Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/c726776b-2349-36af-bfe5-8f8145fc0129.roa
File:                     c726776b-2349-36af-bfe5-8f8145fc0129.roa (raw, json)
Hash identifier:          gZdjFa91Gd4djXhpWz3X9uo9MUorLjIBQzVxesPcj6E=
Subject key identifier:   CA:48:8F:86:B7:DA:BC:FA:EA:F9:E0:C5:7D:BE:ED:F1:09:3E:AA:D6
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F43285849FF751A80563C7FD703980780
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/c726776b-2349-36af-bfe5-8f8145fc0129.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     6334
IP address blocks:        151.193.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:1a:80:56:3c:7f:d7:03:98:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=9e5b43ce-d131-4036-b26a-b90178f7ffef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e1:f2:34:1f:5d:d2:76:40:74:24:9e:3a:e3:
                    12:1d:08:46:8c:26:ba:9a:2d:b5:12:44:29:5b:29:
                    82:8d:4a:a9:89:77:66:5f:f6:2f:e0:47:0a:8b:33:
                    a5:00:da:f2:b3:37:49:41:21:a2:c5:95:0f:2f:a9:
                    af:75:de:e5:9d:ad:83:da:e1:c6:29:15:3f:44:4e:
                    09:58:51:3d:c2:75:b7:27:39:f2:1d:c4:c7:79:44:
                    d0:14:75:54:ca:b4:a9:95:c5:3f:07:ee:a9:9f:52:
                    72:dd:d5:21:d3:f3:61:25:f5:02:78:c8:a4:ce:a5:
                    c8:98:ca:5d:52:d0:ff:56:96:1c:94:b4:fb:d0:77:
                    5c:e8:0d:30:72:d1:71:a1:12:ba:66:16:a6:da:e3:
                    0d:7a:14:7b:d3:0c:11:41:72:10:d9:79:94:04:98:
                    3f:7b:8e:a7:a7:85:fe:4c:02:2a:83:00:68:3d:39:
                    ae:0d:e3:17:d6:0d:3e:93:57:7a:39:f1:2b:63:78:
                    d7:91:a3:55:a8:6e:f7:04:49:48:12:d1:d2:35:04:
                    22:83:0b:06:b8:8a:9d:4b:76:04:1d:c4:59:ab:68:
                    14:98:80:06:69:8f:8c:2a:44:0e:55:fb:fe:04:a1:
                    1a:00:e0:82:ac:1b:36:a2:86:f0:2c:d5:10:ec:92:
                    92:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:48:8F:86:B7:DA:BC:FA:EA:F9:E0:C5:7D:BE:ED:F1:09:3E:AA:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/c726776b-2349-36af-bfe5-8f8145fc0129.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:4c:5a:d7:9a:36:c9:a2:18:c1:ed:8f:a4:09:9c:e8:e4:43:
         28:39:ec:c4:b6:0a:e7:ba:73:09:ac:f6:ed:0c:bb:1d:8d:68:
         c1:bf:ba:3d:8e:75:5a:ee:6b:66:e1:25:c8:0b:39:65:d6:f3:
         b9:79:44:a5:ea:3f:45:58:87:e2:78:07:06:a3:b8:80:07:6c:
         39:59:50:66:80:2e:b4:c5:96:29:1a:e3:fd:ff:15:2d:63:fe:
         44:0c:3f:92:61:3f:07:0e:ff:34:29:4c:4f:fa:c9:66:03:08:
         87:4d:ce:03:e5:27:90:b3:31:38:37:13:36:0e:87:f3:9c:cb:
         ce:c5:41:e4:ce:82:56:57:6d:cb:61:54:71:34:79:07:4f:df:
         71:8c:ca:15:c6:8f:6c:3d:be:46:50:c4:f5:30:48:d0:ee:77:
         f8:1f:64:ae:5e:ed:24:6d:da:49:3c:a6:fe:32:5e:e0:f0:fe:
         69:61:b9:59:30:c8:62:76:a8:b7:fa:b9:99:76:c3:bc:81:9a:
         5a:d5:53:98:7b:62:41:f0:e9:6f:4c:18:d0:c5:3e:5f:66:69:
         5b:2c:7c:b5:9f:88:ef:ee:94:0c:bb:02:c5:04:25:6c:da:f8:
         a6:ce:3d:77:4b:3e:e2:54:fb:50:21:c5:6c:1c:c2:cb:99:4a:
         35:85:82:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:45:13 2025 by rpki-client