Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/f1d70849-da9b-3445-9ee5-612058c4ffbc.roa
File:                     f1d70849-da9b-3445-9ee5-612058c4ffbc.roa (raw, json)
Hash identifier:          cR//V8y9vpmWw5JWWIbuT2zhVtr/pX93CtVEdULxxng=
Subject key identifier:   F0:4F:DC:09:3A:AB:4B:90:7D:27:22:24:DE:6F:6F:B5:F8:36:D8:A3
Certificate issuer:       /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b
Certificate serial:       010D0C9F4328584F698D69313C14349DC21C2000
Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/f1d70849-da9b-3445-9ee5-612058c4ffbc.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     13511
IP address blocks:        192.155.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:69:31:3c:14:34:9d:c2:1c:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=fca1aab7-cb9a-43e4-ae59-e12593b4056b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:02:fd:7a:79:d3:1e:cd:a1:67:94:f9:79:0b:
                    51:62:43:fd:c7:b1:23:14:15:d4:87:27:75:10:ba:
                    4b:be:a6:51:31:16:78:88:0d:3a:2a:0b:48:ce:47:
                    56:ee:52:61:b3:b7:90:f6:a7:09:43:8a:de:55:98:
                    53:5f:76:87:3c:f0:4b:85:ea:d8:97:13:0f:4d:21:
                    36:fb:92:03:b2:6a:cb:91:08:49:1e:f0:7f:4c:78:
                    b9:b6:60:16:c8:de:e9:05:47:d4:d9:c5:78:5c:47:
                    a4:2d:26:f8:7c:02:ab:5e:a6:7c:58:72:b4:39:0c:
                    08:77:26:3d:6d:21:d7:87:1e:78:5d:3d:07:2b:c8:
                    a0:4b:f7:a2:53:70:df:f2:91:f7:20:d0:f4:1b:97:
                    7e:d2:19:d0:57:f0:89:a7:ef:61:73:e2:32:4a:10:
                    6a:95:1e:f1:2e:84:9b:e2:18:39:82:04:8d:75:1c:
                    5d:5f:11:8c:67:3f:66:88:fc:a7:f2:bb:39:69:93:
                    6a:1f:82:9e:32:11:be:84:41:34:91:48:8c:19:50:
                    a0:3a:4a:e9:5c:5d:c9:8a:eb:03:c1:a6:ff:76:43:
                    55:13:29:57:22:24:d3:78:64:96:8b:5e:39:bb:55:
                    f2:ef:39:ac:45:58:f8:92:c2:cc:a3:f4:9f:6a:bb:
                    dd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4F:DC:09:3A:AB:4B:90:7D:27:22:24:DE:6F:6F:B5:F8:36:D8:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/f1d70849-da9b-3445-9ee5-612058c4ffbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl

            X509v3 Authority Key Identifier:
                keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.155.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:d6:82:ea:31:bb:45:7c:a7:60:63:bb:0d:ee:ed:1c:a4:52:
         1e:64:a9:4e:54:51:dc:d3:86:45:df:47:f8:de:18:46:b0:9d:
         10:15:c5:eb:24:ad:00:a2:07:bc:d2:ac:de:53:25:2f:ce:6c:
         0a:32:37:31:0d:93:c8:47:0a:4a:6e:35:89:ae:5a:5d:7e:6c:
         e6:87:f6:d4:cb:9e:ad:f3:9a:19:d9:d0:76:2a:de:68:6c:ce:
         64:01:20:49:b3:ff:a5:b7:77:97:30:cf:3e:7f:35:fd:0e:06:
         26:45:e5:4d:c4:6f:69:15:d1:81:13:68:37:7f:98:4a:ad:d7:
         6e:a4:81:59:02:ce:50:48:bf:eb:a1:a2:da:e6:1f:57:90:49:
         75:f2:45:d3:cc:de:f5:51:97:3a:e5:14:3f:ac:c9:1e:d6:89:
         80:23:5a:a9:1f:7f:ec:f9:cb:d1:3d:76:9d:99:cc:7b:4b:46:
         c6:01:b5:21:67:e7:85:9e:a9:e4:47:ea:66:cb:66:d5:60:a0:
         d7:40:e5:1d:1c:4c:3e:b2:4c:18:45:a0:da:01:b3:e8:ff:51:
         40:6c:7a:48:63:be:06:8e:cc:31:f0:b9:ac:68:e8:95:79:c0:
         9a:bb:71:83:78:99:83:e2:57:f5:e2:1f:2b:90:fe:ff:9b:80:
         d2:74:6b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 07:55:29 2026 by rpki-client