Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/df2a6eec-c3f5-3b2f-896f-ff49ccc544c1.roa
File:                     df2a6eec-c3f5-3b2f-896f-ff49ccc544c1.roa (raw, json)
Hash identifier:          nSQkn9bvP+YbipR8MaO7xShlSYw9UkWUMi+EVblRzQ0=
Subject key identifier:   BE:82:A6:A9:AD:51:C7:99:FE:27:51:8A:6F:24:1B:EE:4B:80:BB:9F
Certificate issuer:       /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b
Certificate serial:       010D0C9F4328584D44FA63FFD8327E96970190A0
Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/df2a6eec-c3f5-3b2f-896f-ff49ccc544c1.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     13511
IP address blocks:        192.155.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:63:ff:d8:32:7e:96:97:01:90:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=45e5c13c-671b-461a-a06b-b8ae1fc12aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7e:dd:f6:cb:b0:0d:1d:a3:1e:a7:cf:ef:be:
                    22:5e:08:b2:69:ea:ad:16:0c:ae:e8:b5:8c:ac:bf:
                    a5:66:10:af:41:ea:87:ad:89:d8:08:2d:39:1c:4e:
                    c9:80:a0:d1:50:e0:bd:cb:08:5b:72:09:fd:b7:27:
                    73:c8:59:60:1a:2b:fc:b4:09:a0:e7:38:8c:55:5d:
                    16:5e:2a:12:1f:1a:ec:ed:ee:c9:5f:5e:c8:f5:1b:
                    ce:cb:d8:eb:72:f2:a2:3a:eb:1a:16:a3:4b:41:86:
                    69:f6:05:ef:3f:1e:e9:d5:34:4b:79:6e:94:82:0d:
                    76:d9:20:17:c7:8c:fe:31:d3:2a:ff:1a:be:d4:a2:
                    49:15:cb:3e:8a:95:3e:d1:62:9c:11:aa:6e:70:9e:
                    fa:79:14:76:71:b6:75:9a:7c:2e:fe:42:42:79:66:
                    58:7d:0e:fc:f4:ce:7a:62:0e:d1:34:00:16:af:00:
                    e1:55:c9:60:a2:f3:36:48:a0:90:3a:4e:23:35:4c:
                    98:1e:4f:9b:53:ba:2b:70:26:36:ba:56:c0:12:c4:
                    87:7a:50:aa:fb:6b:95:25:dc:09:59:ff:16:ac:d3:
                    14:6d:b2:21:b2:0b:14:fe:ec:03:bc:e7:b6:02:7b:
                    6c:0a:95:50:55:df:4d:37:47:f8:5a:d3:c4:02:c4:
                    da:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:82:A6:A9:AD:51:C7:99:FE:27:51:8A:6F:24:1B:EE:4B:80:BB:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/df2a6eec-c3f5-3b2f-896f-ff49ccc544c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl

            X509v3 Authority Key Identifier:
                keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.155.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:d0:4a:d2:c4:a4:af:d9:a2:79:d5:0f:e3:ee:a7:8f:8a:76:
         13:d6:32:f7:18:c3:e9:23:6d:e4:9a:cc:ed:ff:65:c2:93:c3:
         dc:58:74:00:ff:0d:10:67:7b:7f:27:c8:d5:9e:f7:0c:ac:6f:
         ec:f8:cb:9e:42:23:ab:ab:62:ba:13:46:ed:20:a9:67:f5:0f:
         48:5e:0c:d1:11:19:61:4d:38:3e:09:30:29:b4:14:dc:df:bb:
         84:5a:3d:34:c2:b2:30:d1:16:4d:5a:69:19:7e:27:5e:0b:28:
         27:28:67:b2:93:48:d0:96:35:8f:76:f9:a7:7f:56:c2:9b:9d:
         f2:c7:f0:5f:4c:b6:2b:b0:23:21:2e:9e:79:6a:e8:fe:cd:c4:
         0c:97:fd:5d:1b:09:0b:74:a4:9a:82:da:78:36:38:a4:85:00:
         dc:54:b7:4a:99:8e:e5:68:89:98:bb:5a:6a:8f:b5:6d:f2:93:
         f6:ce:4b:ae:2c:38:14:a7:65:37:10:e7:45:40:a3:3c:6a:ef:
         5c:8b:aa:38:e3:b9:c2:7a:ab:64:a1:8f:df:93:89:b3:3f:1a:
         69:7d:fb:fe:4c:63:de:62:29:f6:09:92:44:8e:15:8c:25:cc:
         d0:b6:09:b3:32:49:34:a6:de:91:bc:ee:79:bd:96:c5:26:db:
         2f:35:43:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:49 2026 by rpki-client