Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8299a868-a299-3463-8991-7b9cb3efb6d3.roa
File:                     8299a868-a299-3463-8991-7b9cb3efb6d3.roa (raw, json)
Hash identifier:          fszFl3Xazo7qOoIjo45TIBmKV0Jimrk3J2HAnhHsCE0=
Subject key identifier:   CA:7D:C5:E5:45:34:4F:60:C4:38:0D:5A:EF:9D:89:D9:88:7A:74:5D
Certificate issuer:       /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b
Certificate serial:       010D0C9F4328584B85C49744E9BDDFFD94CAF680
Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8299a868-a299-3463-8991-7b9cb3efb6d3.roa
Signing time:             Tue 14 Oct 2025 20:26:19 +0000
ROA not before:           Tue 14 Oct 2025 20:26:19 +0000
ROA not after:            Mon 12 Jan 2026 21:26:19 +0000
asID:                     13511
IP address blocks:        192.155.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:85:c4:97:44:e9:bd:df:fd:94:ca:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b
        Validity
            Not Before: Oct 14 20:26:19 2025 GMT
            Not After : Jan 12 21:26:19 2026 GMT
        Subject: CN=b0c1d188-601f-47d2-94f8-41c91afc3667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b8:6b:0d:30:a5:53:52:e6:e5:ff:6d:cd:26:
                    32:34:92:0b:11:e5:0e:76:57:eb:3f:55:27:3b:86:
                    e9:c6:a4:b3:8b:ef:0a:14:3f:1d:16:ff:be:fe:5d:
                    a4:51:77:41:ad:b5:3a:a9:a9:51:d4:53:f0:87:24:
                    8b:06:63:42:be:e5:14:19:fe:11:1b:01:d4:6a:52:
                    1f:73:35:5c:1a:95:c0:ae:48:44:2d:f7:5e:fb:8c:
                    75:b8:e2:e0:27:25:7d:a9:5e:55:6d:73:8b:4a:67:
                    c9:9a:89:21:f9:b1:83:72:f9:8f:98:6f:c9:56:51:
                    ff:58:4b:f5:f0:a5:46:65:56:56:6c:65:88:15:57:
                    ac:b0:c4:83:e7:49:b9:65:18:27:3c:46:0d:de:68:
                    87:1f:68:9b:f9:68:41:20:03:92:b3:5e:8f:99:99:
                    95:f2:a1:19:fe:9e:73:ec:ec:08:fd:2a:5e:43:da:
                    9f:e8:b7:38:f2:40:b3:7f:ec:0c:0e:00:46:4c:91:
                    7b:47:dd:02:b6:5f:6a:59:44:a3:09:b7:c0:10:46:
                    54:bc:8e:63:02:3f:4b:75:18:8a:ea:9b:38:0c:88:
                    fd:64:48:40:61:29:1c:fa:1c:5a:5e:64:91:73:2f:
                    9a:ab:67:c4:31:b1:c8:b3:ad:4c:20:ae:e5:a1:60:
                    9d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7D:C5:E5:45:34:4F:60:C4:38:0D:5A:EF:9D:89:D9:88:7A:74:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8299a868-a299-3463-8991-7b9cb3efb6d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl

            X509v3 Authority Key Identifier:
                keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.155.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:4a:eb:d0:a0:88:c2:8f:58:9b:11:47:00:55:31:85:d9:87:
         69:de:0f:fc:41:2e:9c:17:b6:c4:2f:5e:25:78:cd:fb:5c:ca:
         a8:7a:99:97:ce:dc:2b:31:04:22:a2:cd:c8:dd:41:29:3d:a6:
         5c:b2:c9:7f:52:37:12:54:8b:1f:00:dc:85:28:b9:b5:59:74:
         39:b1:50:ee:d9:e9:e5:2f:d6:4f:0c:c6:e1:bb:25:b3:ad:42:
         34:bf:13:3e:4b:d4:03:87:d0:6f:87:6c:02:60:0b:46:72:66:
         3e:1c:b5:d6:1f:97:35:45:00:db:b9:93:96:9d:be:0a:f0:c3:
         4a:80:ea:26:96:40:82:e6:e8:e8:bb:16:65:6b:b2:fa:5e:de:
         37:be:2f:60:ad:6f:04:6c:c9:3c:de:41:1f:37:3a:21:2e:3e:
         09:39:3c:d6:14:ff:62:05:29:ee:4c:dd:1f:77:2d:67:be:90:
         58:d1:25:3a:6c:c3:02:59:92:b8:e6:2e:44:70:bc:79:82:b3:
         ee:47:f6:b2:3f:67:39:1d:fa:de:69:dd:c9:a6:49:22:a9:05:
         9c:bd:67:9b:fa:a0:10:fe:96:a3:66:e3:4c:1d:93:06:36:26:
         62:33:11:e0:23:95:64:cf:97:64:f6:06:18:e8:6f:40:7e:30:
         3a:c3:95:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:31:11 2025 by rpki-client