Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/dd173839-e1a9-3143-96ac-bff23a79fd3d.roa
File:                     dd173839-e1a9-3143-96ac-bff23a79fd3d.roa (raw, json)
Hash identifier:          OOa5PbnJbIZ5j1xNqjuFBCrjdKmEmQ2Ob3uxLP94nx0=
Subject key identifier:   0C:E0:B3:FF:B0:67:1B:B9:B8:D7:0F:B5:4D:D6:2C:5C:AC:4B:2E:A1
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F4328584A1B6005459C7AA9CEF5BCB780
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/dd173839-e1a9-3143-96ac-bff23a79fd3d.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     396982
IP address blocks:        151.193.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:60:05:45:9c:7a:a9:ce:f5:bc:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=b2d1d880-30b5-4caf-81fb-d561f4c092c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:85:dc:9f:cc:21:26:e5:b8:26:6e:88:6b:0c:
                    69:c2:ed:85:57:48:84:d9:ac:58:62:b5:4f:15:b6:
                    81:f1:30:72:08:cc:77:46:06:14:3b:d0:82:1f:ee:
                    ac:0b:f6:02:78:41:5b:77:a1:7b:3a:26:5e:6f:c6:
                    61:de:24:4e:6b:c1:c5:9d:a2:b2:23:2a:31:c0:f3:
                    cf:63:7f:e1:7a:2d:be:9a:5e:7c:de:6d:c3:7c:bc:
                    65:69:f6:88:75:b2:35:19:40:fb:cb:69:2c:83:48:
                    81:79:de:55:5a:2f:d2:2f:1a:d2:ff:15:cd:33:ec:
                    e2:f1:36:f8:d4:00:88:40:50:83:64:1b:a8:b7:e1:
                    4a:43:b8:61:9c:e9:50:aa:35:ac:42:4c:cb:0c:1a:
                    9f:b4:9a:a3:65:72:f3:50:06:13:6f:80:16:08:d5:
                    23:81:39:dc:a5:61:94:43:b4:47:41:59:2a:00:88:
                    2c:3c:ef:c4:82:f5:8e:62:98:57:7f:1c:2f:b5:bc:
                    8b:9b:e1:51:3a:ab:cc:95:37:10:9d:20:c8:6d:d8:
                    19:85:e6:92:3b:59:f9:e8:c1:bb:3a:61:0b:8c:c1:
                    a1:9a:2e:5a:08:7c:2f:09:72:ba:3e:ae:9e:42:e4:
                    2a:81:e3:31:ec:7a:7b:a5:f7:a6:85:e1:33:1b:01:
                    90:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E0:B3:FF:B0:67:1B:B9:B8:D7:0F:B5:4D:D6:2C:5C:AC:4B:2E:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/dd173839-e1a9-3143-96ac-bff23a79fd3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d0:b9:37:fc:48:9b:30:58:e2:9d:c8:21:63:54:0d:d4:c8:
         93:93:57:68:1f:49:61:3d:23:6f:f5:3c:8a:09:3b:05:ce:43:
         fe:28:ca:2e:db:b6:7c:1e:d3:ea:f3:c0:c2:19:e4:9e:1e:18:
         c3:cf:9e:04:76:40:47:3f:31:9c:a5:1c:04:f1:c5:d7:e7:dd:
         84:41:cc:95:d5:c4:07:ac:91:aa:17:86:23:0d:1c:ec:34:ba:
         f1:9b:b0:34:0a:44:9c:45:80:fb:9d:3e:2f:07:5e:4e:a6:68:
         09:17:b8:84:6a:86:c6:54:d9:a2:bb:f7:69:77:0c:1b:3f:48:
         37:59:96:46:b7:66:20:e3:73:f9:1a:9f:65:ca:88:aa:a7:aa:
         8f:00:61:c0:68:54:86:59:29:bd:4e:09:ab:4c:46:08:8d:0d:
         57:d7:ad:1b:7e:d6:91:3b:3f:78:33:40:a9:9b:c4:ee:dd:90:
         20:b0:46:79:bd:ef:78:0b:91:00:41:f0:21:8e:5c:09:51:48:
         74:2d:c5:a1:d0:3a:01:a8:ea:cb:39:cf:23:88:4f:58:d8:bd:
         6e:ee:3d:f5:c5:a4:ca:c1:16:0f:7e:66:cb:ce:2c:85:25:a6:
         34:2c:c2:81:be:a3:b3:9b:9a:52:e7:db:20:0d:4a:75:9d:14:
         57:75:0c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:45:53 2025 by rpki-client