Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/3bc595f8-4cd3-365c-bc4e-b4dda0a9bdae.roa
File:                     3bc595f8-4cd3-365c-bc4e-b4dda0a9bdae.roa (raw, json)
Hash identifier:          BTeKDToRky4wLBz9WHKQE+VSjaj8fWZAlWWN21ZP224=
Subject key identifier:   AB:44:E9:D7:89:B9:88:47:3C:0E:72:9F:00:6D:32:5D:5A:60:40:87
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F4328584AFC1C054B57CCF22C13B97140
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/3bc595f8-4cd3-365c-bc4e-b4dda0a9bdae.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     396982
IP address blocks:        151.193.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:05:4b:57:cc:f2:2c:13:b9:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=1df83707-56ba-46c7-af3f-7eec6a0c08eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:30:a8:ec:29:64:64:51:fe:c8:71:db:d6:ae:
                    2c:79:99:74:08:c1:06:5c:7d:a7:d6:61:db:7c:e8:
                    ec:97:d6:55:da:90:c0:09:db:31:b2:53:d0:db:9d:
                    66:e0:d3:11:e2:75:38:c6:1c:47:48:82:10:55:5e:
                    ff:78:a9:96:8f:44:28:b3:f9:a9:30:38:96:5b:24:
                    51:33:a9:54:44:ac:9b:71:10:00:9c:be:e9:51:79:
                    40:e4:f0:8c:28:28:5d:59:5c:48:0a:6b:ee:48:2b:
                    3a:cf:4b:e2:7d:ea:5b:31:02:78:3f:8c:2f:8b:6f:
                    01:e5:43:df:2e:18:6b:08:67:d6:6d:c5:d4:0c:20:
                    0b:fd:89:9b:99:54:bc:99:41:90:fa:ed:98:cb:31:
                    3a:b8:5b:49:ed:a3:0f:09:31:6f:ae:0a:f3:e1:b8:
                    be:a2:dc:28:77:44:58:30:66:bb:2f:a8:6e:a3:e2:
                    ef:c9:41:2b:99:9d:6e:4d:a3:17:0c:e8:0b:ad:a1:
                    7f:25:16:89:90:b9:c2:fc:b8:0f:94:f2:97:ef:56:
                    1a:c5:92:53:c2:94:96:eb:eb:7a:8c:80:2f:8f:1c:
                    d7:fb:57:11:62:1e:59:0a:67:fb:a8:a6:0a:81:5b:
                    b7:93:df:48:0d:3c:7d:af:19:4f:a9:72:a6:3f:fa:
                    ba:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:44:E9:D7:89:B9:88:47:3C:0E:72:9F:00:6D:32:5D:5A:60:40:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/3bc595f8-4cd3-365c-bc4e-b4dda0a9bdae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:fb:33:11:88:38:c6:ab:ce:5d:75:97:b9:5a:72:47:fa:1a:
         e2:d5:2c:78:7b:21:b4:44:77:94:90:48:61:5c:42:22:5b:07:
         24:13:e4:5f:0d:96:ec:23:76:53:73:60:53:1b:8b:14:c3:26:
         c4:f0:d1:a7:91:9c:11:a2:49:bd:62:95:01:01:40:05:05:57:
         95:da:bd:76:a2:ea:1d:cd:f5:27:22:a3:f8:68:8c:eb:f3:c7:
         13:25:b3:72:ec:82:8f:ce:9c:57:db:c0:77:cb:41:0a:59:ae:
         1b:7b:63:2b:1e:f5:91:8a:eb:72:bd:4b:b1:9c:55:3c:19:0b:
         99:a1:eb:49:be:8f:e3:6f:79:fe:7c:e7:57:ca:b5:0c:3b:73:
         7a:a4:81:fd:09:3c:9b:f3:2b:4d:8f:66:37:1f:52:ca:52:c9:
         a5:f9:53:ba:4e:59:19:5c:49:84:09:6d:26:25:80:73:7c:43:
         62:4d:04:d5:7e:b6:e7:da:85:74:7e:22:34:1c:dd:7d:7d:5f:
         fb:3a:2f:c7:ff:59:f0:3b:af:e4:76:03:da:eb:7c:42:90:66:
         0d:e7:de:6b:ba:37:68:d3:19:4d:d5:dd:78:ac:76:35:9c:26:
         0b:b1:c2:11:bc:55:00:f8:07:32:a0:63:aa:4a:6c:a4:0b:35:
         bb:cc:25:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:08:51 2025 by rpki-client