Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/0d9a9bc7-1f3c-3f93-bad9-b6fe7f51df2e.roa
File:                     0d9a9bc7-1f3c-3f93-bad9-b6fe7f51df2e.roa (raw, json)
Hash identifier:          LxWwIdnXMI2iGDAGLVUkzxVGCN7AZnumG2SnDaaBbzk=
Subject key identifier:   AA:9D:5F:2B:B9:F8:E8:DA:E0:1D:87:7B:6E:48:CC:9E:A8:3D:F5:9D
Certificate issuer:       /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b
Certificate serial:       010D0C9F4328584EC7A1EA5B7B1D73718354B080
Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/0d9a9bc7-1f3c-3f93-bad9-b6fe7f51df2e.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     13511
IP address blocks:        192.155.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:ea:5b:7b:1d:73:71:83:54:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=9d9a6560-b021-44c9-829c-d9258ee842e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c8:e6:ab:b9:5e:4d:8a:8a:2a:6a:32:01:ef:
                    74:8c:65:c0:62:86:89:9f:fb:2b:17:7b:48:02:8b:
                    a5:ac:b9:de:41:bf:34:49:9f:09:fc:d3:23:7e:bb:
                    9d:fc:a3:7e:23:88:cd:5a:98:e6:f1:d7:f6:69:f9:
                    75:c9:e8:a3:9e:ca:fe:9e:2f:4b:fb:cb:84:d8:9a:
                    0a:c6:a7:9e:21:b0:76:54:5f:cb:e8:a1:bc:86:6a:
                    57:2f:13:de:22:2d:89:ab:b3:a3:21:06:dd:a2:3b:
                    6b:29:ac:be:5d:ba:ef:4f:1b:1b:b7:a2:3e:b5:b5:
                    34:11:d2:6f:08:aa:d2:ac:f8:fa:2d:b6:7d:70:73:
                    b4:c0:d6:f1:88:8f:84:a3:84:fa:29:d6:ee:2d:57:
                    e1:9d:17:8a:18:8c:f9:2d:1d:7d:d2:2d:90:94:57:
                    45:3b:77:90:0f:11:94:b6:1e:4a:6b:3d:51:b7:fd:
                    01:57:dd:58:a0:e8:f8:aa:9a:29:7a:f1:94:37:21:
                    dd:85:17:46:39:8f:60:11:78:ec:d5:11:77:63:74:
                    50:31:04:39:c8:a0:ad:a1:10:81:77:e1:67:e7:8f:
                    1a:16:34:61:fe:56:4d:9e:7c:79:f6:aa:90:cc:fc:
                    45:45:9f:52:16:f0:9a:48:82:82:5d:fe:07:e6:1a:
                    ce:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9D:5F:2B:B9:F8:E8:DA:E0:1D:87:7B:6E:48:CC:9E:A8:3D:F5:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/0d9a9bc7-1f3c-3f93-bad9-b6fe7f51df2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl

            X509v3 Authority Key Identifier:
                keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.155.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:c9:e1:df:ac:c8:4d:8c:d1:d3:95:82:bf:f3:9b:21:59:96:
         e9:8b:12:e9:08:e4:3a:fa:cb:f3:a4:07:cc:17:78:b8:a0:e7:
         31:59:71:21:df:7e:b9:c2:6e:b0:48:17:aa:22:42:11:51:89:
         8d:f6:1d:48:f1:2c:2a:d7:04:d3:ba:87:4e:2b:f5:14:30:70:
         27:d1:49:07:f3:e0:31:f9:db:9f:f8:b0:b2:a0:31:57:e6:76:
         73:26:6a:85:3b:8c:9c:f6:2b:ac:82:16:8e:55:54:eb:81:91:
         3c:3a:a9:9c:94:0b:51:01:39:59:fa:bd:50:1e:2b:fd:b6:e7:
         ea:87:ba:f8:a9:66:a9:16:2e:e8:9d:c5:ce:2a:a2:e5:6c:e1:
         8c:6a:12:f4:b1:21:3e:ed:c4:f7:a2:2e:e6:39:78:bb:4c:75:
         f1:d4:f3:77:72:e2:0b:e8:f8:7b:39:a3:78:8f:d6:de:2f:0e:
         75:e9:41:24:71:dc:99:33:0c:d8:00:40:89:2a:f8:44:17:24:
         90:7d:65:e3:b7:1b:fe:06:53:1c:ae:96:eb:c7:15:73:ca:6e:
         34:af:d1:f5:6d:3b:aa:aa:68:ff:e7:dd:68:03:04:23:8f:d5:
         0b:56:c5:70:d1:9b:79:eb:b4:be:e6:1a:a4:96:e9:70:83:91:
         fc:a5:db:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Hoepbex1zcYNUsIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk
ZDRiMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk
OWQ5YTY1NjAtYjAyMS00NGM5LTgyOWMtZDkyNThlZTg0MmU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Mjmq7leTYqKKmoyAe90jGXAYoaJn/srF3tI
AoulrLneQb80SZ8J/NMjfrud/KN+I4jNWpjm8df2afl1yeijnsr+ni9L+8uE2JoK
xqeeIbB2VF/L6KG8hmpXLxPeIi2Jq7OjIQbdojtrKay+XbrvTxsbt6I+tbU0EdJv
CKrSrPj6LbZ9cHO0wNbxiI+Eo4T6KdbuLVfhnReKGIz5LR190i2QlFdFO3eQDxGU
th5Kaz1Rt/0BV91YoOj4qpopevGUNyHdhRdGOY9gEXjs1RF3Y3RQMQQ5yKCtoRCB
d+Fn548aFjRh/lZNnnx59qqQzPxFRZ9SFvCaSIKCXf4H5hrOlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKqdXyu5+Oja4B2He25IzJ6oPfWdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1
OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvMGQ5YTliYzctMWYzYy0z
ZjkzLWJhZDktYjZmZTdmNTFkZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj
MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy
ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh
OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJt0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEfJ4d+syE2M0dOVgr/zmyFZlumLEukI5Dr6y/OkB8wXeLig5zFZcSHf
frnCbrBIF6oiQhFRiY32HUjxLCrXBNO6h04r9RQwcCfRSQfz4DH525/4sLKgMVfm
dnMmaoU7jJz2K6yCFo5VVOuBkTw6qZyUC1EBOVn6vVAeK/225+qHuvipZqkWLuid
xc4qouVs4YxqEvSxIT7txPeiLuY5eLtMdfHU83dy4gvo+Hs5o3iP1t4vDnXpQSRx
3JkzDNgAQIkq+EQXJJB9ZeO3G/4GUxyuluvHFXPKbjSv0fVtO6qqaP/n3WgDBCOP
1QtWxXDRm3nrtL7mGqSW6XCDkfyl28w=
-----END CERTIFICATE-----
Generated at Tue Sep 22 05:48:15 2026 by rpki-client