Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/7a5e5517-6a41-3a0c-bdd0-88475ec9f6f5.roa
File:                     7a5e5517-6a41-3a0c-bdd0-88475ec9f6f5.roa (raw, json)
Hash identifier:          Z+SEScU/PhgqZP/qE1BK8U79vsuw4wHzmn3lpOcTrIs=
Subject key identifier:   30:99:1C:DB:8D:73:31:9D:50:F4:D9:1C:1D:07:43:A6:11:B7:74:EF
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584F1B624931D945D57F77E1D6A0
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/7a5e5517-6a41-3a0c-bdd0-88475ec9f6f5.roa
Signing time:             Tue 08 Sep 2026 13:00:12 +0000
ROA not before:           Tue 08 Sep 2026 13:00:12 +0000
ROA not after:            Mon 07 Dec 2026 14:00:12 +0000
asID:                     36511
IP address blocks:        137.83.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:62:49:31:d9:45:d5:7f:77:e1:d6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Sep  8 13:00:12 2026 GMT
            Not After : Dec  7 14:00:12 2026 GMT
        Subject: CN=af40afb8-a7f5-413e-b35c-6e2a5cfa1659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:76:17:75:f4:23:9c:3a:8f:e7:5f:13:89:85:
                    1b:b4:ad:80:82:40:45:70:e1:b4:63:ed:7c:6c:00:
                    8a:e1:4b:de:37:8d:29:9c:2c:9e:90:35:60:65:44:
                    8e:33:1b:09:9e:0e:0d:4c:04:66:eb:e4:59:24:70:
                    0b:f8:af:5b:22:46:54:db:34:18:4b:96:de:c7:fd:
                    68:1a:0b:97:f5:79:89:b5:9e:5d:f9:b0:39:96:3f:
                    1a:49:61:b6:36:db:d6:eb:88:8c:5a:9a:6a:02:a4:
                    e2:1d:c1:2b:e7:fb:ef:6a:51:e6:0a:95:fa:ed:4f:
                    81:22:be:81:cc:b0:ec:70:86:1f:c6:d4:64:94:f8:
                    8e:34:44:6a:22:ae:7b:95:6b:e4:4f:4a:a6:62:94:
                    a1:94:9d:3a:c1:39:7b:8c:0e:bf:a7:5b:19:3b:2a:
                    22:a2:7a:18:81:c6:88:f5:50:e6:9f:b1:ac:4b:13:
                    c4:fa:72:b4:19:82:17:34:76:18:a6:92:7d:25:33:
                    ae:3a:38:ab:c5:d0:a5:18:18:9d:6e:39:86:e0:c9:
                    a1:a5:15:54:b1:57:8c:bd:89:e9:42:0e:48:4c:8c:
                    8d:38:0d:1c:82:ba:7b:65:bc:a6:ee:b5:a3:b3:a2:
                    33:dd:8a:8d:c3:83:53:f4:d1:2e:b9:ae:f7:2a:a4:
                    6c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:99:1C:DB:8D:73:31:9D:50:F4:D9:1C:1D:07:43:A6:11:B7:74:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/7a5e5517-6a41-3a0c-bdd0-88475ec9f6f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:f4:6d:69:15:ea:65:81:4e:fb:f8:d2:11:c3:da:af:4f:3b:
         52:5c:df:93:ce:43:41:3c:55:ac:df:e4:67:41:dd:30:f9:c0:
         72:04:37:f5:9b:9d:74:07:23:62:f5:a9:f6:7b:07:6c:79:db:
         00:14:15:40:1b:d1:63:97:1a:3a:12:46:12:12:63:0f:b7:78:
         2c:0e:7d:9d:48:65:c7:c2:21:2a:4d:9b:44:20:75:84:82:d5:
         af:c2:8e:b1:6e:5c:75:3b:d1:95:38:6e:aa:1f:8c:06:83:b3:
         31:a9:5f:11:d9:38:9c:62:2b:3f:5a:b4:5f:90:b8:0a:06:2d:
         8c:7f:4c:08:d9:09:28:c7:c6:0d:9e:7d:e2:18:12:19:eb:8d:
         99:95:c8:bc:54:41:57:22:30:df:f5:6f:4d:3e:d1:c4:33:53:
         47:74:c4:e2:33:e1:53:b6:17:f6:ad:74:8e:f7:40:6e:68:ae:
         2e:a3:65:03:da:c1:fb:e4:76:d3:a7:84:65:11:93:9d:d6:db:
         4b:cd:32:22:b2:d2:63:55:7b:f0:14:70:b2:2f:8e:81:d6:e7:
         fe:88:de:4c:17:3d:37:e9:20:aa:b8:99:f6:62:d2:23:52:31:
         e4:7e:94:53:d8:ea:fb:cc:16:6d:b5:d2:b3:e5:96:f1:1c:33:
         25:61:c5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:35:40 2026 by rpki-client