Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/87362f3d-4cea-3ee0-967a-02095d0f35bf.roa
File:                     87362f3d-4cea-3ee0-967a-02095d0f35bf.roa (raw, json)
Hash identifier:          NeoE86+EBSBEaZGepJ95yK62xlMScZt1aHXYDeOz2nk=
Subject key identifier:   CF:96:2C:CE:47:89:7F:28:B2:9C:39:E8:CC:23:16:5E:9D:E9:7B:78
Certificate issuer:       /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
Certificate serial:       010D0C9F4328584FB671091425DD5E42A8C6CA80
Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/87362f3d-4cea-3ee0-967a-02095d0f35bf.roa
Signing time:             Tue 03 Nov 2026 02:00:13 +0000
ROA not before:           Tue 03 Nov 2026 02:00:13 +0000
ROA not after:            Mon 01 Feb 2027 02:00:13 +0000
asID:                     12025
IP address blocks:        155.63.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b6:71:09:14:25:dd:5e:42:a8:c6:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
        Validity
            Not Before: Nov  3 02:00:13 2026 GMT
            Not After : Feb  1 02:00:13 2027 GMT
        Subject: CN=e8554ee3-0853-488f-aacd-83ca7e1b643e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bf:a9:d4:c9:7e:f9:a7:be:c9:ef:25:04:02:
                    27:1f:1d:28:04:d5:60:d0:95:06:40:6a:f6:d0:2a:
                    b5:6c:15:f7:13:1a:ec:f4:5d:96:31:ab:6e:d4:89:
                    01:2a:82:c8:84:47:20:d4:0c:3e:5f:70:bb:d9:b0:
                    38:3b:0a:e1:f0:f7:fa:72:e6:89:ce:ee:06:4b:48:
                    db:57:bd:05:65:68:68:3b:d3:fd:b7:f7:84:4a:1e:
                    68:cb:b0:34:78:ad:5a:7c:95:eb:8b:d7:4c:1f:d7:
                    38:d6:59:50:97:db:8c:a5:cd:d0:63:3e:93:89:15:
                    a8:1a:ad:f2:87:f5:6b:62:9a:dd:05:cd:6f:2c:58:
                    a4:5b:1e:6b:86:c4:10:85:d6:ef:c9:d6:56:a9:91:
                    33:f0:02:e8:1e:83:ac:6a:5d:60:4a:d4:b1:bc:88:
                    f7:e4:aa:49:dc:b8:6c:2e:d9:f6:0e:8b:d1:8a:99:
                    6b:a0:6e:ee:73:7f:4b:f0:45:5b:4a:e8:2c:bc:6d:
                    ff:fe:ef:fe:73:ba:99:1a:ea:2f:08:59:e6:1e:db:
                    49:47:f7:e1:f5:74:87:70:e2:ac:b3:16:48:b6:88:
                    e7:d8:11:33:3e:c1:df:c4:e7:68:2f:b7:e7:ca:14:
                    c9:8e:d8:a1:13:31:31:2e:25:4c:aa:d6:57:16:3a:
                    1d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:96:2C:CE:47:89:7F:28:B2:9C:39:E8:CC:23:16:5E:9D:E9:7B:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/87362f3d-4cea-3ee0-967a-02095d0f35bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl

            X509v3 Authority Key Identifier:
                keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.63.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:2c:8c:4c:bd:00:12:04:f3:5d:c8:34:d0:f2:f8:34:ad:d7:
         90:f2:d7:b5:84:77:fd:36:c2:25:71:a0:5e:0f:16:a1:d8:22:
         e8:12:5d:67:9d:fa:90:f5:fc:c5:77:ce:ce:59:c8:71:fa:30:
         e3:11:cc:ae:8a:ad:7d:94:82:af:a3:55:48:29:b3:f1:a5:9f:
         37:d1:90:42:29:67:f5:52:1f:96:56:aa:67:c8:ed:57:62:66:
         cf:57:85:e2:b7:6f:5d:47:63:e6:fe:81:d0:fa:4a:0a:2b:8b:
         14:45:fb:8a:51:77:f4:82:01:4b:a6:67:82:8c:7b:39:d8:12:
         8f:66:06:82:58:93:da:9e:57:95:e6:85:e7:6f:e8:92:54:51:
         f8:d7:f3:dd:ef:16:a4:6a:80:1d:d6:3d:94:6e:0c:7e:39:8c:
         cd:53:e0:cb:fe:16:cb:27:f8:0a:3b:90:12:af:0a:b0:96:9a:
         9f:47:81:9a:0d:9b:9c:c9:22:a4:99:a8:4a:1a:af:d3:68:ce:
         bd:ba:a0:dd:50:cf:41:00:19:03:f7:cc:e6:f7:a0:3a:46:a1:
         3b:7f:2b:a9:29:32:c9:c0:e2:a8:51:fd:3d:7d:73:45:9f:82:
         8d:51:61:de:08:75:14:a6:9d:c6:ee:6e:00:eb:97:61:bd:03:
         d3:55:f4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:53:43 2026 by rpki-client