Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/3414f33e-44b0-3a1a-ae8d-db29c1615f13.roa
File:                     3414f33e-44b0-3a1a-ae8d-db29c1615f13.roa (raw, json)
Hash identifier:          hfZv98PbuyCfp5lD90v/0F60yRR0y8rqMGeATBll2w4=
Subject key identifier:   AB:EC:7B:D0:55:AE:7F:D5:06:48:4E:FA:13:37:CB:02:F3:56:64:AF
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F4328584A1B6005577815862E1CBD2F20
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/3414f33e-44b0-3a1a-ae8d-db29c1615f13.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     396982
IP address blocks:        151.193.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:60:05:57:78:15:86:2e:1c:bd:2f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=3bf9a863-4189-48e3-a8df-ed72414b6ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:97:01:ec:8b:5e:ae:be:48:55:16:52:f3:2c:
                    e1:7c:4e:e1:2d:81:2c:ec:24:6d:10:2c:dc:0f:54:
                    3d:e2:e6:f8:d4:d1:e0:da:7b:b5:20:94:f7:b1:a3:
                    20:da:05:f6:a0:10:8d:3e:77:6d:1c:e7:63:ae:5c:
                    2b:24:1b:92:5b:9f:62:ff:fe:79:b6:20:6c:71:a6:
                    b3:36:4e:a5:64:bb:89:50:8b:be:c5:69:cb:7a:34:
                    5a:d2:e6:2f:01:e5:5a:c9:73:82:8b:55:2b:0e:e7:
                    b1:f6:10:94:3c:c7:3e:4f:f3:51:ce:1b:a7:4f:bf:
                    04:61:70:24:40:4a:21:36:62:6d:ad:ba:38:c7:76:
                    25:86:6a:0e:dd:cb:68:f7:e1:37:26:84:9b:ba:83:
                    be:5a:a9:89:61:9e:92:3a:d5:34:a4:13:9d:5b:bc:
                    bf:45:f5:8d:08:f7:ec:8d:ce:03:13:e4:ea:54:8d:
                    64:d5:0d:63:e1:24:8c:d4:ad:ad:03:f2:9f:85:b1:
                    11:11:c2:be:d6:93:28:be:3f:86:05:9f:d6:51:f1:
                    b7:77:79:2b:85:ea:e7:ba:1b:a7:26:81:c7:06:08:
                    8b:9e:c9:51:7c:f9:b4:d7:fb:a4:7f:3d:3a:19:6c:
                    c4:27:ce:4f:6b:40:8f:4d:9a:32:e9:62:23:53:4f:
                    72:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:EC:7B:D0:55:AE:7F:D5:06:48:4E:FA:13:37:CB:02:F3:56:64:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/3414f33e-44b0-3a1a-ae8d-db29c1615f13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:42:e0:8e:22:d1:62:c2:f9:09:99:48:5d:9c:e9:05:a3:4f:
         d2:73:37:80:53:6f:1f:a9:3d:69:51:12:7c:94:03:b7:8b:7e:
         6c:3b:03:aa:45:c4:6b:4d:c0:5e:4b:16:81:11:31:5a:2a:c0:
         2c:a1:89:fd:bf:ed:34:b1:0f:4d:2a:57:c9:13:72:30:5c:23:
         ff:4b:08:b7:63:a3:a1:09:9b:3b:19:95:68:dd:ea:4f:50:21:
         77:2b:59:57:a0:38:5d:83:db:36:ee:5a:1d:f7:df:d3:c6:06:
         98:c8:56:26:75:8a:2c:97:3a:4c:a2:a1:2f:e3:3e:60:84:30:
         77:ef:7a:ce:53:42:c6:d5:9d:cf:32:8a:ff:a2:e4:fd:77:45:
         a1:bc:98:07:86:a2:49:d4:19:49:c2:7a:7e:ca:ee:63:81:21:
         d6:2f:3c:f6:d5:67:19:f6:fa:93:8f:f7:3b:b0:d7:a6:20:4e:
         c6:4b:b5:52:0d:69:74:a5:84:1f:68:6e:38:32:1b:79:79:ff:
         32:e7:a0:6d:11:1e:b0:1f:aa:d0:fa:fd:a2:ce:c2:6d:61:df:
         69:ae:50:8c:83:62:92:97:6f:25:65:25:89:01:5a:14:b6:79:
         2f:c8:8d:07:73:e0:2c:50:15:32:f7:ef:c2:92:b7:08:53:5d:
         8b:48:5a:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYAVXeBWGLhy9LyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTIxNTk4MjMtODA2YS00ODc5LTlkZTktN2JlNjM0ZThj
ZDMxMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk
M2JmOWE4NjMtNDE4OS00OGUzLWE4ZGYtZWQ3MjQxNGI2ZWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJcB7Iterr5IVRZS8yzhfE7hLYEs7CRtECzc
D1Q94ub41NHg2nu1IJT3saMg2gX2oBCNPndtHOdjrlwrJBuSW59i//55tiBscaaz
Nk6lZLuJUIu+xWnLejRa0uYvAeVayXOCi1UrDuex9hCUPMc+T/NRzhunT78EYXAk
QEohNmJtrbo4x3YlhmoO3cto9+E3JoSbuoO+WqmJYZ6SOtU0pBOdW7y/RfWNCPfs
jc4DE+TqVI1k1Q1j4SSM1K2tA/KfhbEREcK+1pMovj+GBZ/WUfG3d3krhernuhun
JoHHBgiLnslRfPm01/ukfz06GWzEJ85Pa0CPTZoy6WIjU09yGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKvse9BVrn/VBkhO+hM3ywLzVmSvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hMjE1
OTgyMy04MDZhLTQ4NzktOWRlOS03YmU2MzRlOGNkMzEvMzQxNGYzM2UtNDRiMC0z
YTFhLWFlOGQtZGIyOWMxNjE1ZjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTIxNTk4MjMtODA2YS00ODc5LTlk
ZTktN2JlNjM0ZThjZDMxL2EyMTU5ODIzLTgwNmEtNDg3OS05ZGU5LTdiZTYzNGU4
Y2QzMS5jcmwwHwYDVR0jBBgwFoAUpZGQmoiGHwLfK88I1KSUYP2ExWYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hMjE1OTgyMy04MDZhLTQ4NzktOWRlOS03YmU2
MzRlOGNkMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl8FuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABRC4I4i0WLC+QmZSF2c6QWjT9JzN4BTbx+pPWlREnyUA7eLfmw7A6pF
xGtNwF5LFoERMVoqwCyhif2/7TSxD00qV8kTcjBcI/9LCLdjo6EJmzsZlWjd6k9Q
IXcrWVegOF2D2zbuWh3339PGBpjIViZ1iiyXOkyioS/jPmCEMHfves5TQsbVnc8y
iv+i5P13RaG8mAeGoknUGUnCen7K7mOBIdYvPPbVZxn2+pOP9zuw16YgTsZLtVIN
aXSlhB9objgyG3l5/zLnoG0RHrAfqtD6/aLOwm1h32muUIyDYpKXbyVlJYkBWhS2
eS/IjQdz4CxQFTL378KStwhTXYtIWgw=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:24:54 2025 by rpki-client