Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/9f48b662-32d4-39d1-86c7-bb4f4f6ae937.roa
File:                     9f48b662-32d4-39d1-86c7-bb4f4f6ae937.roa (raw, json)
Hash identifier:          N2D2F7arOWSKP71X3TtKfopQMHwCKlyhapB/A0MKgOA=
Subject key identifier:   26:E4:28:47:D9:D2:C7:99:E5:50:75:E3:40:4E:B6:93:E9:46:2A:2F
Certificate issuer:       /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b
Certificate serial:       010D0C9F4328584B85C4EF5CDA48E3FABA372C40
Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/9f48b662-32d4-39d1-86c7-bb4f4f6ae937.roa
Signing time:             Tue 14 Oct 2025 20:27:01 +0000
ROA not before:           Tue 14 Oct 2025 20:27:01 +0000
ROA not after:            Mon 12 Jan 2026 21:27:01 +0000
asID:                     13511
IP address blocks:        192.155.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:85:c4:ef:5c:da:48:e3:fa:ba:37:2c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b
        Validity
            Not Before: Oct 14 20:27:01 2025 GMT
            Not After : Jan 12 21:27:01 2026 GMT
        Subject: CN=c5422332-d3aa-4caa-9f35-9d2bb1286f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:db:e3:57:55:45:ef:b4:dc:2c:e7:bc:f0:9c:
                    d2:4c:b1:14:2d:48:8a:eb:d4:7f:ae:ad:0e:8a:3d:
                    68:8b:75:78:eb:2a:78:19:ae:f1:40:a9:b4:47:74:
                    26:84:03:4b:de:70:60:b2:fd:cd:d0:97:21:cd:69:
                    31:ee:3b:a8:77:9e:a8:8e:d1:fd:8c:cd:0f:a4:ef:
                    83:08:11:d0:91:30:30:31:fc:af:15:aa:ae:2e:0f:
                    12:64:a9:e7:f2:ae:b6:dc:85:89:6e:1d:8d:d5:1f:
                    af:78:46:fa:ae:ea:27:fe:9a:52:18:23:ef:4a:a9:
                    aa:da:48:1f:21:67:19:bc:30:90:fe:27:6d:75:d5:
                    f3:fe:99:33:1d:9e:b7:50:a9:46:df:cf:70:4f:32:
                    12:b4:7e:c9:a6:0b:b7:ef:30:c6:ea:a2:cb:4b:32:
                    9a:e9:e4:3f:81:18:22:4b:2b:3e:21:bf:52:da:e8:
                    0c:3e:1d:f8:51:8b:2c:79:36:ca:a5:73:7f:ac:6a:
                    99:d0:7c:62:ad:28:8b:38:71:17:ab:ab:61:ec:69:
                    dd:61:f4:e9:de:95:d2:9e:fc:19:59:8c:44:68:4b:
                    c1:b9:b1:61:1a:07:ea:d8:0d:4e:af:77:5e:b9:61:
                    4c:7b:60:24:6f:2b:53:1b:c9:c6:06:cf:9c:c0:26:
                    06:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E4:28:47:D9:D2:C7:99:E5:50:75:E3:40:4E:B6:93:E9:46:2A:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/9f48b662-32d4-39d1-86c7-bb4f4f6ae937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl

            X509v3 Authority Key Identifier:
                keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.155.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:88:f0:ed:7f:0b:41:59:a6:5b:9a:a8:09:18:ac:a0:df:91:
         6c:a5:fb:7b:35:e0:9a:16:d8:74:47:92:57:74:85:87:1e:cb:
         a7:a3:78:c6:42:15:c9:34:12:6f:76:51:2d:b2:e7:5f:47:5d:
         f7:77:20:cb:a1:a8:42:03:fd:50:c8:de:be:f1:88:21:38:7c:
         ee:20:18:93:f6:7f:f8:30:80:06:2b:ba:80:46:24:25:af:e1:
         29:ca:1d:5a:50:0e:3a:c2:5b:29:5b:2f:d6:96:c0:e7:e2:84:
         1d:97:3c:85:6e:3e:f6:c7:89:b7:a2:a1:f1:48:4a:d9:3b:3e:
         e3:63:6b:de:d9:09:9c:26:83:2c:b1:21:98:a0:c8:79:63:ab:
         58:eb:e5:18:8c:49:c0:2a:42:1a:78:23:69:50:74:62:cf:2b:
         4a:2b:f6:f6:fd:0e:49:75:e2:bb:3f:c9:6f:25:fb:72:e4:8d:
         46:c7:97:5a:4d:56:80:7f:29:06:b6:0c:b6:c6:ae:86:cf:cc:
         f0:06:cc:b4:7a:d3:b2:1f:c6:a7:43:34:c9:c7:15:da:bd:d1:
         20:f8:de:b4:44:a2:63:b9:bf:a2:50:33:da:04:06:e8:4a:8e:
         de:84:5a:dc:58:3d:99:87:d1:50:3f:ac:b8:10:0f:88:65:5e:
         50:b6:8b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:32:22 2025 by rpki-client