Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/e1203935-1ad9-3761-a731-559791f0ce79.roa
File:                     e1203935-1ad9-3761-a731-559791f0ce79.roa (raw, json)
Hash identifier:          3QQ1tcBPDCNe1Lelz54nt4G7mu0YoDHj+VqGqzp7s3w=
Subject key identifier:   5F:7A:9F:92:12:9F:6E:08:B3:91:23:60:0E:7E:10:3F:D6:26:36:EF
Certificate issuer:       /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b
Certificate serial:       010D0C9F4328584B8B0F957972585B83BF9A1880
Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/e1203935-1ad9-3761-a731-559791f0ce79.roa
Signing time:             Thu 16 Oct 2025 17:56:28 +0000
ROA not before:           Thu 16 Oct 2025 17:56:28 +0000
ROA not after:            Wed 14 Jan 2026 18:56:28 +0000
asID:                     13511
IP address blocks:        192.155.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:0f:95:79:72:58:5b:83:bf:9a:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b
        Validity
            Not Before: Oct 16 17:56:28 2025 GMT
            Not After : Jan 14 18:56:28 2026 GMT
        Subject: CN=7fec4993-f08e-4d5f-a976-35c4e06cf77c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:13:48:27:de:3d:4d:89:de:33:ec:d4:89:b8:
                    68:a0:79:6b:ef:ad:59:04:a8:9b:fc:88:18:ba:ef:
                    dd:df:93:bc:3a:91:0e:5e:59:62:2c:e1:fb:b9:2c:
                    94:f7:55:e7:75:90:28:0b:c5:71:a5:f6:3d:b3:38:
                    6b:38:67:c8:87:25:6e:23:5e:b5:43:93:7d:6c:fe:
                    37:a7:3f:52:80:6b:4d:3d:37:8c:7c:14:80:8d:a1:
                    93:0a:4f:73:6f:22:a9:c2:cc:f3:3c:31:74:73:e3:
                    17:ca:54:67:48:97:7d:e8:a2:d9:9e:c1:06:d9:37:
                    45:81:45:c3:21:80:08:5b:1a:90:fe:02:2b:51:18:
                    bd:2c:30:7a:9e:5d:ff:79:1e:aa:8f:d4:de:e1:a0:
                    62:22:42:01:59:97:df:e5:57:09:ee:e2:40:d7:3c:
                    91:df:e5:83:92:cd:29:03:e2:71:ce:b1:1f:1d:c9:
                    cb:c4:5c:7e:a4:1d:e6:5d:14:f2:1e:0b:80:01:b1:
                    b1:6c:8a:70:e4:aa:5c:b7:a9:fb:b7:78:c1:d6:67:
                    28:ce:a0:17:a1:5d:a1:74:4e:3f:2b:ca:ac:fe:45:
                    ae:83:ed:90:f6:62:61:8c:fb:b1:b8:6d:77:3d:50:
                    f3:e7:3d:d2:f9:31:8c:0c:1f:fc:42:15:5d:d0:05:
                    b8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7A:9F:92:12:9F:6E:08:B3:91:23:60:0E:7E:10:3F:D6:26:36:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/e1203935-1ad9-3761-a731-559791f0ce79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl

            X509v3 Authority Key Identifier:
                keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.155.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:10:9d:57:93:a3:c2:a3:9d:5a:48:0e:a2:a6:3f:c9:1a:9f:
         34:57:04:2a:e7:2f:76:5a:d5:f2:ff:24:d8:1b:ad:3e:4f:94:
         dd:99:25:9d:4b:df:6b:af:60:82:33:83:d8:a4:03:a3:60:43:
         6e:6e:65:1d:ae:3c:f9:27:fe:77:a5:ba:ff:24:0a:9e:67:88:
         4d:cd:d4:06:aa:46:1c:bf:61:05:6c:95:88:66:fb:82:9f:02:
         a1:d0:c3:de:af:5f:39:39:f9:56:08:ba:c3:d9:d7:66:37:ec:
         16:04:6d:63:ca:11:8a:3a:4d:ac:98:f4:d6:a9:62:71:b4:0d:
         c8:6a:2e:36:7b:3d:67:9b:ce:03:e2:3f:c3:bf:42:b0:38:cc:
         84:f2:b0:18:47:46:e4:e6:d0:1a:bf:e9:12:d5:0d:4e:d6:d0:
         cd:54:c2:c8:c9:d6:27:a3:44:f9:1d:bc:36:b2:07:7b:93:49:
         9c:4d:fd:8a:b2:9c:7d:75:f4:09:45:1b:56:52:9d:e5:91:82:
         2d:4d:76:0a:1b:c3:1f:39:ba:a2:2d:32:13:8a:c4:a3:eb:8f:
         b2:39:fc:da:f7:8a:3e:2c:89:6d:8e:0b:ea:3f:c6:62:49:58:
         af:77:cf:c1:4e:70:e9:09:85:80:bd:06:4c:ce:fc:b9:2e:42:
         36:d5:c0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:57:05 2025 by rpki-client