Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a9d12e32-ad63-3f4e-a4f1-e3338057b17e.roa
File:                     a9d12e32-ad63-3f4e-a4f1-e3338057b17e.roa (raw, json)
Hash identifier:          OoGwIGXDlyGojQ1EmjN6d4xD/YONCS5LY2UotOFELzA=
Subject key identifier:   2F:AF:89:9B:03:8E:2C:44:33:35:DA:44:C4:E5:EC:04:35:A0:26:B4
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F4328584AFC1C04FA96AA518EE78F1D00
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a9d12e32-ad63-3f4e-a4f1-e3338057b17e.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     396982
IP address blocks:        151.193.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:04:fa:96:aa:51:8e:e7:8f:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=4f3dc285-ccc9-453f-bacb-ea8a3c951e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:74:cb:a7:38:1e:da:f7:6f:86:5a:fe:10:c4:
                    ed:f3:eb:07:49:3d:7e:04:af:15:ee:25:e2:6e:ae:
                    79:2c:d6:42:7e:ab:a8:7f:d4:ab:6a:f7:61:a0:79:
                    e5:d8:64:68:72:41:1c:a9:4a:96:b5:ca:12:67:fc:
                    53:37:0e:f4:82:3f:b4:2e:3d:e9:3a:be:39:0a:1f:
                    80:0a:73:66:9a:67:22:9b:02:b9:9f:39:2e:ba:d6:
                    f6:24:2b:bc:16:fd:92:c4:03:39:b0:96:6d:56:7f:
                    a0:a0:e6:ae:3a:d5:ef:0f:75:86:a9:56:c0:6e:31:
                    06:36:1b:e9:bb:e1:be:7e:c6:30:fa:39:1e:ba:b7:
                    6b:3d:fe:41:1e:74:dd:ca:4f:71:38:f4:01:4b:6d:
                    31:44:b6:f9:2f:37:bb:09:37:96:cf:62:bc:d8:44:
                    e2:2a:11:76:13:fa:8e:b4:69:9c:88:16:db:3a:e6:
                    69:fa:fe:ab:7d:fe:8b:7a:e8:e5:d7:00:30:90:d3:
                    7b:de:46:d3:92:ad:b6:53:a6:18:50:ad:b1:a4:01:
                    31:5f:e1:18:fb:b1:3d:ca:1c:7e:93:5f:09:1c:17:
                    0c:84:91:a6:ee:66:ad:a3:46:da:66:a1:da:6d:20:
                    6a:eb:4d:cc:a7:23:7f:a0:17:22:84:e6:82:d4:5a:
                    85:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:AF:89:9B:03:8E:2C:44:33:35:DA:44:C4:E5:EC:04:35:A0:26:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a9d12e32-ad63-3f4e-a4f1-e3338057b17e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:06:c4:e9:23:83:f7:1a:33:60:28:ff:8e:8e:cc:f2:e4:fb:
         d3:fc:73:e6:7b:bd:23:d0:65:06:79:4d:49:b8:34:00:be:59:
         cd:ba:09:0c:52:29:05:a6:3a:e3:07:70:22:b1:eb:f9:28:10:
         ae:6a:41:e3:ec:8b:c4:50:0d:e2:8b:3d:86:8b:c6:4d:29:eb:
         14:89:66:f1:c9:c1:8e:24:2f:c6:12:52:6e:0b:0f:60:06:0a:
         60:fd:fc:71:73:1e:14:c2:1d:2e:12:a2:fe:bf:bc:d5:66:43:
         36:c3:83:cc:30:be:2f:a1:02:c0:5a:f1:fb:a5:d7:61:e0:3a:
         df:e3:a4:08:7c:88:f9:9a:0c:9a:e4:4a:5e:fe:2a:9f:c4:e6:
         1f:74:c3:db:f7:e9:67:82:99:d1:c6:fe:96:d8:96:69:99:47:
         02:29:2c:1d:11:42:06:56:03:e1:45:23:96:67:cd:21:db:f1:
         40:f1:3e:5e:7e:3a:50:58:ce:0e:4f:65:3c:62:61:74:55:88:
         40:a6:25:f2:70:de:bd:7c:ee:51:65:a4:a7:3f:1d:2c:9e:1a:
         a1:8b:de:ae:53:6c:3c:b5:ce:6a:41:d8:2e:c8:aa:41:51:4b:
         7c:27:91:33:f9:81:b7:4a:7f:d3:67:76:57:70:97:c8:eb:ab:
         da:81:c2:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HAT6lqpRjuePHQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTIxNTk4MjMtODA2YS00ODc5LTlkZTktN2JlNjM0ZThj
ZDMxMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk
NGYzZGMyODUtY2NjOS00NTNmLWJhY2ItZWE4YTNjOTUxZTRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXTLpzge2vdvhlr+EMTt8+sHST1+BK8V7iXi
bq55LNZCfquof9SravdhoHnl2GRockEcqUqWtcoSZ/xTNw70gj+0Lj3pOr45Ch+A
CnNmmmcimwK5nzkuutb2JCu8Fv2SxAM5sJZtVn+goOauOtXvD3WGqVbAbjEGNhvp
u+G+fsYw+jkeurdrPf5BHnTdyk9xOPQBS20xRLb5Lze7CTeWz2K82ETiKhF2E/qO
tGmciBbbOuZp+v6rff6Leujl1wAwkNN73kbTkq22U6YYUK2xpAExX+EY+7E9yhx+
k18JHBcMhJGm7mato0baZqHabSBq603MpyN/oBcihOaC1FqF/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC+viZsDjixEMzXaRMTl7AQ1oCa0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hMjE1
OTgyMy04MDZhLTQ4NzktOWRlOS03YmU2MzRlOGNkMzEvYTlkMTJlMzItYWQ2My0z
ZjRlLWE0ZjEtZTMzMzgwNTdiMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTIxNTk4MjMtODA2YS00ODc5LTlk
ZTktN2JlNjM0ZThjZDMxL2EyMTU5ODIzLTgwNmEtNDg3OS05ZGU5LTdiZTYzNGU4
Y2QzMS5jcmwwHwYDVR0jBBgwFoAUpZGQmoiGHwLfK88I1KSUYP2ExWYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hMjE1OTgyMy04MDZhLTQ4NzktOWRlOS03YmU2
MzRlOGNkMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl8E8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKsGxOkjg/caM2Ao/46OzPLk+9P8c+Z7vSPQZQZ5TUm4NAC+Wc26CQxS
KQWmOuMHcCKx6/koEK5qQePsi8RQDeKLPYaLxk0p6xSJZvHJwY4kL8YSUm4LD2AG
CmD9/HFzHhTCHS4Sov6/vNVmQzbDg8wwvi+hAsBa8ful12HgOt/jpAh8iPmaDJrk
Sl7+Kp/E5h90w9v36WeCmdHG/pbYlmmZRwIpLB0RQgZWA+FFI5ZnzSHb8UDxPl5+
OlBYzg5PZTxiYXRViECmJfJw3r187lFlpKc/HSyeGqGL3q5TbDy1zmpB2C7IqkFR
S3wnkTP5gbdKf9Nndldwl8jrq9qBwtA=
-----END CERTIFICATE-----
Generated at Fri Oct 10 21:09:09 2025 by rpki-client