Route Origin Authorization

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/3/32332e3135312e3133322e302f32342d3234203d3e2037303130.roa
File:                     32332e3135312e3133322e302f32342d3234203d3e2037303130.roa (raw, json)
Hash identifier:          tctQKM2NsEf1NWEg9XqqGOTDGObWKmiIUoceijkBKhI=
Subject key identifier:   6A:B0:07:AA:2C:B4:BB:DD:1E:28:0B:B8:D6:71:AD:F2:6E:50:40:0A
Certificate issuer:       /CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
Certificate serial:       32BC947ED23FA7D8B38CB1272C8DD2458B4E8CD8
Authority key identifier: DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/3/32332e3135312e3133322e302f32342d3234203d3e2037303130.roa
Signing time:             Fri 26 Jun 2026 21:04:33 +0000
ROA not before:           Fri 26 Jun 2026 20:59:33 +0000
ROA not after:            Fri 25 Jun 2027 21:04:33 +0000
asID:                     7010
IP address blocks:        23.151.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl
                          rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Jul 2026 19:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:bc:94:7e:d2:3f:a7:d8:b3:8c:b1:27:2c:8d:d2:45:8b:4e:8c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
        Validity
            Not Before: Jun 26 20:59:33 2026 GMT
            Not After : Jun 25 21:04:33 2027 GMT
        Subject: CN=6AB007AA2CB4BBDD1E280BB8D671ADF26E50400A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f6:51:e2:08:fd:25:e4:c6:fd:54:ec:e9:a4:
                    3f:db:26:bd:35:e6:43:26:64:b7:db:97:97:e9:26:
                    f4:b8:40:9a:63:78:4b:53:f6:7e:2b:21:dc:ea:48:
                    a9:76:f1:4d:3e:91:bf:09:74:15:69:f9:af:68:f1:
                    19:93:36:33:31:62:32:c7:28:68:2e:32:d5:cd:e7:
                    3e:6b:76:4c:e9:c1:aa:dc:df:0d:5f:36:f7:92:79:
                    e3:27:e4:36:fd:45:6e:51:8f:c4:1f:c5:2c:2c:01:
                    7b:b1:0d:2f:d3:79:a7:1c:23:d2:b1:ba:f3:b7:a9:
                    cd:6a:27:2d:06:04:ae:62:ae:b7:3c:71:f9:c7:07:
                    f1:63:3b:35:d7:e4:ea:51:e8:87:26:e7:e0:24:54:
                    25:36:22:eb:41:ca:9d:77:5f:b0:2c:92:ee:5d:e3:
                    30:de:46:35:c8:82:23:55:2e:db:03:5b:b9:27:46:
                    94:ca:a0:b5:77:62:7a:93:d8:ec:52:3a:eb:53:a0:
                    99:7d:7e:4a:c9:20:f4:23:8d:52:c3:83:44:ee:88:
                    7b:97:4a:1b:15:fb:14:d8:d4:9d:a7:aa:bc:17:5b:
                    58:36:52:05:47:99:35:44:bc:bc:70:88:65:ba:18:
                    bd:af:64:6e:1b:34:ba:ff:5a:a0:8d:f2:76:87:ed:
                    b5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B0:07:AA:2C:B4:BB:DD:1E:28:0B:B8:D6:71:AD:F2:6E:50:40:0A
            X509v3 Authority Key Identifier:
                keyid:DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/3/32332e3135312e3133322e302f32342d3234203d3e2037303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:d9:4f:f2:30:02:6a:57:79:fb:c2:fa:0b:c0:68:64:2e:db:
         47:3c:c3:00:51:c8:ac:b0:a3:e9:62:5e:6c:83:e7:65:05:11:
         dc:05:92:c6:10:6a:53:6f:82:45:bb:02:e7:aa:1f:0d:b7:3e:
         05:44:d9:6a:0f:9e:40:5d:31:30:3b:65:3e:82:6f:8f:0a:8c:
         20:f7:ce:83:96:2b:09:25:a7:7e:55:54:70:fd:ef:ff:96:22:
         0e:36:92:53:63:e0:d8:72:96:e3:89:28:20:cb:6e:4e:4b:21:
         a4:f0:d6:55:80:c0:ba:f5:01:df:50:6d:22:f8:4d:27:9d:4e:
         71:55:ab:a8:a8:72:76:48:60:68:b9:41:95:9e:bb:f0:e2:bc:
         7d:f0:9f:4f:d0:6e:3f:c2:18:56:fe:35:80:a5:e4:0d:b7:56:
         6e:ca:67:a1:f0:7c:41:4a:f8:bb:30:b3:5b:44:3a:77:dc:20:
         0a:2e:4f:90:36:9c:32:bc:95:5d:e9:4a:61:2f:ef:66:e5:ff:
         55:23:d9:20:92:07:1c:10:74:46:b3:e6:35:7d:54:dd:43:0a:
         d9:ff:49:58:d7:11:81:ac:a9:b5:09:4d:cc:79:af:9f:bb:7a:
         9b:f0:62:ce:14:55:ea:76:22:0b:3f:0c:77:59:6d:fc:da:73:
         23:e7:db:04
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUMryUftI/p9izjLEnLI3SRYtOjNgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2Y5YzA1NDIwYjU1YzNlZGU3MDM1MjFkMTRkODEzNzU4
ODk4MDQyMjYwZjA3OGIyNGQwHhcNMjYwNjI2MjA1OTMzWhcNMjcwNjI1MjEwNDMz
WjAzMTEwLwYDVQQDEyg2QUIwMDdBQTJDQjRCQkREMUUyODBCQjhENjcxQURGMjZF
NTA0MDBBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPZR4gj9JeTG
/VTs6aQ/2ya9NeZDJmS325eX6Sb0uECaY3hLU/Z+KyHc6kipdvFNPpG/CXQVafmv
aPEZkzYzMWIyxyhoLjLVzec+a3ZM6cGq3N8NXzb3knnjJ+Q2/UVuUY/EH8UsLAF7
sQ0v03mnHCPSsbrzt6nNaictBgSuYq63PHH5xwfxYzs11+TqUeiHJufgJFQlNiLr
Qcqdd1+wLJLuXeMw3kY1yIIjVS7bA1u5J0aUyqC1d2J6k9jsUjrrU6CZfX5KySD0
I41Sw4NE7oh7l0obFfsU2NSdp6q8F1tYNlIFR5k1RLy8cIhluhi9r2RuGzS6/1qg
jfJ2h+21kwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFGqwB6ostLvdHigLuNZxrfJu
UEAKMB8GA1UdIwQYMBaAFN0XW9T7fx3CNtsTzStCpkWQr+xcMA4GA1UdDwEB/wQE
AwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kubmVsbGljdXMubmV0
L3JlcG8vbmVsbGljdXMvMy9ERDE3NUJENEZCN0YxREMyMzZEQjEzQ0QyQjQyQTY0
NTkwQUZFQzVDLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT
cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl
NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0zN2E3
LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjBlM2UzMzItMmUxMy00N2I3LWJlM2Mt
YmQyZjQwZGI2ODY0LzdmOWMwNTQyMGI1NWMzZWRlNzAzNTIxZDE0ZDgxMzc1ODg5
ODA0MjI2MGYwNzhiMjRkLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuG
YnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8zLzMyMzMy
ZTMxMzUzMTJlMzEzMzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzczMDMxMzAu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAAXl4QwDQYJKoZIhvcNAQELBQADggEBAILZT/IwAmpXefvC+gvA
aGQu20c8wwBRyKywo+liXmyD52UFEdwFksYQalNvgkW7AueqHw23PgVE2WoPnkBd
MTA7ZT6Cb48KjCD3zoOWKwklp35VVHD97/+WIg42klNj4NhyluOJKCDLbk5LIaTw
1lWAwLr1Ad9QbSL4TSedTnFVq6iocnZIYGi5QZWeu/DivH3wn0/Qbj/CGFb+NYCl
5A23Vm7KZ6HwfEFK+Lsws1tEOnfcIAouT5A2nDK8lV3pSmEv72bl/1Uj2SCSBxwQ
dEaz5jV9VN1DCtn/SVjXEYGsqbUJTcx5r5+7epvwYs4UVep2Igs/DHdZbfzacyPn
2wQ=
-----END CERTIFICATE-----
Generated at Mon Jul 13 02:44:43 2026 by rpki-client