Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/faab7e23-2131-3188-8f35-e8d1e1625c6b.roa
File:                     faab7e23-2131-3188-8f35-e8d1e1625c6b.roa (raw, json)
Hash identifier:          LudrtawcjnlIHECEk0FKQWsNhkL+DH9Z93ZP+dJvehM=
Subject key identifier:   94:C7:A4:04:29:1D:2F:F4:23:48:88:2A:EA:D3:29:6C:FC:9D:42:1D
Certificate issuer:       /CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
Certificate serial:       010D0C9F4328584F74B82C81402A0C557C7A6800
Authority key identifier: 60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/faab7e23-2131-3188-8f35-e8d1e1625c6b.roa
Signing time:             Sat 10 Oct 2026 13:00:13 +0000
ROA not before:           Sat 10 Oct 2026 13:00:13 +0000
ROA not after:            Fri 08 Jan 2027 14:00:13 +0000
asID:                     20115
IP address blocks:        137.155.32.0/20 maxlen: 24
                          137.155.48.0/20 maxlen: 24
                          137.155.96.0/21 maxlen: 24
                          137.155.104.0/21 maxlen: 24
                          137.155.112.0/21 maxlen: 24
                          137.155.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:74:b8:2c:81:40:2a:0c:55:7c:7a:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
        Validity
            Not Before: Oct 10 13:00:13 2026 GMT
            Not After : Jan  8 14:00:13 2027 GMT
        Subject: CN=8ee38f78-efd8-47a5-817e-bd5fb95acc7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:72:30:f8:aa:c8:07:01:ea:5e:c0:75:e1:0e:
                    96:c5:fb:0c:04:13:95:92:1e:14:39:72:88:81:ed:
                    11:ea:81:ad:1d:99:d4:96:50:9a:bf:f1:58:c7:96:
                    a4:b4:dc:42:b9:d7:58:03:30:5c:8e:12:72:18:c8:
                    bd:0c:bf:db:55:a5:62:9e:60:6a:6e:59:a5:8b:6c:
                    bd:bc:1a:06:19:4e:31:fc:71:ad:99:97:7a:10:f6:
                    3a:d0:50:8c:a2:45:4f:4b:1b:19:8b:db:78:3d:b2:
                    52:56:60:d2:25:9c:2a:40:a7:a3:a4:81:6a:36:42:
                    48:d8:78:36:7f:f1:86:e1:34:d7:af:15:29:4a:7a:
                    56:a8:c7:36:e2:5b:03:8a:6d:49:f8:63:ca:1c:43:
                    17:e1:90:58:b8:c4:18:a4:78:0e:13:6a:50:53:49:
                    b3:78:2f:a7:84:75:37:8b:c0:34:8a:3b:2b:70:cf:
                    4e:bb:66:2d:44:1c:dd:15:bd:54:16:86:86:32:74:
                    ed:57:3e:4c:9f:35:85:45:a3:1c:de:4b:77:f8:45:
                    0b:0c:c0:29:0a:eb:21:63:0e:b1:40:c0:1d:f0:d6:
                    df:b5:54:e4:ea:7c:4a:1a:e1:ce:cb:1c:fe:6a:f0:
                    58:0c:db:94:5c:c2:80:db:ad:73:70:00:e7:54:87:
                    ae:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C7:A4:04:29:1D:2F:F4:23:48:88:2A:EA:D3:29:6C:FC:9D:42:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/faab7e23-2131-3188-8f35-e8d1e1625c6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl

            X509v3 Authority Key Identifier:
                keyid:60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.155.32.0/19
                  137.155.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:68:e3:6c:52:96:bb:67:e8:d9:d5:74:87:6f:d1:c2:cb:8b:
         80:15:b5:ec:63:17:86:1d:43:d3:a8:be:36:cc:da:91:5f:2c:
         5a:9a:e7:8d:b8:e1:56:09:53:3a:80:52:1e:aa:5f:34:3c:54:
         19:3f:9b:ec:65:29:c0:63:92:bb:58:e5:20:1b:71:d3:59:48:
         62:eb:3f:3b:b1:ef:74:ee:06:aa:0b:dd:3d:1f:92:0b:3d:b8:
         f5:fc:58:6d:5c:0b:a8:29:77:cb:24:95:64:23:22:91:48:a2:
         30:03:f8:2b:08:97:e3:19:af:6e:9d:cb:5c:db:ed:1b:e1:fd:
         d6:e3:a6:a8:7a:f3:25:b4:77:96:f1:79:b6:81:70:43:41:70:
         5d:69:7a:e2:b9:05:6d:ae:a2:67:e2:33:7a:ab:da:a9:eb:db:
         c7:23:69:6b:0e:8d:77:90:53:b3:36:d3:6e:5a:10:03:13:2f:
         c2:78:7c:82:1f:95:81:e3:d3:6a:52:50:77:10:76:51:57:ae:
         d6:d3:85:3c:fe:9d:bf:f2:e8:a5:8f:83:58:2e:66:cb:ad:f9:
         f2:13:6a:dd:01:d8:ae:99:60:12:e3:f8:10:cc:5d:be:98:17:
         c5:37:38:07:fd:89:30:85:5d:4e:3f:24:c2:20:a2:ba:eb:d4:
         85:2e:27:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:37:00 2026 by rpki-client