Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/8ebacebc-ec41-35ad-ab0a-b4691864278d.roa
File:                     8ebacebc-ec41-35ad-ab0a-b4691864278d.roa (raw, json)
Hash identifier:          AW9QoNfG2Hd345qjnhqpnbQDFyuPOGWpWbR4WN4Ujqk=
Subject key identifier:   2A:55:BE:DC:97:18:55:D0:D8:93:1D:B8:57:11:32:C4:32:B7:BA:19
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F4328584AFC1C0483D44ABBDAF9813A20
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/8ebacebc-ec41-35ad-ab0a-b4691864278d.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     396982
IP address blocks:        151.193.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:04:83:d4:4a:bb:da:f9:81:3a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=3be7194b-9193-4066-87da-b6ddcb604b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0b:f1:ac:da:21:70:d0:2a:7c:19:fe:78:bf:
                    af:2c:9b:dd:17:a1:80:3d:d5:3e:06:12:70:19:c3:
                    13:2e:63:43:49:ad:1e:f5:95:c3:d0:0a:fe:3a:f3:
                    7a:81:17:4e:d3:ca:2b:03:eb:58:29:e2:ca:16:18:
                    2c:1f:0a:8d:a2:1f:8c:74:c4:95:5e:ed:6e:e9:56:
                    a8:8f:e5:67:47:0c:af:bf:52:ab:9f:5d:97:6b:4f:
                    a8:15:14:ae:bd:d5:0f:a3:11:e8:2e:49:83:d3:06:
                    0b:13:11:2e:55:50:86:95:d6:a0:4b:5c:5f:9a:01:
                    8f:55:67:f5:d8:a0:17:9b:7e:19:0b:a0:da:6c:b5:
                    b5:b2:eb:8d:15:f6:bb:24:9c:3e:53:54:56:37:16:
                    ac:67:f9:03:bc:25:69:75:9d:e3:10:9d:1e:0a:46:
                    18:bb:f4:09:ed:df:ba:62:4a:14:ca:93:81:12:1e:
                    2e:35:6c:29:31:29:da:0e:9d:d6:fb:b6:c9:41:6e:
                    1d:ff:8c:db:a4:2d:7f:3d:a4:bc:cf:bc:31:e1:f4:
                    4c:37:b2:71:b0:70:49:69:dc:8b:89:a5:f9:87:97:
                    8b:22:6a:3f:16:84:ca:af:bb:e1:58:38:9f:bb:e0:
                    75:06:77:bb:d1:79:22:eb:ca:62:4c:95:c1:9d:1a:
                    b6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:55:BE:DC:97:18:55:D0:D8:93:1D:B8:57:11:32:C4:32:B7:BA:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/8ebacebc-ec41-35ad-ab0a-b4691864278d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:df:85:8f:f8:74:c2:66:2d:24:e6:2b:cd:cc:39:24:d0:25:
         af:c9:c7:98:83:13:50:d7:01:89:a1:33:70:77:1c:53:b5:c4:
         0d:f5:d0:1c:1d:cc:df:24:25:c2:56:43:cf:ff:54:64:7b:56:
         89:07:a3:ca:a1:b8:86:ad:a7:3d:24:1f:2f:e3:06:a4:04:3e:
         60:42:2c:38:6c:42:d9:45:19:43:f6:03:26:c6:a7:51:03:a7:
         58:7a:61:03:eb:c4:be:11:ce:be:93:bc:7a:5e:fa:69:9e:bb:
         29:23:02:6b:60:fc:90:23:d0:83:97:f1:55:4e:03:1c:b8:23:
         12:09:68:9a:14:cc:1a:9f:2a:63:c8:1b:e8:91:42:0d:ad:5c:
         14:3a:ca:62:f4:de:68:a0:3a:05:db:55:8f:7c:8f:67:2b:27:
         7a:84:48:b0:da:2e:da:56:d0:62:15:14:3a:ae:cc:28:08:5b:
         17:63:b4:96:f4:cf:4f:b9:cd:3c:1d:f4:45:ca:a7:03:eb:57:
         f4:f6:ce:bc:3e:15:f6:35:c1:1d:22:25:7c:7e:7c:df:ea:b5:
         c8:b2:1b:7e:36:16:15:ea:56:dc:71:cc:bf:59:e9:58:b7:26:
         8b:27:0d:ac:a9:4e:fa:4d:60:94:c3:a0:5b:78:81:16:e2:af:
         89:06:fc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:14:01 2025 by rpki-client