Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/374929a2-e018-3b55-b97f-cf3da4f69ff1.roa
File:                     374929a2-e018-3b55-b97f-cf3da4f69ff1.roa (raw, json)
Hash identifier:          40INLrKEvsfYReEMXOwObCuLrOsedWDhILPr8xLnlyM=
Subject key identifier:   C8:15:FA:AC:A0:9A:F6:72:D4:C7:BC:DE:35:F9:21:A4:97:E7:FF:0A
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F4328584F03A7938BD396FA4195582B80
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/374929a2-e018-3b55-b97f-cf3da4f69ff1.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     13945
IP address blocks:        151.193.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:93:8b:d3:96:fa:41:95:58:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=4964a2c5-64ce-4f61-8e14-5ce178a1a0f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b3:4e:71:76:9d:5c:ff:8c:1e:1a:ed:3f:1d:
                    58:06:92:2d:99:fd:ee:4a:80:51:c2:ed:a6:7b:c9:
                    84:df:69:a6:30:9c:7b:e0:3c:05:6a:de:db:29:f0:
                    ea:a4:ad:8b:0e:37:c1:0c:ac:c9:0d:43:3a:06:6a:
                    18:01:77:f6:74:2f:f2:54:b3:0f:1a:a6:9b:0a:5a:
                    da:d1:69:e6:75:3b:bb:14:06:5c:4a:42:c4:c2:9c:
                    2a:b7:f4:5e:8b:ce:f8:52:0b:48:1b:b7:ac:3d:1a:
                    3e:92:75:29:d6:8e:03:51:12:be:1c:e0:bf:3d:f2:
                    7a:49:c8:9c:ca:22:47:1e:8f:27:7a:34:7a:50:ca:
                    df:4f:ec:a5:42:fe:41:46:92:26:5c:b4:ae:5f:a5:
                    e8:08:09:57:c8:2c:c2:e8:56:c9:d0:b0:c9:ba:f4:
                    ff:df:d5:f8:7a:aa:ab:8d:71:97:e1:51:34:82:87:
                    97:86:6e:81:82:5d:a5:42:97:df:b6:ed:f6:aa:aa:
                    d6:d9:82:2c:11:ad:48:81:6f:91:0b:d8:6a:c2:8c:
                    cf:08:61:4a:cf:35:08:c9:32:55:d5:c4:ac:a1:31:
                    b6:91:58:5a:27:16:eb:31:80:99:77:5e:b4:7c:19:
                    e6:ac:a0:8d:3b:2d:93:79:43:54:2a:c3:ce:2d:dc:
                    5d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:15:FA:AC:A0:9A:F6:72:D4:C7:BC:DE:35:F9:21:A4:97:E7:FF:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/374929a2-e018-3b55-b97f-cf3da4f69ff1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:e8:67:01:f9:82:eb:ef:f3:2f:53:3e:cb:16:dd:fc:94:9e:
         40:8d:6d:e7:da:7d:c2:cc:4c:c5:85:1a:ee:23:b9:15:01:b2:
         bc:65:73:5c:6e:de:f2:21:68:70:6c:d4:ce:db:55:ce:b2:22:
         c9:5d:34:f0:34:ea:fb:e6:79:7b:5f:b0:84:ac:e1:4b:da:ee:
         a4:32:03:76:32:cb:4e:5b:6a:9e:75:38:b3:c0:b6:88:76:31:
         a9:56:7f:91:15:b6:5f:c5:d2:0c:b3:b5:07:83:3d:b7:1e:e1:
         17:7e:00:58:10:cb:18:7d:ef:bc:ce:ec:90:7d:e1:45:f7:a3:
         6d:d5:f6:45:bc:32:1c:35:25:98:8b:17:47:c9:c3:b6:02:9b:
         cd:0e:c9:77:3b:f5:0c:2f:b5:ad:9b:1f:9f:5b:c2:d3:1e:aa:
         ae:cd:18:f5:25:91:44:f6:26:84:9e:3c:31:5b:c4:20:d9:39:
         d6:ab:2d:68:fc:e0:bf:f9:76:e7:8f:00:16:35:c9:68:97:e6:
         66:bf:a6:2f:8a:ef:01:b2:3c:e3:43:08:43:44:d8:93:6b:bf:
         8c:b1:06:6e:d1:b3:fb:71:e8:b0:09:eb:b1:35:6c:b4:92:b5:
         0b:49:ad:40:4b:bb:8d:89:d7:75:17:c2:f6:09:9b:d3:1c:dc:
         53:86:32:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp5OL05b6QZVYK4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTIxNTk4MjMtODA2YS00ODc5LTlkZTktN2JlNjM0ZThj
ZDMxMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
NDk2NGEyYzUtNjRjZS00ZjYxLThlMTQtNWNlMTc4YTFhMGYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbNOcXadXP+MHhrtPx1YBpItmf3uSoBRwu2m
e8mE32mmMJx74DwFat7bKfDqpK2LDjfBDKzJDUM6BmoYAXf2dC/yVLMPGqabClra
0WnmdTu7FAZcSkLEwpwqt/Rei874UgtIG7esPRo+knUp1o4DURK+HOC/PfJ6Scic
yiJHHo8nejR6UMrfT+ylQv5BRpImXLSuX6XoCAlXyCzC6FbJ0LDJuvT/39X4eqqr
jXGX4VE0goeXhm6Bgl2lQpfftu32qqrW2YIsEa1IgW+RC9hqwozPCGFKzzUIyTJV
1cSsoTG2kVhaJxbrMYCZd160fBnmrKCNOy2TeUNUKsPOLdxd+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMgV+qygmvZy1Me83jX5IaSX5/8KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hMjE1
OTgyMy04MDZhLTQ4NzktOWRlOS03YmU2MzRlOGNkMzEvMzc0OTI5YTItZTAxOC0z
YjU1LWI5N2YtY2YzZGE0ZjY5ZmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTIxNTk4MjMtODA2YS00ODc5LTlk
ZTktN2JlNjM0ZThjZDMxL2EyMTU5ODIzLTgwNmEtNDg3OS05ZGU5LTdiZTYzNGU4
Y2QzMS5jcmwwHwYDVR0jBBgwFoAUpZGQmoiGHwLfK88I1KSUYP2ExWYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hMjE1OTgyMy04MDZhLTQ4NzktOWRlOS03YmU2
MzRlOGNkMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl8F7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJjoZwH5guvv8y9TPssW3fyUnkCNbefafcLMTMWFGu4juRUBsrxlc1xu
3vIhaHBs1M7bVc6yIsldNPA06vvmeXtfsISs4Uva7qQyA3Yyy05bap51OLPAtoh2
MalWf5EVtl/F0gyztQeDPbce4Rd+AFgQyxh977zO7JB94UX3o23V9kW8Mhw1JZiL
F0fJw7YCm80OyXc79Qwvta2bH59bwtMeqq7NGPUlkUT2JoSePDFbxCDZOdarLWj8
4L/5duePABY1yWiX5ma/pi+K7wGyPONDCENE2JNrv4yxBm7Rs/tx6LAJ67E1bLSS
tQtJrUBLu42J13UXwvYJm9Mc3FOGMto=
-----END CERTIFICATE-----
Generated at Sun Sep 13 12:07:47 2026 by rpki-client