Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bcdcacc5-265e-38a5-b853-885573ae6b5a.roa
File:                     bcdcacc5-265e-38a5-b853-885573ae6b5a.roa (raw, json)
Hash identifier:          9NQZRdvBwuBnC2cHzwtZR3J4ad4wEw9aM1FAxW+gpVs=
Subject key identifier:   30:35:8C:9F:A0:B4:59:A5:A5:01:A1:7F:43:13:13:EF:B3:02:46:44
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584E3B9472C3449D90264D2FBA80
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bcdcacc5-265e-38a5-b853-885573ae6b5a.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     22616
IP address blocks:        137.83.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:72:c3:44:9d:90:26:4d:2f:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=e1512fd3-f217-4a63-aa2d-1bdae3e97384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:20:bb:fe:5e:e2:db:d4:36:1a:32:53:f7:16:
                    20:70:60:b5:63:72:35:db:7c:e7:f3:8c:a0:9d:b1:
                    c3:cc:36:f8:a0:5f:15:59:7f:2c:95:4d:34:08:95:
                    c9:82:7a:5b:af:af:3b:58:7e:74:72:97:c3:0f:d1:
                    21:5a:c0:ee:3d:8e:70:00:4d:7b:62:b7:fd:c0:f4:
                    2f:7e:d5:97:74:fd:79:4d:27:e8:60:2d:d4:46:d3:
                    79:1b:16:3f:57:c2:43:81:77:e8:37:74:db:06:ca:
                    67:fd:58:6a:e9:d7:f9:2f:4c:f1:93:ea:34:79:90:
                    0f:05:d1:de:66:ec:55:2e:1e:69:91:8a:31:c4:0d:
                    cb:5a:23:98:ff:65:28:3e:50:05:b5:35:55:b8:de:
                    85:2d:37:e3:af:00:47:b9:1f:42:c3:fa:48:25:0e:
                    a3:83:d4:fc:25:4f:7b:54:ed:5d:ec:66:b5:c6:7e:
                    7e:f7:35:4d:66:ec:a7:5d:b4:0d:9b:55:33:70:e6:
                    44:a6:07:e6:b3:f5:24:bd:0a:5f:62:81:82:3c:22:
                    7b:9f:63:7b:60:11:3c:f5:49:99:38:8b:8e:7f:05:
                    14:b4:ff:0b:3f:74:b9:b8:64:9e:ed:e6:e1:33:1c:
                    b1:5d:da:4b:fa:fd:b2:00:47:19:ac:e2:43:ff:cd:
                    f3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:35:8C:9F:A0:B4:59:A5:A5:01:A1:7F:43:13:13:EF:B3:02:46:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bcdcacc5-265e-38a5-b853-885573ae6b5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:91:37:46:81:17:c0:58:3e:3a:55:f8:c5:2d:26:6c:ec:79:
         6f:7b:b0:5d:c5:2f:3f:82:a0:d0:14:bf:e2:e1:2e:aa:5f:be:
         54:69:e7:76:f0:24:1a:06:8a:e6:6d:73:e3:23:ba:5d:1f:93:
         f0:87:c6:a5:e0:c4:88:f2:0c:75:a4:86:29:be:87:2c:ac:99:
         80:14:3d:c4:56:e1:40:0e:56:32:5d:6a:93:5b:67:ce:b5:4b:
         90:a5:91:1e:f8:52:85:e5:d1:3f:85:15:29:03:6b:67:79:07:
         3c:5c:d4:35:c5:6c:34:e0:16:7c:03:29:58:15:75:0a:12:2e:
         41:e2:6e:52:6b:84:29:82:80:b0:ab:94:0f:a3:1b:4a:7f:3d:
         36:8e:85:6a:27:fc:7b:69:5d:88:3f:ff:2a:48:7f:95:93:53:
         ab:77:8c:32:95:a9:15:78:66:9c:47:19:66:c4:c9:10:fd:eb:
         a1:71:0e:88:60:e9:de:06:89:1a:9f:97:cf:81:45:6c:c8:72:
         50:92:d9:45:6f:cf:bf:32:16:9b:f3:f6:cf:c5:44:28:ad:2b:
         a8:ad:1c:ef:57:3a:2e:45:31:c8:c1:c0:db:22:b3:12:35:33:
         2c:71:8d:79:97:cb:37:dc:28:f2:90:ac:3c:26:df:1f:fc:20:
         83:2b:ed:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:48:11 2026 by rpki-client