Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a9d12e32-ad63-3f4e-a4f1-e3338057b17e.roa
File:                     a9d12e32-ad63-3f4e-a4f1-e3338057b17e.roa (raw, json)
Hash identifier:          da/5aRnBaHru7wDtpN4AumiJubmGWvlUjCofNDhD5eQ=
Subject key identifier:   91:25:8F:20:BB:36:8B:C5:41:D8:FD:98:9B:68:38:A9:B6:6C:CD:3F
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F4328584CBDB1F73527F1B765439F0E00
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a9d12e32-ad63-3f4e-a4f1-e3338057b17e.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     396982
IP address blocks:        151.193.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:f7:35:27:f1:b7:65:43:9f:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=18cc9f6d-91d3-46b2-889a-4e1c12f49951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:45:dd:4b:ab:b1:ab:71:99:44:f6:65:98:4d:
                    84:fd:15:96:0e:4f:18:38:ed:77:a0:fa:65:3f:c1:
                    16:4c:35:8f:50:0f:39:87:85:21:0e:74:f0:05:9a:
                    14:11:9d:84:a1:d9:89:7c:2e:51:9f:ed:a1:d2:eb:
                    3a:a8:ad:ff:b8:23:a6:93:f9:bc:11:7f:6c:8d:7b:
                    1c:d4:fb:8b:7b:d2:4c:4f:42:5c:57:cf:15:aa:d5:
                    bc:e9:9f:99:d0:e8:f8:3b:38:df:8e:bf:a7:73:d2:
                    9e:a5:68:8c:91:d2:79:9a:2f:5f:c9:e8:64:13:af:
                    1f:3a:22:65:0a:70:ea:92:0f:e2:0a:d3:9f:99:c2:
                    89:40:6d:66:e5:73:18:c3:61:d2:8b:03:67:af:50:
                    bf:06:42:98:ee:ef:5c:bb:51:27:f2:d0:6f:92:88:
                    30:04:16:4e:8e:07:c1:40:6a:1d:c3:39:6b:f5:3d:
                    0c:25:a8:c0:89:07:c7:ae:bd:3b:cc:7d:68:99:09:
                    0e:de:a9:3a:41:71:72:5a:7f:69:97:65:15:7d:e1:
                    9a:4b:ad:35:b8:db:95:03:8d:ec:9c:dd:93:f4:3e:
                    18:72:b4:3c:03:5e:56:01:38:8b:84:1f:b9:b8:ad:
                    3f:a9:34:78:be:81:dd:7f:50:65:fa:4b:ae:5b:d2:
                    e7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:25:8F:20:BB:36:8B:C5:41:D8:FD:98:9B:68:38:A9:B6:6C:CD:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a9d12e32-ad63-3f4e-a4f1-e3338057b17e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:c5:f9:fc:3a:88:69:91:65:35:93:e9:62:c4:4a:9d:b2:8e:
         35:3a:69:54:06:fd:d2:ac:a0:47:ec:42:bd:72:6f:10:85:ff:
         81:f5:81:ba:2d:f0:fe:b1:50:4f:e4:91:ad:a9:79:93:ca:ba:
         cb:7b:4f:bd:76:a9:cf:54:3e:0b:88:10:2c:18:cf:86:1e:ee:
         3a:34:73:ad:ad:a9:ec:4d:62:25:b9:d8:57:96:3b:60:81:ed:
         aa:19:24:2e:41:50:4f:57:30:87:56:6b:8d:b5:e6:33:b4:47:
         b1:6e:51:cf:34:4e:fa:71:f7:c0:52:48:17:20:f7:ee:f9:e7:
         74:2f:f4:ea:73:ec:49:8f:3f:d5:e1:81:5d:a3:c2:b9:5e:af:
         da:e9:89:e0:68:27:c4:60:18:ca:40:d4:84:27:3f:45:82:f4:
         0f:da:78:3a:60:49:65:b8:c7:4c:e6:75:a1:c2:1f:f5:64:e0:
         bc:22:e5:bd:fb:a9:b2:fc:d2:e3:7f:99:23:90:01:d0:e4:1c:
         27:03:88:9d:71:a1:4b:2d:d7:89:2a:c7:7b:60:24:b9:16:95:
         3f:5c:40:ef:78:f8:64:c5:de:cc:64:8c:29:00:38:c0:0f:99:
         93:51:4d:64:2f:b4:e1:8c:35:4d:7a:5d:f9:b5:b0:85:92:04:
         02:d6:10:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:10:08 2026 by rpki-client