Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/58ae2a95-69c6-3c2a-8493-3f45c86d73e0.roa
File:                     58ae2a95-69c6-3c2a-8493-3f45c86d73e0.roa (raw, json)
Hash identifier:          vOHx6xM5IUZQSLao7+ojTWSQ9iJ1JHVLWT6uS8x5EtU=
Subject key identifier:   C4:96:D6:25:C3:7C:8E:A5:79:F9:7D:85:A0:68:C2:C9:BA:2A:7A:86
Certificate issuer:       /CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9
Certificate serial:       010D0C9F4328584AC5AB879404CF30E5EEAB1500
Authority key identifier: 8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/58ae2a95-69c6-3c2a-8493-3f45c86d73e0.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     7127
IP address blocks:        155.13.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:87:94:04:cf:30:e5:ee:ab:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=127019af-2284-4723-8cbe-91b671b98790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5f:05:40:8b:85:df:2b:7a:ec:ab:da:0f:58:
                    79:23:71:b0:3b:d3:31:c8:f9:ac:c1:e8:80:e6:b0:
                    f5:8c:ce:49:91:0e:7d:db:d0:7b:86:52:54:af:b0:
                    04:5e:cb:75:ff:11:05:70:69:6d:76:e7:6c:95:cf:
                    d0:ea:d3:01:63:da:18:58:50:d9:b7:4f:36:f8:02:
                    51:37:78:94:f5:06:31:75:ff:de:a5:2e:af:34:ec:
                    63:72:4e:13:ac:6e:ef:4b:f5:a6:1a:78:e4:ff:88:
                    10:5b:ce:e3:a5:fd:56:74:05:d7:66:d6:76:8e:a4:
                    81:37:af:5b:9b:fb:8d:6a:88:68:3f:b6:ec:9c:e0:
                    4d:65:0a:01:76:9a:b9:25:d7:14:4e:e4:bf:a8:79:
                    2d:12:e2:71:1e:72:cf:2a:aa:b3:45:30:6e:05:f5:
                    83:e1:32:c5:d7:00:b5:7e:01:fb:f5:ce:2c:3d:a1:
                    88:5e:79:ca:20:76:92:3e:fb:b9:05:31:8e:2c:a2:
                    e6:b6:74:0f:4f:a1:b8:07:21:1e:ca:d8:74:be:cc:
                    a9:2d:c5:5c:0d:34:53:f7:22:0c:b6:cd:1f:ac:dd:
                    50:c4:b1:b9:ed:c2:52:c4:d1:70:8e:97:b9:57:3c:
                    fb:b7:b3:20:01:b2:a3:94:61:40:d8:ea:58:7c:6e:
                    61:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:96:D6:25:C3:7C:8E:A5:79:F9:7D:85:A0:68:C2:C9:BA:2A:7A:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/58ae2a95-69c6-3c2a-8493-3f45c86d73e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl

            X509v3 Authority Key Identifier:
                keyid:8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.13.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:23:9a:1a:33:8b:ee:bd:04:f3:b8:64:1c:8e:e8:09:0e:3b:
         20:50:7d:4e:62:0e:3c:47:35:7f:c8:63:ea:4a:c5:ca:06:3a:
         98:86:76:02:22:10:fc:28:1a:cd:21:f8:97:75:13:f2:97:93:
         40:27:9f:48:eb:2e:63:90:88:87:be:8c:c7:21:e6:39:58:27:
         cd:3f:08:9a:9c:67:ca:f7:f0:3a:6c:c5:20:88:cb:14:65:31:
         e4:ee:59:e6:cd:9c:74:97:00:05:9d:6b:d0:43:6a:27:d7:66:
         ec:56:23:b2:60:cf:a7:f0:bc:9c:aa:ed:36:97:c0:3a:a4:a0:
         8a:68:a7:45:63:78:1d:f8:63:15:19:3d:e0:b4:b6:50:3b:05:
         ff:82:af:aa:d5:09:3b:33:1e:95:8e:ac:5f:39:ec:f2:32:be:
         6b:f0:0b:33:93:7d:82:22:26:77:dc:e4:6c:24:51:55:71:31:
         88:22:52:80:71:74:b0:eb:c3:28:0e:a3:eb:bc:e7:04:8c:76:
         b1:f1:b2:99:43:5d:46:76:bc:84:9f:be:c8:a4:71:9a:c7:ec:
         63:8b:fd:f5:9c:50:95:52:08:fe:62:6d:85:8c:84:f7:83:90:
         e0:a4:89:4c:88:be:d6:42:59:8e:52:2f:31:5c:7e:71:32:c9:
         b9:67:f6:89
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErFq4eUBM8w5e6rFQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFhOGMyOTktMDNjYS00YjgxLThiYWUtODNiNmQxYjNk
N2Q5MB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk
MTI3MDE5YWYtMjI4NC00NzIzLThjYmUtOTFiNjcxYjk4NzkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol8FQIuF3yt67KvaD1h5I3GwO9MxyPmsweiA
5rD1jM5JkQ5929B7hlJUr7AEXst1/xEFcGltdudslc/Q6tMBY9oYWFDZt082+AJR
N3iU9QYxdf/epS6vNOxjck4TrG7vS/WmGnjk/4gQW87jpf1WdAXXZtZ2jqSBN69b
m/uNaohoP7bsnOBNZQoBdpq5JdcUTuS/qHktEuJxHnLPKqqzRTBuBfWD4TLF1wC1
fgH79c4sPaGIXnnKIHaSPvu5BTGOLKLmtnQPT6G4ByEeyth0vsypLcVcDTRT9yIM
ts0frN1QxLG57cJSxNFwjpe5Vzz7t7MgAbKjlGFA2OpYfG5hPQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMSW1iXDfI6lefl9haBowsm6KnqGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYWE4
YzI5OS0wM2NhLTRiODEtOGJhZS04M2I2ZDFiM2Q3ZDkvNThhZTJhOTUtNjljNi0z
YzJhLTg0OTMtM2Y0NWM4NmQ3M2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGFhOGMyOTktMDNjYS00YjgxLThi
YWUtODNiNmQxYjNkN2Q5LzBhYThjMjk5LTAzY2EtNGI4MS04YmFlLTgzYjZkMWIz
ZDdkOS5jcmwwHwYDVR0jBBgwFoAUj/kPBmSwMq4GLXrC40vBjuR5TTwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wYWE4YzI5OS0wM2NhLTRiODEtOGJhZS04M2I2
ZDFiM2Q3ZDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmw0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAHSOaGjOL7r0E87hkHI7oCQ47IFB9TmIOPEc1f8hj6krFygY6mIZ2AiIQ
/CgazSH4l3UT8peTQCefSOsuY5CIh76MxyHmOVgnzT8ImpxnyvfwOmzFIIjLFGUx
5O5Z5s2cdJcABZ1r0ENqJ9dm7FYjsmDPp/C8nKrtNpfAOqSgiminRWN4HfhjFRk9
4LS2UDsF/4KvqtUJOzMelY6sXzns8jK+a/ALM5N9giImd9zkbCRRVXExiCJSgHF0
sOvDKA6j67znBIx2sfGymUNdRna8hJ++yKRxmsfsY4v99ZxQlVII/mJthYyE94OQ
4KSJTIi+1kJZjlIvMVx+cTLJuWf2iQ==
-----END CERTIFICATE-----
Generated at Sun Aug 24 09:45:57 2025 by rpki-client