Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/e8257aac-1636-3a0c-947c-c716142dec35.roa
File:                     e8257aac-1636-3a0c-947c-c716142dec35.roa (raw, json)
Hash identifier:          s7ZscPZB+NydcQ1nuzSmqi/04eodbw+uVIWyRurvTuM=
Subject key identifier:   A3:18:B4:19:FF:06:E1:BC:9A:5C:88:99:35:8B:F8:1E:78:E3:16:6D
Certificate issuer:       /CN=61939bbc-e50f-4ced-8482-e7c4008e3583
Certificate serial:       010D0C9F4328584F4975482816878C639D47A8C5
Authority key identifier: 3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/e8257aac-1636-3a0c-947c-c716142dec35.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397453
IP address blocks:        137.83.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:48:28:16:87:8c:63:9d:47:a8:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61939bbc-e50f-4ced-8482-e7c4008e3583
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e5c95516-7a12-43d3-bd82-a74e70a5ab7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1c:5a:71:66:51:2d:f8:e2:01:c7:e8:5b:91:
                    42:65:d1:a7:95:f9:6c:ae:35:8d:f2:0d:17:90:4f:
                    16:43:60:14:4e:65:8a:9e:a8:1c:fc:59:41:67:33:
                    49:48:36:bf:63:ba:e5:66:6c:16:a3:6a:f9:73:7f:
                    cf:9c:83:ac:70:ef:f9:50:b1:16:17:29:83:cc:60:
                    59:d3:6a:7f:2d:04:8d:db:1a:be:08:57:63:b2:1d:
                    b4:bc:17:35:0d:38:27:e7:69:50:ca:d2:47:7c:17:
                    ea:eb:1d:c3:03:db:57:e8:26:1d:a0:4c:94:34:02:
                    f1:50:93:a8:f8:87:c4:d0:87:8d:15:4d:d4:66:a7:
                    2f:da:8d:b0:d4:54:54:3f:58:88:20:94:d6:9b:13:
                    b1:a7:f1:3d:16:cd:c5:1c:ea:d6:fd:9d:82:b9:d4:
                    26:2d:98:75:05:be:4d:86:c5:f7:e3:85:1d:29:9d:
                    3e:af:0a:d7:b5:93:cb:72:78:a8:57:2d:12:b4:6e:
                    d1:61:7d:21:c6:ac:61:49:4d:35:66:e2:96:04:05:
                    be:ac:00:6b:f8:37:90:ec:30:b9:15:9c:b8:c5:1c:
                    64:e9:a3:9d:f9:58:59:d5:84:85:fd:54:a7:14:2b:
                    33:97:9e:55:be:18:c2:10:c8:be:bf:14:c8:79:0b:
                    2a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:18:B4:19:FF:06:E1:BC:9A:5C:88:99:35:8B:F8:1E:78:E3:16:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/e8257aac-1636-3a0c-947c-c716142dec35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl

            X509v3 Authority Key Identifier:
                keyid:3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:f4:36:39:83:91:9e:e7:da:25:c7:db:cf:83:90:ad:31:8f:
         36:e7:4f:4c:f6:d8:27:2c:b3:5c:13:0e:65:de:70:36:ff:6f:
         c1:f3:bb:97:62:2f:02:e5:51:ef:35:9e:20:ac:b1:68:64:3f:
         c8:b7:cc:6c:8e:c9:c8:89:b6:3a:7f:ec:73:7d:89:b4:42:91:
         c1:fc:d2:92:06:5e:38:75:cc:bc:d0:83:af:2e:af:8d:38:b9:
         5c:09:83:ea:50:57:47:67:07:66:99:6e:69:cc:e4:44:85:58:
         96:33:c5:99:7b:96:f4:9a:84:75:75:a6:76:7a:f0:f8:3a:78:
         ac:87:3b:ec:a5:c8:5e:b6:2e:ae:34:66:79:09:b6:fb:76:d3:
         00:f8:59:ad:56:63:2a:f9:6b:09:d0:60:95:7f:74:fa:ff:70:
         3f:1e:b5:12:9a:62:81:0f:84:81:ac:39:4e:5f:d0:d8:c8:87:
         23:7f:1d:e1:7f:88:04:ba:b7:b6:d4:2a:92:c5:d8:99:bb:a4:
         22:0d:4b:14:e0:6e:03:76:e2:b3:9c:fc:bd:72:ba:7f:88:be:
         75:a8:5a:62:ad:44:41:d4:e0:ab:45:43:69:09:4f:98:f2:f1:
         08:42:a2:fc:dc:2a:4c:f9:ed:b9:c9:b0:36:47:0c:90:9c:a5:
         a3:0f:39:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:49:42 2026 by rpki-client