Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/c887cf8e-05d3-3f81-9838-af82b7821e2d.roa
File:                     c887cf8e-05d3-3f81-9838-af82b7821e2d.roa (raw, json)
Hash identifier:          GOwkvVjJzt35vjqLzKU4PxnbXdB+JQbT9VdXO+m4Q9w=
Subject key identifier:   8B:AD:13:93:DC:FE:95:A8:0A:B3:28:8F:BE:7E:5E:1F:E4:A4:9E:E9
Certificate issuer:       /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
Certificate serial:       010D0C9F4328584D386A62912DAE2140C4516000
Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/c887cf8e-05d3-3f81-9838-af82b7821e2d.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     5650
IP address blocks:        137.83.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:62:91:2d:ae:21:40:c4:51:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=17979db3-dc5b-4327-b69a-141d84bb1b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f1:53:4a:67:e0:ee:a8:33:9a:24:68:3f:87:
                    f6:5b:84:6f:f0:c0:29:4f:bd:0c:28:ad:e9:a7:2e:
                    e7:65:9b:11:8e:f8:93:ca:13:6b:73:33:2c:bc:9c:
                    1b:85:64:98:f4:fc:09:c0:50:aa:7b:d5:98:80:e7:
                    29:ad:55:5e:81:7d:af:7c:d5:d9:03:57:f7:02:5d:
                    57:09:cb:87:f5:f7:5f:19:b8:87:ca:fe:e6:bc:82:
                    7a:8e:cc:67:a8:19:a7:68:69:15:f0:23:22:a0:95:
                    99:e2:a4:4c:f5:2e:9e:ae:c8:f0:fd:d7:cd:d4:ba:
                    b5:3a:f2:74:ec:1e:e2:2d:50:5c:3e:18:d0:dd:92:
                    9f:3c:da:d5:c2:25:b9:be:4d:e1:ca:65:95:26:d2:
                    74:0f:b2:58:05:64:c5:e1:f9:30:c2:32:bb:69:df:
                    bd:e4:21:9e:90:f5:59:59:9b:68:a0:39:35:7a:7f:
                    e1:12:bb:90:bc:dc:9a:ea:5e:ec:ec:41:25:8f:13:
                    9a:06:f8:77:6c:8a:6b:ff:f5:6b:9d:78:7a:4b:42:
                    79:a1:22:56:ad:24:33:3b:fd:77:aa:11:e5:28:aa:
                    1b:46:fd:76:bb:4d:72:37:2d:0f:82:d9:05:e2:f4:
                    cc:40:6e:15:84:8b:4b:90:42:53:d5:de:fc:1e:6f:
                    a7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AD:13:93:DC:FE:95:A8:0A:B3:28:8F:BE:7E:5E:1F:E4:A4:9E:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/c887cf8e-05d3-3f81-9838-af82b7821e2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:53:44:35:2a:34:aa:0c:f2:ca:fc:03:da:81:59:d9:62:51:
         a8:db:95:79:1d:ca:18:fd:47:3e:47:ec:1c:c0:ec:be:a2:c7:
         70:ab:56:4b:df:0c:9e:d7:9b:5e:40:88:46:6e:94:0b:bd:36:
         37:a8:09:e8:87:80:5b:51:60:99:b9:f3:cf:ee:5a:c5:c6:bf:
         73:4d:b7:9c:e4:51:ab:11:7f:2d:0e:52:ca:d8:26:14:8a:e5:
         df:9e:3f:10:d4:48:cc:3c:9d:7a:0b:76:86:5b:3a:f9:62:cf:
         ff:45:0f:ab:78:6b:47:6f:72:74:48:85:e1:29:33:32:85:09:
         0b:97:8e:dd:6f:31:0e:12:30:7d:90:7c:0a:39:ee:66:2d:f2:
         af:4c:b1:38:ec:25:81:7a:2f:46:e5:26:4d:5e:a5:75:51:3b:
         67:c1:07:f8:2c:c2:17:a7:a2:d3:d1:75:79:c9:4f:a4:57:ef:
         78:6b:79:69:61:ab:98:74:48:2d:56:80:af:7b:f8:05:a2:d5:
         46:e8:5c:1b:66:95:99:48:87:30:f0:db:f4:38:57:af:72:ba:
         d1:d9:a5:c6:77:0d:87:57:00:f6:1c:e8:cf:2f:28:de:bc:1c:
         26:f6:c3:e7:f4:52:ca:f4:8c:bc:05:6b:53:03:70:76:5c:52:
         c5:5e:c5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:55:38 2026 by rpki-client