Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/89956d0e-bcd5-3a68-a1ba-78a49bc01105.roa
File:                     89956d0e-bcd5-3a68-a1ba-78a49bc01105.roa (raw, json)
Hash identifier:          ajwODYDwzIIkr7AMR95SfXRSm4WDSyFAmcOOdI0XkP0=
Subject key identifier:   A6:38:15:85:F9:6E:3F:BB:3B:85:DD:2C:17:D4:44:2C:CC:13:24:EC
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E9BE510B25AD3FCBFB72DA200
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/89956d0e-bcd5-3a68-a1ba-78a49bc01105.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     20115
IP address blocks:        159.111.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:10:b2:5a:d3:fc:bf:b7:2d:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=aa83c72d-481c-403f-b53d-c5618ae383ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d4:60:f1:3b:2e:ac:8e:26:f6:34:ae:23:6f:
                    27:5b:0a:d6:e6:87:95:a4:95:3e:28:d9:36:2f:1b:
                    cf:65:29:37:80:7a:33:1b:a1:27:93:d8:54:81:bd:
                    66:89:21:75:a6:6b:e4:b1:62:21:9c:db:e5:87:9f:
                    e2:5c:76:a4:26:ed:ca:51:d3:2b:9a:4f:08:7f:b8:
                    da:c4:3b:10:68:39:e9:e8:82:19:2d:b0:ad:02:69:
                    08:c3:63:4f:e2:5e:0b:49:25:87:03:9c:df:b3:7e:
                    24:05:b0:5d:a2:32:89:56:aa:45:90:82:4f:36:00:
                    63:dd:a5:83:d9:ba:34:da:11:cd:f3:8c:c6:e5:cb:
                    71:0a:e9:66:b0:09:34:77:18:fa:dd:e2:53:b7:69:
                    dc:ae:dc:6e:0a:38:ff:f0:85:5a:4f:d1:7c:98:c7:
                    8c:f0:1c:55:3f:c0:c2:bd:03:43:c1:bf:8b:f1:7d:
                    c0:1b:dd:78:3f:c4:27:86:13:92:9a:e8:22:e7:88:
                    ef:77:4b:fe:f5:1b:98:ee:f1:83:fd:ad:39:1f:28:
                    61:ab:e8:76:cc:19:29:b9:70:ff:c7:f6:1c:fa:8a:
                    de:6d:d5:96:a4:73:3a:79:e0:ec:4f:2b:29:f6:27:
                    59:29:67:cc:06:f3:22:00:62:3f:85:67:2f:df:17:
                    05:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:38:15:85:F9:6E:3F:BB:3B:85:DD:2C:17:D4:44:2C:CC:13:24:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/89956d0e-bcd5-3a68-a1ba-78a49bc01105.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.111.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:01:81:02:fa:7d:96:d4:6d:94:fc:1a:7a:21:df:b9:88:3f:
         98:51:95:f5:0e:dd:71:0f:ba:05:c8:71:d6:8b:4b:01:6c:85:
         49:72:fb:b3:66:b3:8a:41:d5:20:0c:eb:7e:28:a4:38:d4:4d:
         ce:e1:bf:fe:ae:31:9e:11:80:24:9f:7c:4a:9c:60:66:13:ee:
         cc:47:87:d6:0e:5e:94:23:ac:a1:45:41:20:54:78:38:a5:61:
         dc:7c:8e:45:f0:49:65:f5:d2:cf:65:73:b7:df:c8:f3:d5:5c:
         8f:11:b1:88:33:88:fb:ad:2d:73:5e:16:31:96:35:07:93:f4:
         a7:87:1d:2f:f1:d2:69:8c:db:8c:39:db:83:75:bc:11:9f:99:
         4f:f6:26:ca:82:61:73:99:2f:39:20:98:9b:2a:2e:2b:d3:e8:
         75:71:c3:a9:23:ab:f5:6d:0b:c4:06:de:d2:86:af:ac:09:b5:
         23:96:6e:b9:e4:ce:ca:9e:9b:08:19:1c:de:9a:b8:86:a5:54:
         0f:cf:65:62:a1:be:47:cf:66:de:59:93:04:4a:2e:a6:dd:1a:
         57:e4:4c:1c:71:e6:a5:e7:53:a3:6d:b9:98:2b:1f:a5:bc:19:
         60:87:ee:8f:a8:e5:81:bd:fb:e4:0a:6d:ec:1b:55:9e:ba:61:
         f6:cb:18:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:18:13 2026 by rpki-client