Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5/83ddce50-be55-3d3a-bc5d-6548146ba65c.roa
File:                     83ddce50-be55-3d3a-bc5d-6548146ba65c.roa (raw, json)
Hash identifier:          KJ7DANEBTAosmIGKCdByNkSX+Vpk2by/0I53LVzE6Hs=
Subject key identifier:   25:3E:4E:D7:51:F4:17:A8:97:8E:CE:9C:AF:BD:09:55:5F:04:05:0E
Certificate issuer:       /CN=a53fdc95-c8c9-48c3-9010-cc1f2d376ed5
Certificate serial:       010D0C9F4328584DD09051F1FF54627CE3313A00
Authority key identifier: D0:81:2A:DD:0B:1B:D3:29:DC:77:D8:1C:F1:B9:A2:22:84:36:CD:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5/83ddce50-be55-3d3a-bc5d-6548146ba65c.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     32413
IP address blocks:        199.83.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:51:f1:ff:54:62:7c:e3:31:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53fdc95-c8c9-48c3-9010-cc1f2d376ed5
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=9c8b7d3d-6b70-43bb-96b4-674356b09d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:63:4a:a4:45:e1:a8:dc:4a:dc:35:47:e3:b5:
                    08:83:9e:86:0f:2c:74:cd:ab:de:b9:18:55:f8:d6:
                    43:14:96:4b:c8:10:08:ab:50:6d:d5:cf:1b:e8:39:
                    5e:c4:58:74:27:4c:60:b0:12:58:36:53:5c:85:6e:
                    6b:b8:a1:c6:21:c7:87:93:b6:c9:f5:14:98:3a:ae:
                    2c:0a:0a:a6:e3:6f:07:0e:f9:ec:b3:6b:43:01:af:
                    ee:b0:5a:a2:53:6e:ed:67:6c:fb:ba:d3:48:71:20:
                    a2:5e:3f:9f:d0:d3:f2:17:2a:b7:57:a7:72:ba:56:
                    ce:15:95:9c:99:e5:56:ab:09:4c:ed:90:67:e9:56:
                    5e:1d:36:0f:c9:ef:a4:59:c7:10:45:5b:5d:d8:b1:
                    e2:16:1d:9b:54:88:8a:23:b5:04:44:70:7a:2e:40:
                    bf:82:c6:89:f9:4a:0c:9a:b5:2b:11:2f:c5:ca:2e:
                    52:ed:db:6c:14:0a:ae:15:03:a4:58:ed:4f:6b:9b:
                    d0:d3:09:fd:90:c4:03:43:a8:c4:99:88:b3:a4:d5:
                    cb:5a:d7:72:9a:36:9d:ef:e4:ee:90:7d:a0:d8:db:
                    79:7f:bd:ef:87:e3:6c:00:1b:56:58:48:ee:b7:fa:
                    d2:bc:be:e3:47:c7:7c:08:72:5d:31:78:d8:3e:84:
                    1a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:3E:4E:D7:51:F4:17:A8:97:8E:CE:9C:AF:BD:09:55:5F:04:05:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5/83ddce50-be55-3d3a-bc5d-6548146ba65c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5.crl

            X509v3 Authority Key Identifier:
                keyid:D0:81:2A:DD:0B:1B:D3:29:DC:77:D8:1C:F1:B9:A2:22:84:36:CD:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:84:91:d6:6b:d3:ed:f8:e8:2d:8b:37:20:44:aa:e8:bf:2b:
         fa:8d:df:5d:6e:93:95:32:77:dc:2f:ad:f9:60:aa:50:39:36:
         31:9d:dd:d0:64:02:db:5e:f7:b6:fa:47:bb:8f:a6:e8:fa:5c:
         5a:cf:52:04:64:be:1f:2d:ba:85:f5:00:3d:01:16:e0:38:42:
         a5:4a:16:12:0c:71:77:ce:e6:89:ad:03:d0:e0:9d:93:93:d3:
         4d:81:75:d3:ae:e1:20:b6:a4:03:71:a4:25:5d:6e:e8:5a:99:
         6a:4a:84:5f:e4:3c:2f:ba:80:29:e9:fa:e1:e0:76:04:70:0a:
         81:4a:39:5e:d4:bf:e7:47:2c:49:7a:5d:08:6d:44:19:fa:9c:
         b7:bd:b7:be:46:6f:75:67:03:f4:86:5a:c3:74:36:ea:9e:63:
         e0:3d:77:2d:16:3f:01:e0:1e:70:d9:cc:66:13:9e:1e:9c:fa:
         e3:a1:92:f4:e9:d9:25:ec:8a:43:9a:72:83:8f:5e:83:94:0a:
         df:11:78:f3:de:97:5c:79:c5:78:9a:56:41:db:5b:f3:f4:71:
         6e:d5:9d:e6:74:d7:4f:7c:2d:2d:e3:8d:9b:42:44:cb:db:c7:
         78:af:a1:bf:be:a1:a3:3d:f3:cc:77:eb:68:ca:d4:26:45:2c:
         1b:98:21:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:29:09 2026 by rpki-client