Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/bb7fb158-cc7e-3f64-812a-6488d3fb6c13.roa
File:                     bb7fb158-cc7e-3f64-812a-6488d3fb6c13.roa (raw, json)
Hash identifier:          vy0BlToB/Yau1pRvzqFwuNA58YvkHtz8dLJQ4boHHxk=
Subject key identifier:   05:CF:33:33:39:C1:87:CA:AB:78:AE:D6:92:FD:2C:4E:9D:73:F4:AE
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584A17300563E2B1C95331F9E000
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/bb7fb158-cc7e-3f64-812a-6488d3fb6c13.roa
Signing time:             Thu 05 Jun 2025 13:01:03 +0000
ROA not before:           Thu 05 Jun 2025 13:01:03 +0000
ROA not after:            Wed 03 Sep 2025 13:01:03 +0000
asID:                     36511
IP address blocks:        137.83.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:30:05:63:e2:b1:c9:53:31:f9:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Jun  5 13:01:03 2025 GMT
            Not After : Sep  3 13:01:03 2025 GMT
        Subject: CN=fd382781-bd46-4177-b4cb-bb6d6ab00f69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c7:9c:42:fd:56:b0:a6:cb:65:5e:bb:50:aa:
                    17:78:e7:c8:1a:5c:59:4b:02:f5:7b:dd:04:8e:dc:
                    33:ba:e4:66:86:ff:90:db:e3:bf:4f:f5:45:ed:64:
                    65:fb:eb:c4:a0:e4:74:71:08:b4:45:2f:9f:46:a6:
                    04:03:02:14:f6:e4:fe:55:f6:77:29:c6:b4:d4:68:
                    47:58:3e:bb:9c:45:b7:b6:4b:d3:ae:d3:b0:7b:06:
                    3c:c8:1e:a2:ee:e8:b9:25:be:c2:e3:54:d9:42:42:
                    f6:84:5f:b9:93:b3:c8:64:55:1a:a8:b0:b5:58:c2:
                    9b:e0:bc:ab:05:48:da:6d:28:2b:e0:ea:ce:d9:d1:
                    61:99:dd:60:93:0c:64:cd:d7:7d:58:70:80:4b:18:
                    6d:26:fb:db:ae:6c:0d:1f:33:31:a8:c6:8c:8a:b6:
                    66:5f:0c:0b:2d:82:ab:db:c9:fd:63:e9:4a:63:b9:
                    69:58:54:e2:7e:0c:63:7a:38:ec:d6:98:8c:e6:ff:
                    34:72:77:d0:f0:59:15:8c:71:c5:a2:cf:39:e4:a1:
                    9c:c9:83:72:70:5c:f8:d4:7d:0e:53:39:76:93:7c:
                    46:d4:cd:10:99:21:8d:13:9c:62:a8:17:9d:13:7e:
                    a9:a3:64:91:5f:9e:b1:3a:7b:76:18:4f:22:e9:5b:
                    1c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CF:33:33:39:C1:87:CA:AB:78:AE:D6:92:FD:2C:4E:9D:73:F4:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/bb7fb158-cc7e-3f64-812a-6488d3fb6c13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:71:7f:11:d4:81:d7:16:c9:9a:bc:46:eb:bd:00:c3:68:0b:
         64:a7:d7:8f:8e:e4:6b:fd:36:11:a9:55:e4:e5:1e:f1:56:f3:
         d4:fa:ee:1f:8a:5b:fe:49:2b:4c:8b:05:a9:93:e6:67:eb:4e:
         7d:8c:8c:2a:7a:e6:54:01:5a:02:d6:dd:2f:f6:8c:ac:d5:9f:
         87:b1:1b:ea:7a:0c:ac:37:f3:f7:2b:5b:ff:a3:67:41:2b:eb:
         1d:f0:18:c9:2e:1b:b1:6c:5a:32:3a:4e:9b:77:0e:a9:5b:ca:
         6d:dd:fb:d8:8f:86:16:c1:7d:da:ec:3a:dc:0a:04:fd:44:fe:
         0c:a0:28:f0:9b:90:0f:34:c9:9c:14:cc:e2:6d:fe:51:2e:e2:
         78:e1:f2:94:fa:d2:9a:29:cf:cb:d2:4b:4d:b9:5a:b2:76:79:
         5e:13:7c:f6:e1:7a:67:c4:8e:cc:7b:a7:9c:24:0d:d5:1a:b0:
         9e:6c:62:2b:72:6d:c1:db:f4:ba:35:ad:4e:6d:fd:c5:9a:93:
         29:2a:fe:77:b1:c1:9a:6f:d3:d4:9a:95:84:1f:74:ec:0e:1f:
         9a:f5:0a:f7:8b:f5:bf:0f:4c:f3:ba:dd:ef:65:05:6a:2a:18:
         6e:23:dd:49:8a:14:05:ef:f3:63:51:bb:40:16:2e:4f:c5:36:
         e9:72:5e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:22:05 2025 by rpki-client