Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6156dacd-1d6e-3cfa-8279-f3246407336c.roa
File:                     6156dacd-1d6e-3cfa-8279-f3246407336c.roa (raw, json)
Hash identifier:          9bFd0y2ScV2TGt8FBKG9PtavDgUsLmwaR6TL+X3UP3g=
Subject key identifier:   C5:C7:34:4E:C5:65:36:01:3A:8B:92:EE:00:AA:9B:C9:67:1B:1A:AC
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B5141EE57B6E1F136BCE1F600
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6156dacd-1d6e-3cfa-8279-f3246407336c.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        151.101.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:ee:57:b6:e1:f1:36:bc:e1:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=04edd075-ca63-4aad-9222-602ba8c7ab36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4e:6d:0b:3c:a5:d2:40:40:ca:9f:ac:37:02:
                    81:af:2b:38:00:74:29:63:0f:a0:82:55:ae:1e:80:
                    56:e4:30:58:d4:b4:59:21:c0:4f:2f:37:b1:66:5d:
                    a7:ea:50:39:61:1c:20:a2:ce:58:02:2c:e5:d0:f8:
                    7a:c8:8a:ac:9a:2e:98:2d:23:e3:8b:27:39:43:7c:
                    c5:7b:90:71:ea:ac:73:ec:0a:4b:ff:63:f2:b1:4e:
                    76:0e:64:c8:29:38:fc:b5:86:a9:c7:9a:ea:fc:4b:
                    e4:89:1f:e0:08:1c:d3:21:e3:de:10:74:9c:13:c7:
                    a5:1e:eb:cf:84:8d:5e:3f:11:50:9f:97:d6:0f:cd:
                    bc:d0:da:37:e0:06:5a:de:53:36:db:78:f8:64:60:
                    b7:60:f2:62:0c:70:12:5f:4e:c3:63:b4:77:7d:07:
                    29:41:08:0a:7e:0d:32:bb:01:b5:9e:20:c1:53:2d:
                    2c:9f:9d:88:2c:ca:1c:c0:ac:ec:0a:f2:04:15:db:
                    b7:3a:13:15:85:9b:f3:de:2d:ea:61:26:7e:91:c9:
                    54:2a:9f:03:7c:14:78:b9:42:93:51:dc:c8:f2:89:
                    92:d6:8a:ae:ee:55:10:eb:9b:0c:1d:f7:6e:b1:c2:
                    c9:4c:87:8e:7a:74:41:ff:9a:98:db:c8:d8:76:6d:
                    21:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C7:34:4E:C5:65:36:01:3A:8B:92:EE:00:AA:9B:C9:67:1B:1A:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6156dacd-1d6e-3cfa-8279-f3246407336c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.101.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:0e:52:61:45:4a:00:bc:f4:be:86:4e:b4:5a:46:bd:62:85:
         f8:d2:c0:2b:33:54:09:81:98:e5:3d:a2:9e:2e:86:8f:15:54:
         bc:79:cc:b2:9e:a3:fb:fc:f1:64:83:33:91:b1:31:fa:e1:63:
         1a:5b:71:42:dd:b8:ca:52:e2:ef:b6:42:b7:2a:3c:25:7d:f6:
         2c:98:79:2a:ca:07:20:f5:90:cd:04:b9:8e:93:54:f2:d8:28:
         a9:a1:01:cb:a6:f7:46:81:54:38:91:29:31:bc:08:6e:84:37:
         96:63:07:2d:5e:58:81:89:fd:bb:56:12:43:89:6b:76:14:5b:
         79:f7:c6:6a:79:1a:1a:ba:d6:3e:4f:21:4e:ac:d0:96:ee:5e:
         28:a0:b1:ae:26:64:aa:2f:9f:48:fd:76:35:b9:d5:6a:9a:d8:
         17:60:79:64:ce:d0:38:2d:7a:cf:3f:87:38:0f:86:ac:a0:36:
         1d:3c:e6:ba:0e:e1:f9:49:27:d0:23:4f:38:f9:24:51:eb:fb:
         6e:91:2b:09:21:a2:00:99:2f:42:3a:6e:71:d4:a1:4c:f8:59:
         d9:8f:18:e7:d5:43:23:cc:41:0b:e0:15:38:3c:62:80:33:de:
         38:8b:a6:62:8c:bf:dd:93:3b:4f:30:57:40:8c:93:fa:65:1b:
         b1:22:5b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:49:21 2025 by rpki-client