Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/5db4edd1-aa2e-399f-8b8d-946cfbab4c6f.roa
File:                     5db4edd1-aa2e-399f-8b8d-946cfbab4c6f.roa (raw, json)
Hash identifier:          KGPTFTVE/8DxcBjoUKRXWVvjo9W0VHyPkiDCwm1zEuE=
Subject key identifier:   2A:BF:76:20:FF:0C:F0:BD:ED:05:AC:07:3F:83:E5:9C:DF:CA:92:7A
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584E3E5F40F01B2824C8D7185080
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/5db4edd1-aa2e-399f-8b8d-946cfbab4c6f.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     16696
IP address blocks:        137.83.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:40:f0:1b:28:24:c8:d7:18:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=e4ca690e-284f-45bf-a7d5-a4aa907e2a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2a:9c:74:f0:bd:56:89:f8:ec:7a:6a:fa:5a:
                    d9:67:5c:89:af:77:40:a1:74:b3:12:6f:73:9d:75:
                    9e:a1:ff:89:12:ee:cd:24:46:89:71:b4:7e:38:3e:
                    8f:b7:fe:9d:5f:99:e2:86:5b:02:8d:be:cd:50:cf:
                    7c:e3:ac:f0:f5:48:03:eb:94:94:25:eb:69:f2:e3:
                    5d:1d:2d:58:f6:cc:4d:6c:4a:4e:7d:5b:e5:85:e6:
                    df:8d:20:2a:79:a0:15:b9:43:ed:00:6b:c1:fc:6a:
                    37:40:fd:97:d1:5f:d2:62:8c:02:27:da:e2:25:f8:
                    b4:9e:c7:a8:35:c6:d9:64:03:24:67:24:ca:0f:57:
                    b0:e7:26:29:27:a8:6c:d0:fe:7e:54:f1:a2:e4:d1:
                    fe:ee:29:04:82:ff:39:6a:bb:2e:d6:97:9b:ec:f0:
                    cf:53:93:5d:af:05:5a:60:7d:37:92:ca:9f:67:36:
                    71:24:2b:5a:0f:82:0c:05:3b:c0:61:1a:d3:b5:05:
                    03:53:1a:74:99:12:e6:f4:68:4c:c7:a8:88:77:10:
                    d4:fb:fd:99:39:1c:c0:09:d6:ce:a4:0a:4f:90:89:
                    24:f9:c3:fd:f3:ed:bb:57:1b:57:dd:2a:f5:90:db:
                    27:01:d0:23:cd:97:4d:42:a0:de:f5:23:89:ae:cc:
                    f5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BF:76:20:FF:0C:F0:BD:ED:05:AC:07:3F:83:E5:9C:DF:CA:92:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/5db4edd1-aa2e-399f-8b8d-946cfbab4c6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:e1:9b:5c:12:dd:b9:29:3e:30:3e:a2:b4:5e:41:ff:85:ae:
         c8:47:cd:d4:d5:18:94:9c:bd:f2:a7:a4:c2:96:30:df:66:9e:
         b8:b5:0b:79:c6:4b:04:6e:79:36:96:38:45:6b:b0:ff:a0:c2:
         49:ef:31:d5:c4:d6:e9:b4:93:32:da:14:00:49:dc:d2:69:d2:
         16:a5:bd:96:a0:a7:8a:a8:22:99:e2:6c:16:12:29:d1:73:f1:
         6d:0b:ff:30:a1:0c:f7:8a:d4:4a:5f:7e:76:6b:f1:01:38:f6:
         57:42:22:5c:21:c2:04:f3:6d:90:12:e2:df:1b:08:42:6a:7b:
         c4:84:47:0b:a2:3b:4b:76:6a:79:f1:62:54:36:2d:1a:a7:de:
         2d:ee:2b:f1:82:0e:07:d7:27:e9:e7:86:e7:d5:37:07:4c:39:
         bc:06:fc:f4:f4:f4:15:61:71:b0:8a:b4:ee:67:33:82:8e:bf:
         6d:b1:8e:e8:20:bf:23:48:dd:e2:ee:d1:c3:19:24:eb:75:d6:
         5f:fb:48:08:44:d6:63:06:36:44:89:65:d3:4e:62:81:84:0f:
         bb:00:81:b9:d8:0b:4f:e9:80:f0:0b:58:8a:58:27:54:60:e3:
         3b:68:15:f4:f0:0f:3a:06:f1:44:00:11:91:f5:b8:cc:6e:2e:
         3f:68:3f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:20:56 2026 by rpki-client