Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS151106.roa
File:                     AS151106.roa (raw, json)
Hash identifier:          JC7KqGtuPW02LvzxAPwnLPPPhp4MXhoL8yiJv0akif4=
Subject key identifier:   1B:5C:57:17:FB:8A:9B:E7:F3:A2:1B:B8:72:ED:C3:1F:04:F3:B9:FC
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       1C8FBC11CEF19D41A151C1D39A7365FDE62B0EFD
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS151106.roa
Signing time:             Wed 28 May 2025 11:22:07 +0000
ROA not before:           Wed 28 May 2025 11:17:07 +0000
ROA not after:            Wed 27 May 2026 11:22:07 +0000
asID:                     151106
IP address blocks:        104.234.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 15:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:8f:bc:11:ce:f1:9d:41:a1:51:c1:d3:9a:73:65:fd:e6:2b:0e:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: May 28 11:17:07 2025 GMT
            Not After : May 27 11:22:07 2026 GMT
        Subject: CN=1B5C5717FB8A9BE7F3A21BB872EDC31F04F3B9FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:62:a7:f1:2c:66:d5:66:7f:e9:e1:f5:75:37:
                    c6:d1:13:a1:79:a1:58:e1:a5:fe:0e:63:2b:50:87:
                    e5:80:1b:f6:0e:11:27:7c:11:6c:14:d2:c4:2e:3c:
                    1e:60:8c:32:6c:99:5f:fe:ae:0d:35:99:21:02:93:
                    4f:d0:91:11:0d:8e:f5:5e:81:84:8d:1f:06:2b:eb:
                    50:63:87:9a:ec:ac:c0:3b:49:d8:46:4f:66:d9:e3:
                    b4:5b:5e:ed:b7:28:e9:cd:9b:71:fb:8e:e4:fd:00:
                    43:6e:38:24:73:7e:47:90:54:40:b1:fd:e6:4b:91:
                    e0:5a:ee:cf:c2:2e:e2:fd:90:87:8b:7b:aa:ca:85:
                    08:0e:f3:c1:02:d6:78:b3:69:db:9d:c4:b5:8b:fe:
                    bb:5c:d4:35:73:b3:59:14:8b:58:e4:c4:aa:73:1a:
                    0e:83:8f:67:44:4a:05:8b:71:d8:99:0c:e9:c6:2c:
                    16:2e:1f:1a:bb:dd:95:63:80:5b:ee:1c:4b:b2:25:
                    65:8c:e2:cf:af:31:2e:0c:11:b3:a9:ca:40:37:3e:
                    3a:ef:59:cc:e7:1b:ba:95:b7:72:74:60:ea:a2:e8:
                    bf:a0:43:64:aa:8d:f4:b8:bf:7f:68:78:55:fe:f1:
                    f5:d7:55:87:7b:6c:c5:b4:98:ca:ca:d5:04:76:53:
                    e9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5C:57:17:FB:8A:9B:E7:F3:A2:1B:B8:72:ED:C3:1F:04:F3:B9:FC
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS151106.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:e2:e5:b9:80:55:ce:22:a0:85:df:10:14:e9:46:6f:65:d6:
         10:55:d8:63:18:c7:ad:5b:3f:ea:03:55:5a:0e:67:52:35:15:
         2b:8a:23:72:d3:fd:68:4f:d6:28:ef:d7:3b:14:a9:47:d8:2c:
         ea:e4:99:ac:72:66:ed:ef:c6:4c:23:e5:6e:25:ff:d2:90:41:
         1e:32:3f:41:04:91:bb:c1:2b:e4:54:0f:42:1b:b5:24:b6:7c:
         08:20:e2:2f:ab:1c:f9:42:6a:c2:88:24:10:e4:ba:a7:38:3a:
         f3:ea:e1:cf:06:bf:99:bd:8d:c9:a1:94:af:2b:83:33:27:28:
         35:01:3f:f5:d4:82:b1:0e:13:ba:e7:d1:60:55:d9:e0:42:56:
         af:02:77:43:6d:2b:e4:7f:93:9f:c5:3a:db:54:f0:0f:b0:76:
         03:4a:ed:8b:a5:85:bc:61:e1:2c:3a:e6:f4:69:e6:32:6c:61:
         42:68:0d:ba:72:f4:46:05:3c:b9:d5:2a:d0:4d:a4:34:60:eb:
         02:f7:43:c1:ea:0d:c7:8b:a4:17:2d:a6:04:e2:b6:0b:5f:5d:
         48:fa:08:89:0a:d3:63:fb:76:8a:7b:fd:44:a8:71:1d:7c:bb:
         a1:6f:f2:ba:bc:57:23:14:7a:66:e3:cb:1f:d1:47:17:d0:af:
         cd:b0:a3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:20:59 2025 by rpki-client