c2:b6:63:48:5c:d1:76:79:85:2a:01:2c:
                    f1:01:25:5c:5c:29:20:9b:59:8f:e6:5d:01:74:e6:
                    6b:14:6e:e7:a7:19:40:79:ab:f9:92:4a:96:d6:62:
                    03:b4:4b:8f:7b:47:c1:d3:28:41:99:30:fb:32:80:
                    49:6b:94:51:77:d5:08:34:48:45:a9:02:cc:b3:e6:
                    df:9a:52:8b:ef:80:e8:9f:ff:0d:91:a7:54:c7:66:
                    2b:88:91:51:f6:b9:b9:07:9f:5d:56:8d:5a:09:63:
                    53:e5:de:41:b1:e2:f3:c9:75:03:41:88:dc:01:90:
                    b8:23:e4:ad:78:07:42:9a:a4:ac:31:e3:0b:7f:a0:
                    0e:bf:18:8a:ee:39:28:e8:4b:21:e6:4f:a0:25:a9:
                    47:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:1D:7C:29:52:6F:72:5B:A8:44:55:D2:10:41:05:07:25:3E:56:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/5db4edd1-aa2e-399f-8b8d-946cfbab4c6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:9d:aa:e8:09:1d:e9:d8:ee:73:5e:51:40:83:35:cd:1a:af:
         06:0c:8c:ca:9f:75:82:0a:c3:60:34:1c:46:05:21:16:db:a1:
         1c:f6:20:ac:f1:f5:2b:f8:f6:6b:d1:70:ef:77:5e:8d:54:07:
         c7:f6:8f:a6:10:e3:79:67:25:5c:3c:3d:5c:23:3c:a8:32:08:
         a9:c6:a8:0f:5d:16:f9:96:16:9b:cb:f6:87:4b:00:10:f9:e3:
         a2:e5:2b:44:aa:ac:d4:d9:80:6c:c3:ba:ff:28:0c:20:c2:a7:
         a3:d6:44:42:91:57:ba:e6:0a:25:be:59:a0:80:1f:67:e5:3e:
         e6:d2:fc:23:13:ec:d1:50:7d:29:2c:23:7a:2b:c4:3a:ad:40:
         7f:bb:66:a8:66:af:dd:ca:98:5a:6c:4a:48:e0:e6:86:1b:77:
         48:ac:bc:1d:52:94:40:b2:80:3c:da:da:d9:54:26:7b:53:80:
         9d:f0:b4:6f:0d:85:64:98:e0:1c:30:b0:76:e0:40:cf:ea:e0:
         68:0b:9c:df:3a:55:3a:a3:a4:2b:0d:0d:c1:79:21:07:36:6b:
         e0:4e:41:62:21:66:b0:06:1b:93:4d:e7:bf:3e:48:12:70:b1:
         f2:42:bf:f0:88:77:e4:c4:3b:6e:c0:76:79:a4:16:c3:85:24:
         5e:a7:71:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:59:48 2026 by rpki-client