Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/374929a2-e018-3b55-b97f-cf3da4f69ff1.roa
File:                     374929a2-e018-3b55-b97f-cf3da4f69ff1.roa (raw, json)
Hash identifier:          wRgUH3Xp8TlacEPbkUhGPfBvQeOisppdHniD1Z0tTcM=
Subject key identifier:   7E:A4:F9:3B:06:38:6B:2F:2C:2E:BC:FA:17:CB:EB:C6:D4:42:9B:32
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F4328584FA593456B4B10736C82472800
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/374929a2-e018-3b55-b97f-cf3da4f69ff1.roa
Signing time:             Wed 28 Oct 2026 01:00:13 +0000
ROA not before:           Wed 28 Oct 2026 01:00:13 +0000
ROA not after:            Tue 26 Jan 2027 02:00:13 +0000
asID:                     13945
IP address blocks:        151.193.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a5:93:45:6b:4b:10:73:6c:82:47:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: Oct 28 01:00:13 2026 GMT
            Not After : Jan 26 02:00:13 2027 GMT
        Subject: CN=736c75d3-ea91-42f4-b473-b732fa90c576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bc:48:9d:83:b5:09:b7:85:00:98:dd:00:43:
                    3a:85:bd:86:9f:1b:ff:f8:35:90:57:21:5f:29:9f:
                    5c:0f:50:46:a7:e7:fc:32:14:21:ed:04:e5:a9:e6:
                    8d:eb:86:1c:ec:6a:d1:74:b3:2f:85:bc:d0:7c:20:
                    06:d8:51:75:20:c4:a4:fe:2d:68:d7:74:16:22:ed:
                    71:02:c0:c9:69:b2:06:89:08:7c:15:46:ea:9e:7c:
                    31:4d:0c:df:fc:e2:ea:ce:87:cd:35:cf:57:3a:e5:
                    7e:55:4d:01:65:55:59:25:1b:c3:c7:b2:b6:1e:b9:
                    93:19:e5:4f:68:f4:3c:00:14:b6:7d:19:fd:e5:e0:
                    c1:b6:3b:56:04:c8:80:76:b9:f2:51:9f:43:d2:d2:
                    0f:6e:31:f2:59:10:71:b8:4c:67:73:7a:e5:d7:89:
                    8c:f3:d5:c9:14:f1:21:c7:dc:8b:d1:94:58:2a:cf:
                    cc:ca:33:80:0c:5a:86:c6:47:c4:8b:1f:ba:f8:70:
                    9d:80:bb:c0:97:bf:d1:59:d0:05:86:bf:40:46:65:
                    82:bb:a1:1f:b9:06:ca:17:25:37:45:2e:d0:17:58:
                    b9:6d:10:22:df:8c:01:6f:73:90:bb:34:54:b5:f8:
                    f6:2f:f0:17:0b:f7:4d:b5:e0:1c:5d:b1:8b:83:f0:
                    27:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A4:F9:3B:06:38:6B:2F:2C:2E:BC:FA:17:CB:EB:C6:D4:42:9B:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/374929a2-e018-3b55-b97f-cf3da4f69ff1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:f3:ce:0e:ee:89:e8:d0:5c:aa:21:00:da:b1:d9:54:94:f2:
         05:3b:c5:53:60:85:f0:37:d7:b6:e0:c6:0b:fc:c9:3b:a7:aa:
         85:3a:5f:a4:b3:2f:61:d5:98:de:26:cf:a0:a8:d9:dc:26:e2:
         a3:f7:f0:a1:eb:57:af:44:50:50:e1:af:21:5b:a2:a2:04:fa:
         d7:fa:19:1a:7c:56:f6:a1:f6:d0:b2:f5:60:e2:08:97:ae:2e:
         4a:f8:28:07:af:6b:4e:d0:74:fd:34:70:d3:33:5d:b3:df:2c:
         b2:21:2a:84:ac:51:5a:ba:62:57:ec:fe:23:27:1b:79:32:48:
         99:86:f5:29:64:b1:0c:e7:4b:20:8e:de:0e:d8:fa:3c:5f:c9:
         dd:c3:7c:79:6a:b9:46:42:f5:8e:5b:8b:e9:44:38:74:1b:ca:
         d0:d2:8b:e6:37:bb:c4:ab:72:58:f5:70:4c:df:94:a4:2d:8b:
         b3:d8:ad:0f:01:68:7b:f9:40:ef:c5:9b:de:38:05:19:6f:4d:
         ab:42:ae:e8:9a:18:2d:96:d1:46:72:fd:27:ac:c3:bc:f0:6a:
         98:27:bf:45:23:ef:51:9c:3b:8e:20:99:ec:76:11:11:c4:3a:
         a6:07:a5:da:a9:f8:23:a1:b2:81:2c:b3:5e:b6:c4:bb:37:17:
         97:cf:cd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 09:44:25 2026 by rpki-client