Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/b0fdd7e3-03c0-392a-a472-3fa0d42a35c1.roa
File:                     b0fdd7e3-03c0-392a-a472-3fa0d42a35c1.roa (raw, json)
Hash identifier:          a9WH0BPUN5U6kUAm9FG7IqJTXEaypn7AJFJHPUcGmRA=
Subject key identifier:   13:19:BD:6A:67:92:1E:41:0A:68:15:0A:2D:72:F1:9B:1A:C6:4F:9F
Certificate issuer:       /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b
Certificate serial:       010D0C9F4328584B8529902813973528D0D3B5D0
Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/b0fdd7e3-03c0-392a-a472-3fa0d42a35c1.roa
Signing time:             Tue 14 Oct 2025 15:13:57 +0000
ROA not before:           Tue 14 Oct 2025 15:13:57 +0000
ROA not after:            Mon 12 Jan 2026 16:13:57 +0000
asID:                     13511
IP address blocks:        192.155.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:85:29:90:28:13:97:35:28:d0:d3:b5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b
        Validity
            Not Before: Oct 14 15:13:57 2025 GMT
            Not After : Jan 12 16:13:57 2026 GMT
        Subject: CN=a5224e80-d2f9-45c4-91ca-793ab53219ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0c:af:95:f3:e5:7b:e1:2e:d6:4d:e0:2e:5f:
                    e7:9c:5f:99:15:21:40:70:74:9c:53:a8:24:07:c0:
                    ab:1c:96:dc:b5:7a:56:5e:c0:ce:20:28:83:61:7f:
                    58:29:f5:bc:62:ac:97:56:17:4a:45:94:18:92:a0:
                    be:f6:b6:88:f8:8a:28:13:32:cb:59:6b:8d:36:b9:
                    c3:a3:3d:30:a3:2d:09:28:23:23:85:23:9e:9a:4c:
                    9b:9e:b8:08:eb:98:f5:1d:9d:25:4e:88:49:c7:d7:
                    0b:1b:19:6e:0b:d7:cd:c6:b5:33:4d:d6:ca:e9:ea:
                    13:18:6a:a9:d7:e6:05:67:7f:77:8d:3f:7d:8f:e0:
                    03:b2:14:c3:6b:73:2f:b1:d8:fe:80:da:a7:66:7d:
                    18:c5:74:5a:c3:6b:ad:fd:d0:c6:46:88:d1:b2:84:
                    26:62:0c:21:82:98:ad:93:30:77:26:8e:d9:b6:e3:
                    92:57:11:a7:31:90:ef:5c:76:2c:95:b8:78:a8:3b:
                    b5:19:d5:ac:bf:a3:bc:0b:89:9a:36:13:9d:b2:e6:
                    ed:45:c9:e7:38:af:81:af:6d:e9:ff:df:b2:9c:d5:
                    2f:e7:2d:42:10:8c:98:2b:b0:c8:35:59:18:c8:8f:
                    7a:31:e0:77:26:c7:5b:5b:4a:cf:fb:49:91:af:9d:
                    d0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:19:BD:6A:67:92:1E:41:0A:68:15:0A:2D:72:F1:9B:1A:C6:4F:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/b0fdd7e3-03c0-392a-a472-3fa0d42a35c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl

            X509v3 Authority Key Identifier:
                keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.155.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:d0:c7:53:6e:4d:a5:5d:1a:8b:37:92:2d:9f:bc:d8:c8:45:
         70:69:2e:91:97:fc:01:27:a8:ce:1e:c6:d4:5b:70:8e:33:f0:
         82:d6:eb:a9:26:fe:42:f6:0a:35:bf:c2:31:b4:ee:6a:be:c1:
         ee:75:ec:8a:75:88:48:e8:52:22:c7:05:3b:7f:76:00:ab:3f:
         73:ae:a6:28:44:28:1a:8e:21:5b:7f:13:5f:6d:08:7a:64:7c:
         aa:f1:ce:74:1d:e8:21:c1:5b:ac:d9:11:b7:57:e9:1f:ca:11:
         ff:14:7e:83:eb:cd:38:ee:e7:52:9c:ab:b3:0b:e6:03:42:fa:
         77:1d:53:54:99:bf:09:b4:ab:91:34:d6:30:73:77:81:be:66:
         09:c7:15:71:d1:97:07:f7:f9:17:c5:f6:ce:c9:8c:ee:be:0d:
         81:8f:6e:8c:f2:92:c4:78:03:0a:30:0a:66:26:cd:09:23:25:
         37:ba:1a:e7:fc:e0:c7:27:2b:79:ff:ed:1f:c6:91:00:d4:cd:
         22:51:ea:c1:fb:24:18:60:bf:ef:b3:9a:f9:a0:89:87:86:e0:
         e6:f7:04:96:f1:80:9d:88:fb:01:b3:ee:93:e0:44:19:38:ff:
         df:d4:fa:3a:67:14:47:55:99:fd:5c:38:67:b5:09:4f:f9:e9:
         45:8f:ae:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:32:47 2025 by rpki-client