Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/3414f33e-44b0-3a1a-ae8d-db29c1615f13.roa
File:                     3414f33e-44b0-3a1a-ae8d-db29c1615f13.roa (raw, json)
Hash identifier:          NyT94rLOy47mVyA0Y3DbxSgGTUCtmVdySYMkFvmA2G0=
Subject key identifier:   1B:37:76:0E:19:6F:0F:25:A0:70:F0:DC:07:53:B5:E3:12:44:9D:10
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F4328584D9E501626E9FA11EC7C471100
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/3414f33e-44b0-3a1a-ae8d-db29c1615f13.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     396982
IP address blocks:        151.193.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:16:26:e9:fa:11:ec:7c:47:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=6fa3b7d7-1f0f-40ff-b091-4a8513d4e5d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:de:f5:59:bd:cf:b5:5b:d8:fb:b9:c7:5c:e3:
                    35:90:a6:39:1a:63:26:c8:b1:fe:5a:83:65:74:ee:
                    19:90:3b:d2:66:c6:63:63:58:6e:cb:f6:d7:0a:61:
                    3f:b2:6e:40:c4:cd:4f:e4:4a:52:9a:14:98:b8:c1:
                    f9:2c:7d:d1:5b:e5:01:c4:a8:c3:aa:d1:ec:a0:b5:
                    c1:26:16:93:f5:d2:3e:e5:b2:1e:61:d6:b3:f3:cb:
                    b4:e6:00:20:94:7c:4a:a3:36:2b:a9:df:da:d9:bc:
                    3e:e5:6c:65:62:4e:d8:85:e3:ed:73:f5:b9:6a:db:
                    4b:6c:55:cd:26:87:bf:4c:a6:c7:47:b1:3f:ac:fd:
                    bb:86:85:74:cd:f9:98:32:25:6c:cb:db:1d:3e:05:
                    ee:b2:e7:a1:2a:ed:91:50:3b:b5:ba:41:2c:56:8e:
                    e5:4e:77:90:f6:2d:98:35:8b:a1:89:5c:92:cb:21:
                    20:e2:40:67:d1:c9:4d:9a:76:7e:4d:f4:49:3f:b5:
                    99:ce:8e:30:35:37:c6:2f:94:b9:20:8b:2f:a5:95:
                    40:ff:d2:a3:90:8e:0d:5c:fb:fa:17:de:35:46:c8:
                    f9:3c:7c:6d:b3:a6:88:ae:dd:1d:70:df:18:a9:4d:
                    f0:1d:c7:14:e3:b5:ec:e2:89:e8:44:43:58:a4:fe:
                    70:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:37:76:0E:19:6F:0F:25:A0:70:F0:DC:07:53:B5:E3:12:44:9D:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/3414f33e-44b0-3a1a-ae8d-db29c1615f13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:c5:01:80:8a:3f:01:1b:31:21:7d:d1:7c:b0:62:52:78:34:
         fb:dd:0f:14:53:3c:96:71:16:6e:ed:f0:a8:6f:2b:27:5b:d3:
         a2:18:10:a4:bf:eb:c5:7a:2d:df:a2:c7:eb:b2:a2:17:f0:08:
         5b:38:2e:f9:5a:86:7b:71:a3:ad:f5:04:17:9e:d4:5b:19:64:
         86:64:38:b7:6f:70:99:e7:3a:b4:d0:a0:c0:71:c5:1f:d4:a6:
         f8:f7:ff:9f:b2:04:e6:8a:b4:07:fa:8f:14:41:64:3d:91:bd:
         46:72:38:9f:ca:b3:f5:66:4b:e7:3a:05:f3:cc:ff:5e:a9:92:
         15:e2:54:2c:65:ac:73:b3:75:2c:31:4c:90:a4:9c:9c:a5:01:
         ec:f3:11:46:6a:e2:b7:48:e4:ba:bb:4d:cb:04:b4:cd:7c:53:
         b8:69:ff:a9:29:b1:1a:06:f8:0f:b2:04:69:4f:b2:f9:1a:b1:
         8e:80:98:78:1b:f9:10:b1:b6:c2:51:8c:86:e3:2d:be:3f:46:
         da:89:41:0a:40:67:a6:9c:84:13:16:f6:a8:0a:ec:e1:1a:0f:
         09:a4:d0:9a:f8:d2:aa:1d:3f:f0:9c:cb:8c:05:8a:cc:18:be:
         19:1b:47:59:12:67:0d:c6:62:be:79:0a:96:cd:e3:9c:13:02:
         43:40:dc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:26:23 2026 by rpki-client