Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS151389.roa
File:                     AS151389.roa (raw, json)
Hash identifier:          bE/1r91Zjh43N+/Z485MHqrO4PDH1jGAOXSP9uB2sZo=
Subject key identifier:   8F:D2:23:40:52:AD:5F:95:33:D0:E2:5C:08:8E:53:35:2D:17:BF:62
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       5D514D48A926EBB81B7A363F995B668781751D2E
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS151389.roa
Signing time:             Fri 08 May 2026 01:08:03 +0000
ROA not before:           Fri 08 May 2026 01:03:03 +0000
ROA not after:            Fri 07 May 2027 01:08:03 +0000
asID:                     151389
IP address blocks:        23.94.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 13:11:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:51:4d:48:a9:26:eb:b8:1b:7a:36:3f:99:5b:66:87:81:75:1d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May  8 01:03:03 2026 GMT
            Not After : May  7 01:08:03 2027 GMT
        Subject: CN=8FD2234052AD5F9533D0E25C088E53352D17BF62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fa:da:70:fd:88:9b:5e:ce:37:c7:b4:4b:0c:
                    98:3e:0c:8f:4d:8f:06:8c:f3:3d:f2:eb:cf:d8:ab:
                    ce:f8:95:51:e0:c1:3d:e2:5e:43:ef:4b:cf:bc:e2:
                    7a:ab:f3:c9:6d:62:06:9d:e5:bd:b6:2a:9f:0a:1c:
                    df:94:11:a5:b2:9c:34:a7:13:58:c7:9e:d6:76:50:
                    68:a1:32:56:fa:8d:b0:c0:13:47:7b:a0:e7:86:95:
                    f5:f0:92:46:f0:24:21:92:aa:bf:25:59:1b:cb:95:
                    f7:4d:fb:fd:32:01:0d:1c:0e:b8:f2:e6:8e:c5:2f:
                    58:c3:16:7f:c5:8a:da:ff:82:86:6f:2e:51:82:6e:
                    35:94:48:6f:2a:48:57:e8:6d:c4:92:70:9e:e4:58:
                    16:4a:0b:ff:e1:ca:93:e1:16:32:00:ad:ca:25:9a:
                    b0:67:06:11:95:cc:ee:7d:b8:78:66:02:e6:f4:89:
                    a3:33:95:9f:fa:b1:60:23:d2:8a:60:b8:31:18:e8:
                    e6:69:71:13:48:6f:3a:5a:5b:71:57:70:6c:7d:a8:
                    c4:59:f1:aa:74:81:2c:9a:4f:14:bb:ae:8e:3c:02:
                    3d:73:14:55:dc:b7:62:dc:c9:07:c0:23:cb:d8:9e:
                    7f:fe:b2:89:4b:e6:55:96:89:69:c2:b7:46:f9:17:
                    84:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D2:23:40:52:AD:5F:95:33:D0:E2:5C:08:8E:53:35:2D:17:BF:62
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS151389.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:66:a8:a1:b7:d5:35:95:23:a4:6d:7e:e1:b6:45:7f:1f:ea:
         e3:cd:04:df:d9:dd:92:92:c0:82:72:75:42:78:5e:55:1d:ad:
         3e:a4:8e:8a:a5:50:89:2d:c8:93:40:09:27:96:14:c4:8b:8b:
         9d:15:62:ba:c7:a6:db:fd:51:ab:5a:87:3a:da:d0:6e:60:3a:
         d1:89:84:ab:bc:5e:be:55:2d:ba:9d:bb:a9:88:b7:a7:df:7a:
         aa:b0:0f:26:5a:5a:18:ca:41:cd:3b:31:10:fb:12:d4:7f:34:
         d1:56:96:c1:bb:59:09:07:97:e9:91:89:2a:22:eb:f0:4b:63:
         81:0c:33:5d:8a:42:e0:cb:bf:6d:cb:24:c0:3b:d3:36:6e:20:
         b5:7f:b4:55:cd:87:1b:87:83:81:5e:d0:9b:0b:76:3d:96:af:
         52:9c:36:76:0d:d1:2b:36:01:82:8d:0c:37:88:96:a1:11:fb:
         8b:13:34:62:8e:3a:41:8a:84:bf:41:82:b4:6d:dd:64:bd:02:
         57:5d:eb:27:59:9c:59:de:fe:78:41:3a:88:bf:3d:3a:66:a4:
         b1:66:33:f0:a8:bd:e0:95:bf:07:a2:d5:2d:b6:1c:04:e0:f6:
         7c:57:99:c1:1e:6a:6e:f5:3c:26:f7:6a:d5:dc:09:c6:fa:cc:
         f0:e7:43:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 10 18:24:06 2026 by rpki-client