Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/ae32667d-20dc-38d0-9173-85d343fffeae.roa
File:                     ae32667d-20dc-38d0-9173-85d343fffeae.roa (raw, json)
Hash identifier:          pF+opKKnKJDChyMc9Sj1PKNdPXUmrRbfXjHhof7szS0=
Subject key identifier:   BB:D4:A6:A0:3E:43:C2:78:D0:37:52:53:83:3C:6D:0E:63:3C:49:EE
Certificate issuer:       /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b
Certificate serial:       010D0C9F4328584EC7A1C12372454E229B1E3C58
Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/ae32667d-20dc-38d0-9173-85d343fffeae.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     13511
IP address blocks:        192.155.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:c1:23:72:45:4e:22:9b:1e:3c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=e5e63096-7ce9-4391-aef3-dbef0b6d0002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a4:c8:99:27:cd:8e:ae:4c:7f:f4:a6:a0:14:
                    72:bc:2f:a9:97:6b:6c:a8:bd:8b:45:e5:56:88:ac:
                    d7:d9:9f:95:f0:e6:15:c5:28:48:92:53:ff:2e:9c:
                    bb:3a:74:f1:8d:6b:d4:07:2c:a7:70:3b:78:a1:a3:
                    37:d3:a9:bd:95:c0:3e:df:7b:d1:75:30:36:b2:77:
                    72:49:02:86:80:80:42:fa:2d:6d:8d:b3:63:95:76:
                    da:40:60:e9:8c:3f:1d:ae:e5:da:a0:dd:2e:90:e8:
                    93:4d:da:67:3a:93:4f:17:5f:fb:bb:29:4b:29:e6:
                    13:af:10:11:94:f4:51:27:79:da:b4:7a:7a:ee:7f:
                    6b:9c:df:6f:03:f3:97:4e:b7:28:8e:9f:aa:ab:5e:
                    b6:79:9d:8f:e7:d9:83:b5:a4:95:25:02:e6:9c:45:
                    9f:f2:4a:b9:bc:64:8e:f3:69:8f:4e:12:c3:99:95:
                    d9:51:7d:5c:3a:fa:05:b1:0a:ba:84:f9:95:23:1e:
                    6e:7e:55:49:8c:92:8f:4f:1c:8b:56:c9:cb:8f:d6:
                    b5:40:a0:53:81:05:15:74:05:7a:33:fd:e8:91:c9:
                    82:e0:fc:bf:43:03:58:a0:5f:e6:b8:ae:6a:f1:40:
                    35:32:78:c1:62:c3:0c:b7:b3:36:d4:00:e4:58:f7:
                    0e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D4:A6:A0:3E:43:C2:78:D0:37:52:53:83:3C:6D:0E:63:3C:49:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/ae32667d-20dc-38d0-9173-85d343fffeae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl

            X509v3 Authority Key Identifier:
                keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.155.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:8b:14:e9:a3:a9:bc:1f:45:df:43:d7:eb:8b:88:b6:72:d4:
         a4:bf:a9:af:61:e1:08:90:c4:e0:ee:a7:43:ae:4e:02:87:ab:
         c6:3e:14:ac:63:7c:d7:35:b9:72:a8:a3:7e:17:c7:32:a0:2b:
         d2:f5:4a:16:f2:0d:b2:f7:a5:20:ab:86:c5:f8:ce:b9:3b:af:
         83:f5:bd:5d:81:05:b3:f7:56:8d:95:50:d1:42:6e:4c:81:75:
         cb:0e:65:26:65:e9:b5:82:70:47:ea:95:44:26:5e:74:ed:fa:
         83:3e:ad:5a:13:ad:db:e4:4a:c7:ca:90:89:ef:77:77:42:cd:
         c1:83:7d:75:6f:bc:ad:85:50:74:af:bb:1f:53:e1:b9:a6:0b:
         d6:11:ca:2c:9d:9a:ca:6d:ea:e8:79:a2:1d:ae:ae:69:ca:af:
         b4:85:4f:58:47:5d:63:5f:3e:1f:7e:dd:fc:63:32:50:e4:21:
         fe:b4:62:c8:e7:ef:45:57:d6:38:21:56:30:53:3a:f1:c3:2d:
         80:06:8b:3d:bf:e8:69:1a:6c:d5:74:17:d3:de:9c:b0:9c:2e:
         9d:76:0b:a4:e8:ac:64:f7:85:aa:89:40:e6:b8:9f:77:08:89:
         29:a9:fd:48:ab:90:13:26:74:36:12:41:72:ff:14:c2:b3:61:
         91:eb:74:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HocEjckVOIpsePFgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk
ZDRiMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk
ZTVlNjMwOTYtN2NlOS00MzkxLWFlZjMtZGJlZjBiNmQwMDAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6TImSfNjq5Mf/SmoBRyvC+pl2tsqL2LReVW
iKzX2Z+V8OYVxShIklP/Lpy7OnTxjWvUByyncDt4oaM306m9lcA+33vRdTA2sndy
SQKGgIBC+i1tjbNjlXbaQGDpjD8druXaoN0ukOiTTdpnOpNPF1/7uylLKeYTrxAR
lPRRJ3natHp67n9rnN9vA/OXTrcojp+qq162eZ2P59mDtaSVJQLmnEWf8kq5vGSO
82mPThLDmZXZUX1cOvoFsQq6hPmVIx5uflVJjJKPTxyLVsnLj9a1QKBTgQUVdAV6
M/3okcmC4Py/QwNYoF/muK5q8UA1MnjBYsMMt7M21ADkWPcOdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLvUpqA+Q8J40DdSU4M8bQ5jPEnuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1
OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvYWUzMjY2N2QtMjBkYy0z
OGQwLTkxNzMtODVkMzQzZmZmZWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj
MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy
ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh
OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJtyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGeLFOmjqbwfRd9D1+uLiLZy1KS/qa9h4QiQxODup0OuTgKHq8Y+FKxj
fNc1uXKoo34XxzKgK9L1ShbyDbL3pSCrhsX4zrk7r4P1vV2BBbP3Vo2VUNFCbkyB
dcsOZSZl6bWCcEfqlUQmXnTt+oM+rVoTrdvkSsfKkInvd3dCzcGDfXVvvK2FUHSv
ux9T4bmmC9YRyiydmspt6uh5oh2urmnKr7SFT1hHXWNfPh9+3fxjMlDkIf60Ysjn
70VX1jghVjBTOvHDLYAGiz2/6GkabNV0F9PenLCcLp12C6TorGT3haqJQOa4n3cI
iSmp/UirkBMmdDYSQXL/FMKzYZHrdEA=
-----END CERTIFICATE-----
Generated at Wed Sep 23 20:26:14 2026 by rpki-client