Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/78ff09fd-92a5-3eca-a2de-4d319b9fb608.roa
File:                     78ff09fd-92a5-3eca-a2de-4d319b9fb608.roa (raw, json)
Hash identifier:          UgBq0ypJpUKFIddJUpu85AsCaw2aaLRyoyRn8iEN7eg=
Subject key identifier:   1E:F1:01:FB:8F:8F:B5:31:0E:F7:BE:53:6A:58:71:6F:4B:FD:D0:DE
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F4328584AE0311CCB2DBD2BDC2ABC8A00
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/78ff09fd-92a5-3eca-a2de-4d319b9fb608.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     13945
IP address blocks:        151.193.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:1c:cb:2d:bd:2b:dc:2a:bc:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=9eb5c86c-23cd-43c4-92f7-045bab38ec91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:29:31:0b:2c:bd:00:64:51:c4:19:08:f8:83:
                    a8:76:b8:ff:2c:30:20:5f:85:1f:b4:0e:c8:00:38:
                    94:7c:14:c3:d4:7b:a0:fc:24:11:6e:86:d1:d7:32:
                    f5:10:80:8a:f9:3b:2b:2f:73:bd:24:41:79:e2:ba:
                    ee:21:15:2b:35:ad:d1:1a:35:ef:62:05:fa:d3:62:
                    f4:de:6f:f6:42:5b:9e:c7:56:e0:1d:da:ba:18:94:
                    60:cb:31:88:97:89:4c:3c:55:f1:7c:9a:89:7f:f9:
                    93:27:1a:fe:09:d5:94:e8:73:da:5e:2b:e6:c3:f5:
                    f1:fb:6b:f5:4d:b4:3e:5e:1b:52:d2:85:8e:23:02:
                    59:04:0f:11:d9:4f:0f:0d:58:90:9c:71:4e:05:9c:
                    38:c3:58:a2:3b:f7:70:92:81:46:d2:66:56:26:6a:
                    0b:62:1f:60:d0:b4:b2:12:c1:bf:36:41:49:05:6b:
                    c4:22:40:be:14:18:9a:87:b5:94:f6:28:68:5f:56:
                    26:33:58:c6:b6:40:4f:fd:03:c6:60:f7:6c:e9:2a:
                    d5:72:83:77:40:ba:82:4d:08:a1:c5:d7:15:61:e4:
                    f1:67:b3:8f:ec:de:81:aa:c8:a4:21:1d:40:b3:f5:
                    49:b7:5f:66:91:09:52:57:24:51:25:c1:cf:00:2a:
                    89:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F1:01:FB:8F:8F:B5:31:0E:F7:BE:53:6A:58:71:6F:4B:FD:D0:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/78ff09fd-92a5-3eca-a2de-4d319b9fb608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:4e:a3:59:f3:0f:da:57:87:41:e0:6d:f3:6f:4d:b9:e2:65:
         03:2d:8d:e8:99:d6:e5:ea:8b:c4:c7:d5:6e:fb:06:c0:75:7f:
         e5:59:6f:71:96:1e:34:48:1a:a2:af:06:4b:53:15:de:ac:bc:
         5b:42:e9:6b:74:18:8c:73:0a:bc:ae:cf:a2:61:3d:ce:78:b8:
         11:a2:32:eb:8e:00:e5:63:b1:6e:05:60:f9:b7:01:d5:38:e1:
         63:d2:17:0a:0b:19:89:10:de:bc:35:55:e6:39:ca:c0:ff:8d:
         d5:29:6f:41:51:91:7b:8c:aa:68:8a:11:57:f8:59:ca:d8:ba:
         3b:88:26:b2:07:43:42:57:c5:7b:69:9f:1b:00:34:9d:2d:db:
         63:2d:5e:54:b0:ee:4c:b3:3a:d4:32:5b:4c:3a:e4:33:b6:4b:
         a2:3b:fc:63:bb:a1:4f:80:9b:52:8a:a4:09:db:a4:2e:78:25:
         b9:a5:fa:5c:37:81:0b:8c:f0:16:d5:7b:18:a1:a2:fc:ea:82:
         0c:bb:03:fc:d9:a7:8f:24:a7:c6:b3:a9:5a:d7:c2:dc:d7:d3:
         fc:d8:69:fa:bf:9e:43:c8:5e:c2:1b:96:d1:7d:6b:3a:79:f1:
         9e:bf:ac:e5:49:5b:3d:f6:77:b7:3e:9f:35:66:ea:77:61:4e:
         b8:34:e6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:19:03 2025 by rpki-client