Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/1cd2ae84-266a-3017-bcaa-4c3494a17476.roa
File:                     1cd2ae84-266a-3017-bcaa-4c3494a17476.roa (raw, json)
Hash identifier:          xivNTg938FWVhj6mRiev6oi+GFzzw0a0fA44nkjsSEU=
Subject key identifier:   CD:59:F7:84:64:07:96:20:B0:BF:12:3D:FA:C6:16:90:D8:38:E8:43
Certificate issuer:       /CN=3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb
Certificate serial:       010D0C9F4328584ED001F819D6B9976810EF37C0
Authority key identifier: 8D:C5:0D:DB:AC:9F:FD:0A:83:61:55:C8:DB:3B:59:5A:D7:3A:03:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/1cd2ae84-266a-3017-bcaa-4c3494a17476.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     46626
IP address blocks:        137.83.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:f8:19:d6:b9:97:68:10:ef:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=b7d85534-844d-4455-bfbb-3073effae7ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0d:5e:48:6d:2f:4c:ba:14:39:42:0f:08:40:
                    1f:80:93:94:44:5e:6b:72:b9:3c:b8:c0:b4:ee:53:
                    fd:44:eb:58:c2:fc:be:5c:5c:46:e0:5e:75:a7:ad:
                    ac:ff:50:f8:84:f3:cc:4f:63:ad:60:cc:b8:8d:82:
                    b5:83:bd:cc:d4:f5:13:f7:b4:84:8d:54:f2:3e:78:
                    9e:5c:15:df:35:97:58:96:08:ba:45:ad:21:dd:69:
                    18:a1:f0:36:93:56:43:1d:e6:0e:1a:52:5b:40:cf:
                    f0:6e:ed:30:aa:97:7f:68:ba:79:42:48:af:45:ce:
                    e0:12:a5:15:b2:43:32:1c:f3:be:d9:7a:11:05:e7:
                    65:1c:63:fc:22:c4:91:5f:f6:dd:21:58:6c:35:0c:
                    be:88:7c:7f:96:b8:21:32:88:e6:f1:ee:f8:1a:cf:
                    bb:7d:e2:94:bb:f1:a4:1c:1b:c7:8c:c0:84:0f:9f:
                    d6:6a:9f:2f:1b:a0:f4:a8:ec:fd:11:26:df:87:c0:
                    e2:e0:8b:d9:5e:d7:19:82:82:93:a0:c4:5e:f8:db:
                    f8:b7:04:a6:ff:e6:8e:39:5b:86:f9:b7:9c:7c:4d:
                    17:e9:c5:e3:dd:c7:54:ac:30:dd:70:fb:86:5b:d3:
                    07:21:a8:8a:af:0e:e4:d6:87:cf:50:f9:cd:ff:29:
                    a8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:59:F7:84:64:07:96:20:B0:BF:12:3D:FA:C6:16:90:D8:38:E8:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/1cd2ae84-266a-3017-bcaa-4c3494a17476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.crl

            X509v3 Authority Key Identifier:
                keyid:8D:C5:0D:DB:AC:9F:FD:0A:83:61:55:C8:DB:3B:59:5A:D7:3A:03:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:99:68:94:09:15:9b:88:8c:b3:c3:e9:1c:89:5b:d4:c1:d6:
         4f:31:0b:fc:51:38:51:d0:ef:6f:1c:9d:69:fb:00:81:54:ab:
         51:aa:94:80:dc:f4:05:6c:02:a7:c6:27:81:1b:cd:fe:e0:6f:
         55:ac:91:e6:3a:30:8c:9b:d9:19:f2:e7:ed:54:cc:41:ca:3c:
         e2:51:98:4f:75:8b:62:04:e7:a3:1c:39:1e:5e:66:e5:e4:d5:
         11:3a:38:c0:dd:5f:f5:54:7e:53:cb:03:c8:f5:73:7d:8a:04:
         14:0b:56:88:06:d0:7b:ab:49:b9:5f:06:f8:23:bc:f5:00:6c:
         2b:92:39:5c:c1:b8:4e:9f:be:88:da:a9:33:c6:ab:0d:20:f9:
         65:0d:6c:7e:6f:10:d2:71:9b:5f:db:49:c4:22:1b:d0:93:0c:
         4f:c4:7a:31:f6:e1:ed:16:3a:50:cf:d1:4c:cf:62:7f:1b:d4:
         d8:10:0c:72:ba:3d:ad:c3:a7:73:ae:e6:4e:c9:a7:1d:1a:6a:
         8a:2b:97:88:cf:f2:23:af:51:2b:e2:e9:26:1e:7f:e8:9d:6a:
         36:30:08:c5:4d:fb:d9:15:e2:12:f0:5f:32:a3:66:8c:0d:25:
         7f:ea:4c:59:dc:e4:a4:21:ab:9e:11:ea:1b:89:f6:bf:7a:30:
         5e:82:c8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:34:06 2026 by rpki-client