Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/61399656-528a-3a15-a9da-47ac340fb72d.roa
File:                     61399656-528a-3a15-a9da-47ac340fb72d.roa (raw, json)
Hash identifier:          IhHFxtrdfGbpcaMq6wVoHMYAdLb8MLabFmdUjsHP4no=
Subject key identifier:   EF:45:0E:C7:52:A6:E5:44:5E:FF:71:9E:36:AD:94:3C:74:89:21:9B
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F4328584FA59345CBC90FD4275EDD7A80
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/61399656-528a-3a15-a9da-47ac340fb72d.roa
Signing time:             Wed 28 Oct 2026 01:00:13 +0000
ROA not before:           Wed 28 Oct 2026 01:00:13 +0000
ROA not after:            Tue 26 Jan 2027 02:00:13 +0000
asID:                     6334
IP address blocks:        151.193.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a5:93:45:cb:c9:0f:d4:27:5e:dd:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: Oct 28 01:00:13 2026 GMT
            Not After : Jan 26 02:00:13 2027 GMT
        Subject: CN=a6e4880e-c977-4227-a131-03e2fbaee0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ce:68:19:b3:6e:0f:af:ec:62:1b:e7:9d:14:
                    b1:3b:17:52:ee:38:3b:ed:18:62:a2:7a:8c:5a:75:
                    99:60:67:bc:20:20:cf:bd:ee:a5:aa:20:34:50:10:
                    e8:05:91:fa:52:49:0a:e1:52:b5:d4:7f:cb:ae:cd:
                    5e:55:74:17:e3:08:aa:de:40:6e:a4:5f:fa:82:d3:
                    84:90:e6:58:60:24:e2:9f:17:b1:c7:3b:94:85:0c:
                    31:6b:ed:41:05:e7:b8:87:41:6b:f9:c1:1c:ba:2d:
                    b7:38:e8:81:97:1c:71:91:e7:29:7a:8b:0c:b3:23:
                    69:79:a2:69:74:cc:4f:be:e2:7d:94:e3:5e:97:bc:
                    fd:00:e1:05:2f:c7:38:e2:df:71:35:ab:ea:9a:9c:
                    fa:74:4d:aa:ff:63:d7:71:94:53:74:9e:a7:6e:70:
                    fe:f6:d5:be:a4:a3:bc:27:5d:b9:41:e4:d6:3c:14:
                    91:7c:74:b6:ef:53:b4:ce:cf:1f:ef:36:0d:e9:82:
                    74:2b:00:d0:d6:61:04:44:5a:48:a4:af:6c:ca:80:
                    7c:67:cc:e1:dd:6f:a5:6b:55:93:eb:09:6b:ee:6c:
                    bf:2e:db:e8:47:62:82:4b:41:89:92:10:93:e0:84:
                    04:97:80:1b:bd:1b:5b:6c:aa:54:8b:0a:62:55:d8:
                    74:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:45:0E:C7:52:A6:E5:44:5E:FF:71:9E:36:AD:94:3C:74:89:21:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/61399656-528a-3a15-a9da-47ac340fb72d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:b3:bd:b9:91:07:ea:48:6d:78:fc:d1:13:74:95:2c:e0:1b:
         32:58:76:61:de:8c:43:73:60:f4:9d:4a:e4:9b:04:a8:55:40:
         1c:f9:fa:40:04:0d:2b:44:52:e5:45:db:28:18:20:f1:0e:30:
         9a:e5:05:11:d7:f8:72:2d:93:13:1a:74:52:6d:a5:76:4f:66:
         16:f8:c3:a6:43:aa:fe:7f:3d:46:57:eb:e6:3b:8d:a1:48:bb:
         37:fc:a2:b0:5f:6e:2f:0e:d6:7a:c4:75:4e:20:4f:03:93:59:
         91:e4:2f:ab:96:c1:f2:d9:01:d8:7f:95:15:84:bc:21:76:31:
         50:44:8b:7f:cd:00:8b:e8:18:32:d9:7f:b5:f9:c7:3a:09:6b:
         aa:b4:4e:97:ed:60:bd:3e:e3:b6:2a:cf:bc:56:85:e0:6f:39:
         97:97:5a:51:ab:a2:54:41:b5:7a:ce:d7:17:31:36:41:49:d7:
         92:b2:4b:3a:55:1f:e1:c8:0d:c4:26:f3:c5:0e:ed:a2:2a:b1:
         6c:01:b9:91:58:bb:25:1e:90:38:08:bd:89:5f:d0:d2:0b:09:
         ab:aa:15:e5:4e:00:c3:c2:a7:fd:5e:45:6f:76:14:9b:72:02:
         68:39:13:6d:44:b3:f2:5b:e8:08:8c:83:ed:97:7f:3b:7b:10:
         fe:0b:dc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 08:02:52 2026 by rpki-client