Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/aca04b99-1ad5-3d84-9d5e-cbc6b0ff365c.roa
File:                     aca04b99-1ad5-3d84-9d5e-cbc6b0ff365c.roa (raw, json)
Hash identifier:          Mv9gm+p6MOD/khiqIoiQHck4gZqHzV7jkAMmo6U6NQU=
Subject key identifier:   77:4A:A0:AD:18:E2:6C:B8:CD:89:D1:A1:28:96:06:70:3C:00:46:B8
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F4328584CBDB1FA02DF38DF43719864C0
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/aca04b99-1ad5-3d84-9d5e-cbc6b0ff365c.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     396982
IP address blocks:        151.193.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:fa:02:df:38:df:43:71:98:64:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=6a68aff5-0bb1-450a-b318-f64e1ec605bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:83:5c:03:65:99:81:d4:f8:2b:b5:5c:5e:40:
                    37:0f:e8:4d:e9:ce:c1:6c:7b:98:5b:d6:62:30:f9:
                    e2:bf:22:4b:db:19:a9:72:ea:a1:1c:6a:36:44:c3:
                    13:b7:0f:09:60:a6:28:43:99:c1:41:46:46:a8:42:
                    9e:4b:7c:23:89:c4:f9:fe:de:f0:df:5f:65:bc:fb:
                    ed:17:02:2e:3f:93:7f:4b:13:c9:aa:30:9c:9c:6a:
                    47:ec:cb:09:9e:c4:68:7f:b0:53:11:e4:00:d3:38:
                    72:39:4f:7d:56:d3:78:d4:d0:09:57:c2:91:60:a4:
                    b6:eb:ed:a9:7a:f4:69:ad:27:ff:b7:d8:96:cc:ad:
                    8c:cf:04:57:80:c9:7b:34:2e:53:a9:43:5b:eb:6a:
                    24:1f:b7:9a:74:35:c4:6e:f5:c7:71:04:89:1f:30:
                    3b:1b:d5:48:b1:5a:a7:a9:9c:5f:d8:45:97:48:d5:
                    a0:7d:ef:fc:48:03:4d:00:9a:48:31:6d:9d:ba:b8:
                    cd:63:da:4a:bf:33:81:6b:64:ff:f2:3a:50:42:59:
                    9e:23:78:ad:97:e6:f4:ce:c2:51:3c:f6:9e:cd:8d:
                    fd:df:cd:26:c7:6b:21:49:e7:12:31:51:2c:f6:ac:
                    6a:7c:b5:e5:75:10:f1:b5:b2:cd:5d:07:0a:41:c0:
                    b2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4A:A0:AD:18:E2:6C:B8:CD:89:D1:A1:28:96:06:70:3C:00:46:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/aca04b99-1ad5-3d84-9d5e-cbc6b0ff365c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:a0:d5:32:6b:44:d3:c3:b3:bb:cc:e3:0d:cf:f0:31:ae:a6:
         46:48:98:02:1a:04:44:a3:51:cf:72:0b:85:2d:04:de:05:20:
         d1:56:95:29:03:c6:9a:a5:cd:b9:f9:0d:bd:e8:44:a9:96:dd:
         19:97:4e:b6:2a:2f:c8:0a:2b:8b:0f:64:cc:6b:48:eb:50:31:
         f3:c7:0c:25:08:2a:94:91:61:cb:2e:ed:dc:aa:57:1b:96:8d:
         34:d0:bf:4e:a2:e2:bf:06:07:5b:f1:f0:e3:fb:78:1f:32:8b:
         02:94:25:3e:72:6d:3d:46:24:88:0e:af:d9:77:6b:c3:ab:1d:
         e6:69:c2:00:15:da:0c:4d:fb:8b:7b:0d:94:17:cf:6a:ff:8f:
         09:63:f7:af:45:75:4c:5a:57:9f:b8:6c:6a:9c:1b:7b:8f:30:
         64:97:70:b9:17:fc:14:8b:55:f0:cf:4a:cd:a1:49:51:13:ba:
         59:77:f6:b6:7d:66:a7:88:6c:4b:6f:f8:de:4e:6e:d9:e7:cf:
         80:cd:21:b1:4e:1a:28:1f:ef:8c:30:d9:e0:28:43:55:37:b1:
         95:69:bb:c2:69:a8:36:bd:f4:1a:9a:76:e9:6b:d0:35:06:5b:
         d1:b9:c4:07:f7:06:68:f9:f7:a4:4b:4e:31:9c:60:61:be:ae:
         23:ed:0c:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9sfoC3zjfQ3GYZMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTIxNTk4MjMtODA2YS00ODc5LTlkZTktN2JlNjM0ZThj
ZDMxMB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk
NmE2OGFmZjUtMGJiMS00NTBhLWIzMTgtZjY0ZTFlYzYwNWJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oNcA2WZgdT4K7VcXkA3D+hN6c7BbHuYW9Zi
MPnivyJL2xmpcuqhHGo2RMMTtw8JYKYoQ5nBQUZGqEKeS3wjicT5/t7w319lvPvt
FwIuP5N/SxPJqjCcnGpH7MsJnsRof7BTEeQA0zhyOU99VtN41NAJV8KRYKS26+2p
evRprSf/t9iWzK2MzwRXgMl7NC5TqUNb62okH7eadDXEbvXHcQSJHzA7G9VIsVqn
qZxf2EWXSNWgfe/8SANNAJpIMW2durjNY9pKvzOBa2T/8jpQQlmeI3itl+b0zsJR
PPaezY39380mx2shSecSMVEs9qxqfLXldRDxtbLNXQcKQcCyXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHdKoK0Y4my4zYnRoSiWBnA8AEa4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hMjE1
OTgyMy04MDZhLTQ4NzktOWRlOS03YmU2MzRlOGNkMzEvYWNhMDRiOTktMWFkNS0z
ZDg0LTlkNWUtY2JjNmIwZmYzNjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTIxNTk4MjMtODA2YS00ODc5LTlk
ZTktN2JlNjM0ZThjZDMxL2EyMTU5ODIzLTgwNmEtNDg3OS05ZGU5LTdiZTYzNGU4
Y2QzMS5jcmwwHwYDVR0jBBgwFoAUpZGQmoiGHwLfK88I1KSUYP2ExWYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hMjE1OTgyMy04MDZhLTQ4NzktOWRlOS03YmU2
MzRlOGNkMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl8GgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACKg1TJrRNPDs7vM4w3P8DGupkZImAIaBESjUc9yC4UtBN4FINFWlSkD
xpqlzbn5Db3oRKmW3RmXTrYqL8gKK4sPZMxrSOtQMfPHDCUIKpSRYcsu7dyqVxuW
jTTQv06i4r8GB1vx8OP7eB8yiwKUJT5ybT1GJIgOr9l3a8OrHeZpwgAV2gxN+4t7
DZQXz2r/jwlj969FdUxaV5+4bGqcG3uPMGSXcLkX/BSLVfDPSs2hSVETull39rZ9
ZqeIbEtv+N5Obtnnz4DNIbFOGigf74ww2eAoQ1U3sZVpu8JpqDa99Bqadulr0DUG
W9G5xAf3Bmj596RLTjGcYGG+riPtDHY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:50:08 2026 by rpki-client