Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/a2d25287-ac92-37a3-91a7-a07f2ef5962e.roa
File:                     a2d25287-ac92-37a3-91a7-a07f2ef5962e.roa (raw, json)
Hash identifier:          aN1TIiTgKKb/65u8VJn2nmiFYSt4zI/JIWjMXt4iQy4=
Subject key identifier:   4D:D5:E9:E3:05:B6:57:82:37:81:23:9B:FF:1F:DD:AD:15:CD:8E:AA
Certificate issuer:       /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b
Certificate serial:       010D0C9F4328584EC7A1C14B954087072F0ED3C0
Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/a2d25287-ac92-37a3-91a7-a07f2ef5962e.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     13511
IP address blocks:        192.155.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:c1:4b:95:40:87:07:2f:0e:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=7706696f-7ef0-4e6a-b0d0-63ba86134b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bb:92:db:94:ab:cb:86:b7:cb:13:09:ac:a3:
                    cf:ba:cf:a2:ef:46:be:80:94:73:2b:b2:5c:d6:c6:
                    fe:40:48:09:a0:c5:e9:88:73:61:89:e9:cf:eb:a9:
                    1e:da:93:58:c5:36:e5:1c:c1:dc:cc:24:4e:56:03:
                    12:11:a2:aa:31:61:ff:b4:d9:2c:df:7c:85:db:50:
                    80:e3:69:4b:ba:ac:ec:9f:a3:0b:2e:e1:2a:c1:b5:
                    b8:28:9a:60:a3:74:88:bc:92:84:76:dd:c8:90:ea:
                    18:f8:77:68:dd:3a:b0:48:80:8e:bc:65:f9:90:25:
                    57:e0:a2:f7:76:b9:40:bc:a8:f9:72:48:8f:c9:a7:
                    fe:bf:63:00:40:f8:37:15:15:a7:58:6e:4b:82:2e:
                    47:27:88:8f:24:c0:19:a1:25:2b:8a:37:bd:ef:0b:
                    60:df:10:ec:3c:1d:53:94:65:c6:34:b5:b9:6b:0d:
                    9c:ee:79:29:07:94:ee:a6:da:d9:4f:69:68:19:9f:
                    d9:47:1a:56:26:4a:ae:15:58:89:49:12:f3:82:cb:
                    d3:18:9d:39:df:11:b5:b0:bd:63:a7:38:db:d6:7e:
                    86:19:69:7f:d8:ae:ea:51:0b:58:e6:a0:33:79:50:
                    67:81:2a:ba:55:d8:0d:01:0d:7a:f3:03:f6:ff:df:
                    82:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D5:E9:E3:05:B6:57:82:37:81:23:9B:FF:1F:DD:AD:15:CD:8E:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/a2d25287-ac92-37a3-91a7-a07f2ef5962e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl

            X509v3 Authority Key Identifier:
                keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.155.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:23:d1:74:25:51:d8:9d:9a:ea:c7:4a:1c:9a:fe:a2:c9:2c:
         48:bb:e9:64:ca:62:44:e4:0f:18:c9:ec:c9:f8:4b:83:36:c1:
         22:40:ea:e1:8e:5b:e5:ce:50:39:6d:b4:6c:cf:2f:e6:c9:d3:
         10:85:72:01:48:6c:96:a3:53:2b:54:f3:cf:7e:ea:ed:4c:75:
         3b:b4:bd:a7:f9:4c:1f:cb:0f:c4:20:9c:af:48:e0:5a:06:83:
         2b:98:b1:51:45:d2:15:db:d7:56:18:3d:3c:18:dc:a8:0a:49:
         10:a9:56:52:69:7b:82:ca:de:9c:12:ca:6b:02:f5:f1:93:9e:
         7a:aa:7a:a3:3d:c3:b5:42:e0:be:8b:f9:6f:5b:dd:b0:e9:a7:
         d5:c4:18:c7:00:3b:40:2c:8c:f7:07:fb:a9:03:50:00:94:b9:
         06:5b:84:58:59:01:73:8d:e8:a7:d9:7a:d4:b4:ce:30:03:df:
         59:22:92:fd:d0:17:ef:e8:23:16:32:44:28:b8:a9:89:bd:25:
         ca:32:ee:71:ab:e6:fc:b4:7f:32:7a:a4:d4:8e:db:97:83:af:
         7b:e1:6e:99:7b:53:5e:a1:8f:67:dc:9c:2a:6c:a5:ca:6d:28:
         c9:cf:20:0c:fc:52:90:c2:56:c1:92:40:24:5f:2b:ae:11:ce:
         7c:cc:d1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:31:24 2026 by rpki-client