Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/dd2823ba-7ee2-3c32-b1fc-290399aa0470.roa
File:                     dd2823ba-7ee2-3c32-b1fc-290399aa0470.roa (raw, json)
Hash identifier:          GcqMntz5ZYKPllAlXmmaDVLMCt6SbJCWzAF1RQb7a+I=
Subject key identifier:   B0:DB:15:D0:BB:0B:5D:3B:C7:5E:B0:D7:A5:ED:09:B2:9B:12:D4:D8
Certificate issuer:       /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b
Certificate serial:       010D0C9F4328584EC7A1BBC42E9F65ADB4A65780
Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/dd2823ba-7ee2-3c32-b1fc-290399aa0470.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     13511
IP address blocks:        192.155.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:bb:c4:2e:9f:65:ad:b4:a6:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=a8cdb01a-e968-4023-b082-6320874b6fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:be:ba:e9:4e:94:e5:07:40:c6:0c:d7:40:d4:
                    fe:48:7d:1b:39:74:32:67:6e:33:bc:16:89:8d:95:
                    ae:bf:cf:4d:b4:0c:98:51:ed:48:a0:79:6e:0b:33:
                    7d:fa:7e:e6:09:97:1b:9f:6a:dc:32:b9:05:4f:da:
                    ff:31:c6:ee:8d:d5:d4:0e:a7:1f:d4:6e:db:cb:af:
                    c7:84:4f:60:c2:d2:d7:51:72:9d:91:4a:1f:e7:2a:
                    ea:a4:16:02:5a:42:fc:e2:17:3d:da:9b:85:64:bb:
                    54:b6:24:cb:be:ff:c1:34:82:77:ac:41:1e:05:33:
                    5a:8a:29:25:26:1f:e0:47:4f:31:fb:5f:56:1d:b8:
                    d9:e6:3f:25:d1:a5:61:24:59:ef:6a:21:77:ba:28:
                    ca:3b:84:74:16:c7:58:0c:1a:e7:a0:e7:50:37:ff:
                    03:33:cb:af:7c:db:73:ff:0c:2a:e4:50:a4:6a:47:
                    43:26:c3:a1:14:f5:96:03:1a:29:34:66:69:47:39:
                    98:ab:d8:0b:ea:7c:c1:ce:3b:08:52:b7:e4:05:fc:
                    3d:31:18:94:0e:82:1a:86:a7:e0:4a:1a:49:c3:de:
                    15:d5:df:cd:7f:9e:84:80:c6:2b:f4:80:89:f8:bf:
                    45:e2:72:15:a3:ca:92:47:71:46:7c:cb:ee:92:47:
                    2c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DB:15:D0:BB:0B:5D:3B:C7:5E:B0:D7:A5:ED:09:B2:9B:12:D4:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/dd2823ba-7ee2-3c32-b1fc-290399aa0470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl

            X509v3 Authority Key Identifier:
                keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.155.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:08:f8:6a:92:8e:23:59:13:29:16:8e:a5:30:b4:a0:2d:85:
         62:0c:21:a8:d1:5c:86:ca:16:73:a2:1d:1c:f0:5a:d9:44:3a:
         ef:a2:6e:ef:bf:76:25:ca:c4:0d:9a:f2:a1:7a:63:85:2d:20:
         71:9f:29:c2:93:d0:38:57:db:20:4a:df:d3:a3:d0:ad:4f:e4:
         e0:66:92:14:cc:9d:c2:40:ae:fc:e9:1b:5a:18:15:23:b7:c9:
         f5:a0:d7:a7:b3:e8:94:03:06:21:d3:9b:a9:bc:6a:db:38:67:
         47:39:70:59:58:53:21:11:fd:b1:df:6a:bb:65:91:f7:c3:d5:
         57:98:bc:91:d3:e1:d7:9f:5b:4f:c3:f6:4e:0c:54:14:79:82:
         b0:90:71:55:46:f3:8b:57:53:61:a9:c2:d5:49:f2:4e:ec:38:
         2f:11:b6:37:92:6e:56:ad:b4:70:e7:e3:9f:d0:40:fd:0c:86:
         59:11:c0:01:e5:06:24:6b:50:2a:cc:52:cc:c6:36:22:c1:95:
         47:74:db:ed:da:39:10:29:86:f4:75:d0:e2:4e:8a:b6:ee:c8:
         9b:1b:7c:3e:c1:22:49:3a:71:3f:aa:5f:de:ed:4c:fb:a3:03:
         81:16:59:92:a2:99:1b:43:4e:bc:35:03:35:8d:42:a2:5e:17:
         b3:c6:81:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:37:24 2026 by rpki-client