Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/6e43b4bd-194f-30f5-8388-be72b5090ffb.roa
File:                     6e43b4bd-194f-30f5-8388-be72b5090ffb.roa (raw, json)
Hash identifier:          m5CAx8cAPMkeh5gOlsZoRpDfBDQWzNx50FhdoglWXeQ=
Subject key identifier:   5F:60:E4:3B:7E:D2:0E:2F:3D:61:1B:63:7C:47:38:7B:DA:5D:18:ED
Certificate issuer:       /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b
Certificate serial:       010D0C9F4328584EC7A1E59C19733D14A5B71C00
Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/6e43b4bd-194f-30f5-8388-be72b5090ffb.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     13511
IP address blocks:        192.155.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:e5:9c:19:73:3d:14:a5:b7:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=134a5d38-b9f5-4642-9fab-326ecd684b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a2:ef:be:26:2b:fd:5b:1a:61:a4:bf:17:ec:
                    98:b7:bc:04:f5:ef:ea:72:6c:3f:03:ba:ee:db:6b:
                    b5:6f:66:94:bd:28:0a:22:c1:40:d3:eb:0b:6c:4c:
                    75:40:3c:41:19:3c:12:a4:fb:5e:de:1f:8c:6d:ca:
                    a4:f2:15:3b:7d:f6:24:70:cb:d3:f3:2d:5b:1e:d4:
                    9e:13:a9:49:80:fd:82:dc:29:aa:bd:9d:18:4e:da:
                    ec:72:75:a3:ca:35:bf:73:f8:2d:3d:1d:71:6f:c0:
                    88:19:dd:23:d5:cd:84:7b:3c:5a:f3:a2:f1:38:99:
                    26:ee:eb:19:56:be:9f:39:95:8a:87:05:86:76:06:
                    5e:8e:f5:d2:35:7d:bc:02:e7:57:99:3d:95:2c:57:
                    b4:0b:41:a8:a2:8e:81:f7:65:5e:b6:83:7b:4c:5f:
                    d5:38:8f:c5:32:d6:89:39:1e:88:88:a1:e6:bf:d7:
                    24:4c:21:f2:0b:7b:37:1a:ef:29:4c:1c:c1:4a:38:
                    33:50:63:55:c9:19:b3:13:d2:a0:60:72:eb:84:46:
                    91:fc:f8:f2:23:f6:dd:f3:14:c7:34:82:0b:de:06:
                    b5:3f:21:0d:e4:3c:ae:e6:ae:e8:1b:7c:47:6d:c1:
                    dc:7a:93:0f:19:0f:d1:dc:2c:35:a9:87:5f:e6:28:
                    e8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:60:E4:3B:7E:D2:0E:2F:3D:61:1B:63:7C:47:38:7B:DA:5D:18:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/6e43b4bd-194f-30f5-8388-be72b5090ffb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl

            X509v3 Authority Key Identifier:
                keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.155.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:fd:ef:d5:ec:66:37:62:3e:58:41:b4:ca:34:ac:c1:5c:4e:
         21:e8:8c:fb:25:cf:d9:43:99:48:e7:9b:d8:30:c2:63:14:40:
         9f:59:a7:62:72:0e:d8:22:17:32:dd:04:96:63:9e:4c:13:f6:
         32:59:d6:d3:2c:09:e7:6e:ae:b2:42:91:29:59:18:e6:56:90:
         1b:01:ec:32:e1:f6:e1:8c:e8:32:fc:ca:27:f7:c4:a1:e1:f8:
         dd:36:b3:bb:9f:d3:c4:fd:85:c9:7a:eb:b1:94:1f:19:77:82:
         ba:ee:62:e5:c8:e2:97:a2:32:1e:77:02:48:03:27:e6:1d:19:
         4a:9c:45:76:38:d0:50:16:46:58:1f:62:a8:64:1e:12:ed:e3:
         16:c6:1a:4c:89:d8:9f:5d:f2:21:6d:a0:5e:78:04:49:e9:b4:
         d9:8d:3f:bf:64:5d:68:c7:98:63:72:31:51:7c:4e:9d:5c:9c:
         15:5d:9e:e3:52:04:b2:1d:be:8b:ac:e1:1c:be:9d:99:40:31:
         c5:92:92:5f:16:83:e4:0b:d9:e9:27:d2:32:ee:e0:94:c2:bc:
         83:ef:5e:1f:2e:42:76:10:91:1a:dc:8e:c7:22:25:ba:a8:7a:
         51:6d:0e:67:5f:ad:54:ff:78:03:12:4f:db:1c:b9:eb:d7:7a:
         5d:2c:b2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:36:31 2026 by rpki-client