Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3135352e3130332e35312e302f32342d3234203d3e20313532393030.roa
File:                     3135352e3130332e35312e302f32342d3234203d3e20313532393030.roa (raw, json)
Hash identifier:          i2By2/VzTQGijAHRyWFgSETKFktUUYe8fixsdhWZibY=
Subject key identifier:   BF:31:24:09:D6:C9:59:72:C4:88:62:89:43:E9:AC:7D:C6:82:8B:58
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       64161CF7F48CC0D9BD293E1A12D3631FA94C4DFD
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3135352e3130332e35312e302f32342d3234203d3e20313532393030.roa
Signing time:             Thu 23 Jul 2026 13:21:33 +0000
ROA not before:           Thu 23 Jul 2026 13:16:33 +0000
ROA not after:            Thu 22 Jul 2027 13:21:33 +0000
asID:                     152900
IP address blocks:        155.103.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:08:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:16:1c:f7:f4:8c:c0:d9:bd:29:3e:1a:12:d3:63:1f:a9:4c:4d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Jul 23 13:16:33 2026 GMT
            Not After : Jul 22 13:21:33 2027 GMT
        Subject: CN=BF312409D6C95972C488628943E9AC7DC6828B58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:10:ad:6b:2e:f3:4d:d4:02:f7:2f:48:69:34:
                    5d:2c:95:ba:ef:d5:52:30:f6:24:eb:bc:f5:31:6f:
                    ac:d7:49:bd:05:34:cc:80:1b:dd:10:c6:2b:ab:b4:
                    58:a9:b0:24:3d:fb:93:30:d5:d8:9c:f5:4f:29:48:
                    65:ef:b7:b4:ed:48:18:4b:be:59:a4:75:c7:a5:41:
                    75:89:c5:59:d6:ff:1f:ee:78:58:81:54:ee:28:de:
                    d0:31:c7:ff:30:ea:ae:2a:d4:13:99:63:df:b8:01:
                    3b:fd:eb:53:71:66:be:9f:41:7b:69:58:d6:13:35:
                    22:32:fa:f2:e6:07:53:36:ed:b2:55:6b:12:c9:5d:
                    92:b2:5a:c0:55:41:00:4a:73:ac:f7:30:e4:7f:d9:
                    b5:57:b8:99:9a:7f:33:bf:94:e6:f4:0c:59:e7:fe:
                    d4:9c:9e:f1:6f:b6:27:6b:f2:06:4f:3a:0e:8f:72:
                    97:c1:a8:0e:ee:6a:31:2b:a8:58:bd:3e:db:17:3d:
                    75:d5:de:c1:7e:cd:9f:e3:5a:c8:50:c0:33:e2:17:
                    a3:56:8e:51:a5:55:b4:00:4f:87:3d:ac:24:f8:b9:
                    14:1c:44:a2:45:76:c3:dd:2a:3e:ec:71:38:aa:98:
                    f0:f1:30:8e:ba:8d:8a:77:97:8b:8a:a3:0a:6d:dd:
                    e8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:31:24:09:D6:C9:59:72:C4:88:62:89:43:E9:AC:7D:C6:82:8B:58
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3135352e3130332e35312e302f32342d3234203d3e20313532393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.103.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:a6:a9:19:28:22:ef:d4:d1:4b:55:39:cb:8a:a3:a9:e1:29:
         22:b4:a5:46:47:ae:53:fa:4e:d1:12:96:b2:e1:88:d5:c3:cd:
         0e:ae:81:3e:0e:05:78:87:12:1f:17:16:19:48:14:51:c1:2b:
         c1:c3:9d:cc:c9:a1:84:fa:06:86:7e:3a:a3:93:b2:cb:7e:7a:
         78:97:7c:6a:ee:05:96:65:35:cc:9a:ce:22:cb:26:e2:24:f5:
         c8:e3:18:ce:b4:3b:19:f8:5b:75:c3:da:25:e4:d8:66:11:e0:
         9c:cb:44:14:69:0a:6c:e7:59:f4:e6:ea:03:34:7c:35:a0:b1:
         b9:64:29:b7:6b:16:7e:d9:8f:1b:b1:f7:f4:f3:aa:fa:c9:b5:
         35:20:39:17:07:29:86:54:fa:93:2a:90:58:b8:77:12:0a:03:
         3a:23:41:74:ba:6b:26:b5:60:1d:31:4e:d0:2f:f7:35:39:9b:
         a3:8e:e7:7d:9d:25:dd:77:23:68:ca:92:c3:62:01:1b:38:c5:
         27:6b:83:b2:6f:cb:3e:72:2a:22:d0:a3:3f:95:f2:6a:ef:bb:
         76:e0:fd:d9:19:19:1c:31:6c:98:11:ec:56:31:04:af:6a:ac:
         1d:6b:be:dd:4c:bc:f7:be:76:58:20:b2:fd:a5:df:5f:f6:27:
         3d:c2:94:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:00 2026 by rpki-client