Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/58032abc-af1d-383a-b8be-becc49914848.roa
File:                     58032abc-af1d-383a-b8be-becc49914848.roa (raw, json)
Hash identifier:          eDMlAgrRt8ZzPeVNPGz9qbfiGoCJAknOG76ACBVdGcw=
Subject key identifier:   13:E2:F3:6C:E4:C5:DE:97:28:E7:E0:31:BF:29:70:0C:29:C1:13:27
Certificate issuer:       /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b
Certificate serial:       010D0C9F4328584D44FA70173AB05E12AD37D310
Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/58032abc-af1d-383a-b8be-becc49914848.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     13511
IP address blocks:        192.155.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:70:17:3a:b0:5e:12:ad:37:d3:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=3c3c215d-c073-40bc-89a6-1ec679b28a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:ef:80:9b:6c:79:23:af:47:ac:87:72:16:79:
                    af:f8:a3:26:81:f5:fa:e7:61:1f:cf:f0:61:84:17:
                    9c:2a:f0:88:32:be:bc:06:e1:ec:6d:21:1c:d2:77:
                    f8:1a:5b:22:e4:34:35:e7:c4:da:24:9a:12:ad:91:
                    0a:b6:3f:96:33:52:7b:d5:8d:46:cf:c1:91:33:6b:
                    eb:d4:9b:96:a5:c3:a5:c1:70:03:d4:97:61:d3:11:
                    e3:93:a3:fb:14:70:f8:b7:f6:a8:88:ed:1c:57:ee:
                    a6:d0:ff:84:f8:be:f9:7a:70:85:a9:66:db:97:17:
                    d0:d8:f8:d7:65:94:54:45:43:17:0d:a0:9f:3a:da:
                    a9:fc:71:e8:76:eb:95:ee:4f:65:c1:02:37:81:3c:
                    43:a6:da:81:66:90:c0:63:a0:bb:24:5f:28:ba:39:
                    ce:23:bb:1f:be:56:4a:e5:95:2e:7e:fc:25:a6:35:
                    67:b7:e5:5e:b5:c3:72:a9:a8:65:cd:3c:1e:27:98:
                    22:c0:60:a4:09:12:d3:3e:3b:8b:15:1d:20:46:77:
                    a2:35:01:7d:52:14:fa:d6:28:3a:96:78:68:f3:c6:
                    ed:76:dc:4e:2a:ac:74:e6:61:c9:db:bb:96:ab:d7:
                    0a:4d:f2:97:4f:1d:12:a6:ae:24:fc:60:87:a9:02:
                    b9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E2:F3:6C:E4:C5:DE:97:28:E7:E0:31:BF:29:70:0C:29:C1:13:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/58032abc-af1d-383a-b8be-becc49914848.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl

            X509v3 Authority Key Identifier:
                keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.155.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:d3:ad:71:c7:f9:d1:80:87:6d:e1:83:d7:6e:3e:5a:cb:32:
         63:f7:89:76:69:9d:07:c3:16:e7:3f:40:d7:9d:a2:bd:ed:f9:
         1e:53:08:46:fd:df:24:87:d2:49:fa:0e:b2:dd:09:ff:e4:6c:
         ca:d1:1b:48:1e:18:8b:81:60:5b:ff:c4:e2:f0:89:67:11:28:
         bc:4d:09:d7:bf:df:bb:f2:4f:3e:76:c2:77:45:7c:88:4e:f0:
         cb:6a:f3:aa:0e:ca:84:f8:90:98:94:56:d3:0c:14:d8:05:09:
         01:cf:ce:16:4f:a2:93:e4:77:09:88:fa:81:38:06:e8:06:f2:
         cb:66:87:35:84:ae:1d:fd:0e:d4:52:4e:84:a7:1a:9a:0d:74:
         f9:c4:01:2d:66:24:93:18:8f:5b:fd:1a:ff:63:ba:7a:47:bf:
         0f:c4:c4:23:73:e9:0f:0c:1e:89:4d:23:37:03:c0:6a:34:3c:
         b4:da:9d:d6:37:91:c7:6b:0f:ec:6f:7d:d0:9c:da:e9:24:e4:
         e8:a4:93:1e:ae:31:35:1c:38:00:86:35:ce:1d:c5:b0:e0:53:
         77:29:d5:4c:7a:f3:5a:89:16:71:fd:a7:b1:ff:a2:8e:fc:38:
         01:56:93:7c:00:d7:1c:89:8a:df:29:ad:8b:b7:02:8f:e8:c7:
         5b:16:8b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:30:14 2026 by rpki-client