Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/5dd8d1bd-147d-3335-97ec-21d06df88209.roa
File:                     5dd8d1bd-147d-3335-97ec-21d06df88209.roa (raw, json)
Hash identifier:          OwjMdUEO4A3X2hQ6bSOJcv3x9OOUuB0vkiyIdPSe954=
Subject key identifier:   9D:93:77:06:BA:E8:1E:52:A8:9C:4F:29:3A:65:BC:38:EF:5F:0D:A7
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F4328584D9E5015F35FF68FA713270EC0
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/5dd8d1bd-147d-3335-97ec-21d06df88209.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     396982
IP address blocks:        151.193.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:15:f3:5f:f6:8f:a7:13:27:0e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=0f7ec640-064b-4b57-9f46-e199374563cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:40:eb:96:68:ca:a5:8c:3d:62:32:c5:70:07:
                    b7:a4:d9:25:04:1d:b1:af:10:5a:b5:72:99:c4:3a:
                    c3:65:6a:e1:d4:30:98:25:cf:ef:be:9e:0f:59:6e:
                    ad:75:04:9a:83:c9:c3:31:8c:9b:bf:a9:09:8e:8e:
                    41:2b:fd:f7:fd:63:eb:23:2b:aa:6e:bb:6a:a7:b3:
                    b8:43:b4:69:22:e9:78:fe:48:43:b4:d9:bb:cb:81:
                    4e:63:c4:7d:eb:c6:d1:cc:01:d8:6e:bb:5f:6a:34:
                    a0:75:65:8b:34:87:39:91:c6:c4:e3:68:83:19:93:
                    8a:a4:49:2d:ae:8f:33:c0:51:d5:c6:f7:c7:26:03:
                    1f:87:2c:65:43:5f:a0:bb:91:f1:6d:3c:be:bf:16:
                    b5:d3:bf:7e:5c:d2:2c:6a:fc:98:f0:cb:c6:8c:f2:
                    22:da:d4:10:af:9d:6c:a4:90:83:b7:15:63:27:fe:
                    13:9b:f1:6d:12:5b:c4:bf:dc:f4:62:e0:1d:8b:d8:
                    7f:13:a1:21:96:d3:30:35:d7:8d:60:e6:38:7e:1b:
                    15:46:52:c9:d3:5e:c9:f6:77:06:0b:55:c2:87:ff:
                    c4:6d:19:4a:ee:08:84:31:85:1c:d6:38:73:f6:1e:
                    38:df:f0:5e:10:4b:4d:a3:ed:58:85:b3:17:15:99:
                    f2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:93:77:06:BA:E8:1E:52:A8:9C:4F:29:3A:65:BC:38:EF:5F:0D:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/5dd8d1bd-147d-3335-97ec-21d06df88209.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:8c:1f:5b:9a:40:4c:a6:ce:bf:34:07:68:b5:39:e5:8b:51:
         02:7b:68:04:4d:ea:b9:e2:1a:57:96:39:88:7d:69:36:21:80:
         12:52:13:af:8e:9e:a9:18:8a:74:3b:1f:c9:fa:bb:e6:a8:b1:
         ee:5d:aa:df:be:d2:dd:31:5a:5f:3f:2f:5e:b2:6e:dd:71:79:
         fc:7b:e7:32:3c:36:fd:92:d0:8a:f7:32:93:0e:53:65:48:d2:
         5f:e6:67:09:30:0c:a4:03:82:15:94:4b:52:9a:87:cc:c6:3d:
         32:07:65:0a:88:56:73:00:f9:d1:33:f0:e8:8b:74:8e:2c:6a:
         ab:0d:0b:b5:15:c7:18:a1:dd:12:43:bd:f2:8f:80:1e:bb:f4:
         08:5b:c3:84:d7:29:6f:5d:76:08:d7:1a:12:98:21:bf:fe:2f:
         d8:2e:54:ea:15:25:d5:ef:2b:25:5b:49:a4:e4:a9:c3:85:66:
         d6:59:54:0d:aa:fa:c7:49:1d:7a:2c:c2:69:7b:47:d5:ef:2b:
         a9:69:c4:09:67:5a:d3:ec:e0:7d:18:42:0b:35:91:8b:9e:3f:
         15:6f:09:6f:fc:85:d0:c4:e4:1d:4b:01:6c:4c:9a:53:32:90:
         86:94:b6:df:db:49:4e:8e:dd:72:f6:31:dd:81:5f:15:69:87:
         04:9e:6a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:26:22 2026 by rpki-client