Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/a6e39eee-173b-35b9-ac53-2ff67455d848.roa
File:                     a6e39eee-173b-35b9-ac53-2ff67455d848.roa (raw, json)
Hash identifier:          wqdO3twA0TUSC4xbvFuxsKpBINzS3l5hnGnRa4XJKfc=
Subject key identifier:   42:C4:B8:D1:1F:62:4E:04:55:ED:96:57:E7:F2:94:B2:23:D9:D9:77
Certificate issuer:       /CN=13fecd24-0da7-4140-9636-71a72de851ec
Certificate serial:       010D0C9F4328584A6826037B099E8F79DA27C180
Authority key identifier: 71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/a6e39eee-173b-35b9-ac53-2ff67455d848.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     396871
IP address blocks:        137.83.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:03:7b:09:9e:8f:79:da:27:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13fecd24-0da7-4140-9636-71a72de851ec
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=7c1e2ff9-2099-4dac-a45d-20c0c62936ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f0:38:eb:4d:51:8b:4f:2d:64:ed:d2:40:ae:
                    35:a8:c2:60:7c:76:7a:65:c3:a7:5c:18:15:df:57:
                    79:e8:9e:f4:e0:25:d1:91:d7:dc:07:46:c9:cb:80:
                    6c:d5:62:39:1f:ee:94:33:b4:51:8e:eb:36:6a:50:
                    6d:03:24:f0:d5:ba:07:39:c1:28:5d:47:78:f2:dd:
                    0e:30:47:d6:77:66:08:50:18:a1:b8:23:27:c1:13:
                    47:7a:bc:65:d1:fc:df:d9:88:0e:91:e0:b5:fc:fc:
                    13:41:31:e1:e4:2d:45:01:2a:e0:b8:63:69:34:e0:
                    07:59:fd:81:4f:c7:f0:f5:96:ca:2b:dd:1a:e9:be:
                    18:c7:93:8f:35:dc:7d:8d:9a:a1:a3:0c:37:64:0a:
                    37:73:78:17:eb:39:89:0e:8d:17:f4:50:48:59:ec:
                    47:a0:e6:93:6d:fe:b9:74:17:cb:e4:b1:71:ff:5c:
                    ff:7e:3c:5e:75:d9:a9:4d:66:f5:62:03:cf:e9:ef:
                    66:2b:72:65:bf:81:07:ee:41:b2:f0:ff:66:ad:fe:
                    a2:d8:50:7f:53:e7:4b:6b:8e:22:22:4d:d8:86:a4:
                    e7:f2:1f:44:51:e8:b1:14:dd:11:72:ef:76:ab:d3:
                    45:d6:b4:b8:0f:e1:ec:7a:6d:39:78:aa:44:26:9f:
                    88:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C4:B8:D1:1F:62:4E:04:55:ED:96:57:E7:F2:94:B2:23:D9:D9:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/a6e39eee-173b-35b9-ac53-2ff67455d848.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl

            X509v3 Authority Key Identifier:
                keyid:71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:00:0b:d9:4e:9f:fc:e9:fb:86:12:1d:1d:cb:0f:a0:b1:07:
         b5:32:75:38:74:c8:e7:58:52:4c:3c:c6:4f:15:d6:42:56:d8:
         36:ab:62:de:39:5a:20:70:39:32:d3:84:a1:98:c0:81:23:c3:
         54:66:1a:47:6e:ba:6e:85:06:d2:76:04:8a:b0:61:10:98:41:
         32:a0:b8:3d:d4:db:3f:39:a3:8d:c1:fd:11:b5:12:b2:8b:90:
         c7:95:7e:79:30:3c:69:a6:06:a7:73:7b:95:d5:01:45:89:8d:
         66:8b:9c:41:6f:28:98:6d:c0:a3:34:f7:bd:65:c8:9d:97:9e:
         aa:c8:d9:2d:47:36:aa:c3:6c:cc:0c:c0:8e:8a:d2:be:6f:37:
         04:ae:3c:6a:34:eb:11:86:61:a3:43:81:66:c4:bc:4e:42:60:
         21:64:4f:82:b9:01:68:11:be:b7:dd:4e:ec:20:5a:f6:eb:84:
         d7:14:b9:1a:1a:52:34:12:2e:ab:16:4c:54:86:5a:96:b3:71:
         0c:72:01:01:c5:cf:a5:a2:67:a1:d8:d0:aa:f2:f7:c8:ce:05:
         45:10:cc:d9:55:31:20:80:1f:45:51:b0:f6:34:38:83:cb:c7:
         11:0b:64:a6:3d:fd:a8:a9:0e:01:cf:55:85:0d:d0:b7:7a:23:
         b9:ce:ca:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJgN7CZ6PedonwYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTNmZWNkMjQtMGRhNy00MTQwLTk2MzYtNzFhNzJkZTg1
MWVjMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
N2MxZTJmZjktMjA5OS00ZGFjLWE0NWQtMjBjMGM2MjkzNmVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPA4601Ri08tZO3SQK41qMJgfHZ6ZcOnXBgV
31d56J704CXRkdfcB0bJy4Bs1WI5H+6UM7RRjus2alBtAyTw1boHOcEoXUd48t0O
MEfWd2YIUBihuCMnwRNHerxl0fzf2YgOkeC1/PwTQTHh5C1FASrguGNpNOAHWf2B
T8fw9ZbKK90a6b4Yx5OPNdx9jZqhoww3ZAo3c3gX6zmJDo0X9FBIWexHoOaTbf65
dBfL5LFx/1z/fjxeddmpTWb1YgPP6e9mK3Jlv4EH7kGy8P9mrf6i2FB/U+dLa44i
Ik3YhqTn8h9EUeixFN0Rcu92q9NF1rS4D+Hsem05eKpEJp+ITQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFELEuNEfYk4EVe2WV+fylLIj2dl3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xM2Zl
Y2QyNC0wZGE3LTQxNDAtOTYzNi03MWE3MmRlODUxZWMvYTZlMzllZWUtMTczYi0z
NWI5LWFjNTMtMmZmNjc0NTVkODQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTNmZWNkMjQtMGRhNy00MTQwLTk2
MzYtNzFhNzJkZTg1MWVjLzEzZmVjZDI0LTBkYTctNDE0MC05NjM2LTcxYTcyZGU4
NTFlYy5jcmwwHwYDVR0jBBgwFoAUcfsH7Jbduh5RSiTnSMg1VDbRFH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xM2ZlY2QyNC0wZGE3LTQxNDAtOTYzNi03MWE3
MmRlODUxZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiVMgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE8AC9lOn/zp+4YSHR3LD6CxB7UydTh0yOdYUkw8xk8V1kJW2DarYt45
WiBwOTLThKGYwIEjw1RmGkduum6FBtJ2BIqwYRCYQTKguD3U2z85o43B/RG1ErKL
kMeVfnkwPGmmBqdze5XVAUWJjWaLnEFvKJhtwKM0971lyJ2XnqrI2S1HNqrDbMwM
wI6K0r5vNwSuPGo06xGGYaNDgWbEvE5CYCFkT4K5AWgRvrfdTuwgWvbrhNcUuRoa
UjQSLqsWTFSGWpazcQxyAQHFz6WiZ6HY0Kry98jOBUUQzNlVMSCAH0VRsPY0OIPL
xxELZKY9/aipDgHPVYUN0Ld6I7nOylg=
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:14:49 2025 by rpki-client