Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/e1203935-1ad9-3761-a731-559791f0ce79.roa
File:                     e1203935-1ad9-3761-a731-559791f0ce79.roa (raw, json)
Hash identifier:          kCuD3kOHvGm+rkW2qE48GP7IeAS3Lemfz0sLLgi+vJQ=
Subject key identifier:   0A:CA:19:F8:2F:61:37:E5:8D:CE:8B:6E:9D:E6:40:51:50:60:84:E5
Certificate issuer:       /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b
Certificate serial:       010D0C9F4328584D4A8F8C2BB8102A44BE84C640
Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/e1203935-1ad9-3761-a731-559791f0ce79.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     13511
IP address blocks:        192.155.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:8c:2b:b8:10:2a:44:be:84:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=65943458-8dbf-4fbe-93c1-757b9431c707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:de:10:b6:ef:da:d2:6c:ee:2f:f2:f6:99:b1:
                    71:73:bc:44:dc:1b:66:7d:51:98:94:80:4d:f2:51:
                    a5:ed:a3:99:73:9d:b9:85:b9:0d:c2:7e:50:ef:93:
                    d9:eb:e8:04:d4:07:ab:0a:6e:e4:d9:ea:30:eb:fa:
                    af:84:7d:29:72:34:63:00:de:e2:a1:fd:15:fd:5f:
                    06:26:95:07:83:dc:ef:ac:96:d1:b0:2f:33:17:ff:
                    5f:bc:c2:e0:e1:f1:6d:3a:fe:9b:27:31:e2:ba:1a:
                    5f:a6:0a:ec:8b:02:b1:66:7d:0d:66:ba:8e:35:bc:
                    1c:11:c6:31:5d:3a:36:91:01:5b:e8:32:ae:6c:b0:
                    68:b8:5f:84:99:c2:d7:6b:4d:90:6f:f0:89:59:6a:
                    68:2a:ba:c7:c3:98:cb:22:07:7a:2a:af:fd:b7:8d:
                    db:11:20:92:db:98:0a:ef:2c:4a:ac:10:4f:cf:57:
                    15:39:4f:50:77:21:a8:9e:eb:91:02:33:38:ef:a3:
                    f8:25:50:60:74:63:5f:29:02:46:6f:8b:a5:1b:b1:
                    28:6d:78:10:75:1d:dc:6b:cc:10:99:a6:a8:61:74:
                    af:8c:80:b4:10:ad:07:6e:f6:13:02:94:46:5f:d2:
                    ce:b0:73:ba:3a:9b:43:e4:4e:4b:c2:8a:b1:cd:e5:
                    26:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CA:19:F8:2F:61:37:E5:8D:CE:8B:6E:9D:E6:40:51:50:60:84:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/e1203935-1ad9-3761-a731-559791f0ce79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl

            X509v3 Authority Key Identifier:
                keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.155.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:49:a3:cd:36:a8:a5:3a:34:73:0b:c6:fe:78:ff:8b:fd:48:
         4e:59:71:03:f7:2f:7f:48:ce:53:34:ed:ae:f9:fc:f7:be:90:
         05:0e:6c:79:2d:1b:36:30:b5:9f:84:df:db:7e:ad:57:51:71:
         47:1b:75:7d:48:e7:76:e1:ce:6c:0c:98:94:4e:f0:5f:f0:c1:
         26:39:35:05:59:73:a8:cc:a0:8f:a2:b5:06:6b:a4:6f:4f:6c:
         7c:c3:74:16:9b:20:f6:c4:1d:ba:fc:d1:ad:b1:65:0b:9d:68:
         9c:50:b2:a1:33:f1:d0:fb:ed:04:86:5b:a9:0b:eb:e3:c7:71:
         2d:01:2e:8e:7a:42:29:45:cf:e4:ed:16:ee:89:9c:91:6d:59:
         ba:70:51:48:0f:fc:08:7e:ee:3b:d6:7b:e4:41:47:4e:32:2c:
         a3:4a:0f:c5:43:ad:59:89:73:33:c8:79:e1:4d:84:0a:66:96:
         78:5b:07:8e:4b:a3:78:b1:50:1d:50:10:ca:9d:9b:d0:b4:8d:
         ae:a5:50:f3:4e:45:44:88:5c:e9:79:e4:49:8a:e5:fd:d1:41:
         9b:67:8b:a4:b9:df:23:07:8b:25:89:87:fe:3e:ef:da:85:c0:
         0a:4f:e3:04:73:d0:54:ac:34:e5:8e:de:6a:70:a7:01:e3:93:
         a8:c8:a2:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj4wruBAqRL6ExkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk
ZDRiMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk
NjU5NDM0NTgtOGRiZi00ZmJlLTkzYzEtNzU3Yjk0MzFjNzA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt4Qtu/a0mzuL/L2mbFxc7xE3BtmfVGYlIBN
8lGl7aOZc525hbkNwn5Q75PZ6+gE1AerCm7k2eow6/qvhH0pcjRjAN7iof0V/V8G
JpUHg9zvrJbRsC8zF/9fvMLg4fFtOv6bJzHiuhpfpgrsiwKxZn0NZrqONbwcEcYx
XTo2kQFb6DKubLBouF+EmcLXa02Qb/CJWWpoKrrHw5jLIgd6Kq/9t43bESCS25gK
7yxKrBBPz1cVOU9QdyGonuuRAjM476P4JVBgdGNfKQJGb4ulG7EobXgQdR3ca8wQ
maaoYXSvjIC0EK0HbvYTApRGX9LOsHO6OptD5E5LwoqxzeUmTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFArKGfgvYTfljc6Lbp3mQFFQYITlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1
OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvZTEyMDM5MzUtMWFkOS0z
NzYxLWE3MzEtNTU5NzkxZjBjZTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj
MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy
ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh
OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJt6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF1Jo802qKU6NHMLxv54/4v9SE5ZcQP3L39IzlM07a75/Pe+kAUObHkt
GzYwtZ+E39t+rVdRcUcbdX1I53bhzmwMmJRO8F/wwSY5NQVZc6jMoI+itQZrpG9P
bHzDdBabIPbEHbr80a2xZQudaJxQsqEz8dD77QSGW6kL6+PHcS0BLo56QilFz+Tt
Fu6JnJFtWbpwUUgP/Ah+7jvWe+RBR04yLKNKD8VDrVmJczPIeeFNhApmlnhbB45L
o3ixUB1QEMqdm9C0ja6lUPNORUSIXOl55EmK5f3RQZtni6S53yMHiyWJh/4+79qF
wApP4wRz0FSsNOWO3mpwpwHjk6jIomg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:22 2026 by rpki-client