Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/00e98e8d-0bf4-3203-b397-ab28caeccb32.roa
File:                     00e98e8d-0bf4-3203-b397-ab28caeccb32.roa (raw, json)
Hash identifier:          0mXwfcvADq/c+iJil0uP41I9kkTDNG6HP9+3VsFvxlE=
Subject key identifier:   23:BB:3C:20:30:E6:C2:F7:D2:83:52:68:BE:3E:93:16:66:1D:EE:97
Certificate issuer:       /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b
Certificate serial:       010D0C9F4328584E253F191B4C62FCCC77DC3780
Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/00e98e8d-0bf4-3203-b397-ab28caeccb32.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     13511
IP address blocks:        192.155.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:19:1b:4c:62:fc:cc:77:dc:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=8527bbda-3e66-4a65-bbf0-685b4608bd2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e9:27:55:7b:16:7f:1f:e4:45:34:a8:aa:9d:
                    dc:12:7e:de:3b:1b:c1:39:05:30:40:60:db:17:ec:
                    8d:ae:58:2d:f4:c6:a3:96:fb:2a:34:83:fc:d1:07:
                    bc:35:2f:ac:90:ad:f5:b1:b1:4d:52:7c:86:d8:7c:
                    64:3c:d5:4e:2c:c0:23:87:b7:31:7b:dd:62:63:63:
                    1e:39:7d:c1:67:00:cd:e9:13:bb:4e:ac:6d:1f:bc:
                    2b:f5:c9:c8:8f:b8:16:17:4e:67:4a:f0:66:f4:43:
                    7c:43:d7:25:1f:d8:be:d7:37:ca:ad:43:f1:7b:c6:
                    99:ed:b2:39:c9:65:2c:c6:38:ac:c9:8b:7f:d2:84:
                    ff:b6:a3:52:e6:a8:d6:c0:d2:bd:c1:45:ab:a1:c7:
                    fd:7d:d7:3c:ba:70:c8:d7:03:fe:01:02:4d:4c:32:
                    22:2f:6e:86:b3:cc:b3:a6:ea:0b:61:ca:37:e8:e3:
                    12:2f:7a:05:a8:0f:df:ea:46:0f:0b:f9:57:98:98:
                    40:e6:45:7f:90:d9:3d:63:08:32:13:1a:95:ff:5d:
                    bf:40:d7:26:74:3a:c4:42:25:e1:9e:5d:7a:dd:db:
                    ec:82:0a:c5:28:56:8e:b6:75:ba:48:78:9c:58:21:
                    3b:27:08:a0:b3:9c:72:30:8a:10:1f:17:e0:5e:fa:
                    a2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BB:3C:20:30:E6:C2:F7:D2:83:52:68:BE:3E:93:16:66:1D:EE:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/00e98e8d-0bf4-3203-b397-ab28caeccb32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl

            X509v3 Authority Key Identifier:
                keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.155.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:17:80:ba:62:0e:21:2b:94:0c:37:a8:fa:e9:dc:29:75:cd:
         a2:06:29:f4:82:11:1c:27:c5:e7:19:03:bc:5a:d9:a6:7f:c7:
         94:d6:01:6e:82:24:ef:c7:ac:2b:f3:d6:ed:30:83:21:7e:b7:
         a7:45:b0:f3:1e:30:a0:90:88:88:16:70:ab:18:a3:76:e1:98:
         ff:6a:65:b5:3f:3f:f1:cc:04:90:26:d6:b3:3d:82:39:74:51:
         5a:e7:b5:38:da:8b:6e:9f:9f:9b:b5:48:d5:a9:45:86:fd:40:
         72:f6:9e:a7:29:4d:9c:ce:b9:05:36:0c:2d:57:00:29:f8:2f:
         28:03:36:29:c9:f4:cc:ee:5f:5a:45:93:71:5d:c6:7e:0d:d7:
         50:86:90:a8:16:03:81:2d:ab:33:96:0d:6c:41:b9:47:51:0a:
         97:4a:2b:32:f6:c9:e6:e2:a3:3b:2b:34:1c:eb:00:1f:dd:2a:
         61:7e:8c:ac:a6:4c:bc:88:20:39:7c:aa:dc:d1:7d:8e:b1:e1:
         14:da:49:0d:d1:62:e5:6e:59:5f:1a:57:7c:47:08:59:1f:e7:
         e2:ab:9c:f0:2e:16:e9:b2:b7:e6:e2:6e:cd:f0:58:96:3c:3c:
         de:98:e7:b5:e4:31:8e:9d:57:c8:32:82:02:a5:4f:e9:60:d0:
         13:b5:c3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:44:48 2026 by rpki-client