Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a9d12e32-ad63-3f4e-a4f1-e3338057b17e.roa
File:                     a9d12e32-ad63-3f4e-a4f1-e3338057b17e.roa (raw, json)
Hash identifier:          7v9Bh8a6P1JwzToBwPcfSuxs3dOkX+UyMLA6rcXsKiY=
Subject key identifier:   B4:84:1A:D0:9B:C7:2F:90:EC:D3:2B:BF:4E:A3:27:3E:49:5F:23:EB
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F4328584F20F7BC0DA0E87F7ABE5B8400
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a9d12e32-ad63-3f4e-a4f1-e3338057b17e.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     396982
IP address blocks:        151.193.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:bc:0d:a0:e8:7f:7a:be:5b:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=4c14c313-fe2a-4684-ba20-1ccdb5e298af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:01:97:8c:ae:5c:d1:d8:52:6e:ef:0b:e2:1c:
                    e8:29:2e:59:b1:64:17:c5:93:dd:2b:ac:a8:79:ab:
                    d2:42:a6:fb:ea:f1:43:0a:46:c0:60:e9:73:d9:4b:
                    f9:ab:f7:61:f0:45:6d:e6:9c:0b:88:c9:ce:ac:0e:
                    66:76:20:7d:3e:0f:81:d6:bc:e9:37:41:a5:5d:b7:
                    7b:3a:0c:4f:d0:0c:a8:70:e8:b1:dd:3d:33:31:bd:
                    76:04:ef:85:b1:af:9d:16:fe:85:02:11:ca:08:dd:
                    79:59:67:4a:3a:fc:fc:b3:8c:c8:fa:86:a0:a0:61:
                    97:5d:df:54:d6:e1:2b:ce:8b:ab:f9:93:3a:7e:7f:
                    45:fa:27:2e:85:c1:53:26:b7:f3:e7:ee:35:3f:48:
                    eb:85:4a:ce:22:cf:e4:13:c5:4a:01:d8:6f:fe:78:
                    59:5e:f5:3c:b7:fb:68:70:90:20:e7:f7:d5:2e:99:
                    8e:1f:c0:19:84:34:6a:40:cf:2f:da:ce:67:08:df:
                    64:91:3e:20:e0:99:53:c7:0a:ea:d3:b8:ad:59:e4:
                    c2:b9:eb:08:1a:47:91:f0:0e:3c:0d:65:9f:61:40:
                    35:cb:e6:18:10:1f:90:a1:04:79:89:09:0b:3b:c4:
                    8a:5e:4f:9a:88:0f:42:4f:56:d7:3a:2d:15:12:be:
                    67:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:84:1A:D0:9B:C7:2F:90:EC:D3:2B:BF:4E:A3:27:3E:49:5F:23:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a9d12e32-ad63-3f4e-a4f1-e3338057b17e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:9b:ed:0c:8e:51:0d:84:35:f0:3a:a9:b7:6d:03:4a:7e:79:
         5f:15:95:49:9a:71:0f:7b:6c:a3:8e:f0:70:0b:9b:cc:94:34:
         74:8b:85:2b:46:18:fb:5f:ba:7d:4d:3c:11:fc:bd:14:75:25:
         a5:c0:3f:cb:e1:d4:29:73:31:91:ff:9c:be:4e:ac:5a:44:77:
         81:51:88:6d:23:4c:46:cd:dc:41:cb:6a:bd:3b:ad:ca:cd:94:
         9d:1a:c4:cb:a1:ec:1a:3d:d6:4d:10:aa:a3:84:95:f2:2e:40:
         3d:5c:c6:bc:9d:d4:84:ad:a5:7d:cb:39:60:32:b2:c7:51:50:
         8b:fd:a2:fd:21:05:83:cc:6c:e1:1a:d6:6c:5a:c7:a6:16:dd:
         19:d5:7e:49:60:7b:f7:62:7f:4b:31:6e:32:e2:ab:6f:50:b2:
         88:e8:7d:5d:ec:2a:4f:b0:3d:9f:45:98:b2:4c:4d:f0:81:3f:
         d7:4e:d2:30:87:1a:ab:3d:aa:d2:a0:94:43:f5:ff:c2:98:bc:
         9b:f1:08:4a:fb:0f:88:d2:18:b3:cf:8f:c1:a5:7b:cd:c2:0d:
         9c:b3:a1:bc:1f:47:79:8b:50:46:68:f9:d2:0f:43:b2:74:20:
         42:54:ae:27:28:50:ec:77:12:70:3a:3e:f0:7b:98:fc:f4:de:
         7d:40:b2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 11:10:57 2026 by rpki-client