Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/374929a2-e018-3b55-b97f-cf3da4f69ff1.roa
File:                     374929a2-e018-3b55-b97f-cf3da4f69ff1.roa (raw, json)
Hash identifier:          x04F3YDaFMqooMAYO5imIilcoqA3hIriiEgcQ6MU28w=
Subject key identifier:   6C:C6:A4:FB:81:CC:0F:A0:47:D5:77:7C:2F:9A:EC:B1:78:33:55:F0
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F4328584AE0311CDD15B200BBDC73BB00
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/374929a2-e018-3b55-b97f-cf3da4f69ff1.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     13945
IP address blocks:        151.193.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:1c:dd:15:b2:00:bb:dc:73:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=19b40765-99ab-4681-80bc-32da3e00c2b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:92:0e:64:58:4f:a0:e4:60:8f:11:57:05:27:
                    cb:40:56:5e:0f:16:e8:0b:78:28:de:69:d3:f3:37:
                    bc:c6:09:5d:84:39:09:af:b3:81:53:d5:b2:3b:fa:
                    8f:9e:d8:9f:51:32:db:9d:03:1d:73:3f:1f:8f:c8:
                    eb:d9:2b:c1:eb:c1:e6:ba:15:28:d1:f2:9c:ad:d1:
                    26:a3:86:91:0f:4d:b9:cb:33:81:8a:de:90:c8:07:
                    e5:ac:cf:ca:36:eb:56:30:21:4a:3d:ff:70:97:55:
                    17:d0:5e:b0:59:d7:4d:d7:94:a1:3f:51:32:6a:76:
                    b1:53:99:5e:e5:0b:b4:fe:d0:4b:02:d4:89:95:d4:
                    fe:77:60:4b:bf:d3:bb:4b:0d:af:16:70:9c:86:94:
                    21:a2:52:56:7e:8a:c8:c0:cb:65:02:ae:01:70:0b:
                    77:5a:ae:1f:76:c7:d6:f5:01:7f:c0:00:d9:e4:6f:
                    0a:79:a7:eb:40:ba:0b:6d:ae:0e:0b:49:60:d3:a5:
                    aa:8b:a1:55:bf:ba:72:d7:d6:e3:ee:b0:ff:22:d4:
                    3e:f1:35:d2:e9:4d:2c:ac:69:bd:4e:d0:98:ef:59:
                    6b:3e:55:8f:7f:b2:57:92:01:49:0d:78:25:f6:c1:
                    45:da:8f:a0:a2:21:46:84:a5:59:8d:96:b2:b6:ab:
                    3e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C6:A4:FB:81:CC:0F:A0:47:D5:77:7C:2F:9A:EC:B1:78:33:55:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/374929a2-e018-3b55-b97f-cf3da4f69ff1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:e5:d5:d6:54:03:13:4a:29:3d:65:cb:d0:c6:bf:76:51:bf:
         14:51:c5:02:f0:44:88:80:c3:19:1a:27:2f:81:4c:5a:07:74:
         90:92:60:37:3f:87:36:5a:eb:68:65:d7:2a:21:bf:f8:f1:2e:
         ca:8d:e7:de:ed:56:eb:5c:7c:10:1e:24:d3:f3:1e:0a:30:34:
         42:f5:bc:ee:43:21:b3:45:87:f4:a5:90:49:64:a3:3e:ec:35:
         3f:1f:25:1b:80:67:8b:ec:ab:83:8d:76:78:a2:0d:29:9f:2c:
         f9:3c:8b:3e:24:52:0b:5b:d0:de:ba:7c:27:31:50:50:24:7b:
         20:8e:f2:2d:6a:4a:3a:2e:4d:b7:a8:73:a1:2a:8b:02:95:11:
         76:9e:5a:46:39:64:9f:11:7a:1c:89:b7:b9:82:6a:23:17:f9:
         d6:fd:43:ec:8e:a2:89:71:12:7c:9d:c4:c3:c8:39:09:89:44:
         d8:33:6c:fd:32:38:0a:0d:b6:8d:56:31:03:13:ce:39:9a:b9:
         13:15:e4:d7:8e:e3:5d:6e:93:13:c9:1e:b3:bb:83:b9:bb:65:
         0a:1e:6b:01:64:ee:de:1f:1a:00:d1:e8:1d:1a:df:3b:95:97:
         64:f6:25:14:2c:fd:2e:7c:14:9a:90:c8:1a:34:a1:ab:20:74:
         f9:18:44:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMRzdFbIAu9xzuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTIxNTk4MjMtODA2YS00ODc5LTlkZTktN2JlNjM0ZThj
ZDMxMB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk
MTliNDA3NjUtOTlhYi00NjgxLTgwYmMtMzJkYTNlMDBjMmI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpIOZFhPoORgjxFXBSfLQFZeDxboC3go3mnT
8ze8xgldhDkJr7OBU9WyO/qPntifUTLbnQMdcz8fj8jr2SvB68HmuhUo0fKcrdEm
o4aRD025yzOBit6QyAflrM/KNutWMCFKPf9wl1UX0F6wWddN15ShP1EyanaxU5le
5Qu0/tBLAtSJldT+d2BLv9O7Sw2vFnCchpQholJWforIwMtlAq4BcAt3Wq4fdsfW
9QF/wADZ5G8KeafrQLoLba4OC0lg06Wqi6FVv7py19bj7rD/ItQ+8TXS6U0srGm9
TtCY71lrPlWPf7JXkgFJDXgl9sFF2o+goiFGhKVZjZaytqs+YwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGzGpPuBzA+gR9V3fC+a7LF4M1XwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hMjE1
OTgyMy04MDZhLTQ4NzktOWRlOS03YmU2MzRlOGNkMzEvMzc0OTI5YTItZTAxOC0z
YjU1LWI5N2YtY2YzZGE0ZjY5ZmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTIxNTk4MjMtODA2YS00ODc5LTlk
ZTktN2JlNjM0ZThjZDMxL2EyMTU5ODIzLTgwNmEtNDg3OS05ZGU5LTdiZTYzNGU4
Y2QzMS5jcmwwHwYDVR0jBBgwFoAUpZGQmoiGHwLfK88I1KSUYP2ExWYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hMjE1OTgyMy04MDZhLTQ4NzktOWRlOS03YmU2
MzRlOGNkMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl8F7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALLl1dZUAxNKKT1ly9DGv3ZRvxRRxQLwRIiAwxkaJy+BTFoHdJCSYDc/
hzZa62hl1yohv/jxLsqN597tVutcfBAeJNPzHgowNEL1vO5DIbNFh/SlkElkoz7s
NT8fJRuAZ4vsq4ONdniiDSmfLPk8iz4kUgtb0N66fCcxUFAkeyCO8i1qSjouTbeo
c6EqiwKVEXaeWkY5ZJ8RehyJt7mCaiMX+db9Q+yOoolxEnydxMPIOQmJRNgzbP0y
OAoNto1WMQMTzjmauRMV5NeO411ukxPJHrO7g7m7ZQoeawFk7t4fGgDR6B0a3zuV
l2T2JRQs/S58FJqQyBo0oasgdPkYRPk=
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:32:15 2025 by rpki-client