Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/c9321b99-c887-3411-afb6-b13a5a25ac1e.roa
File:                     c9321b99-c887-3411-afb6-b13a5a25ac1e.roa (raw, json)
Hash identifier:          VACRaB5Lpe7wDKgqM6xAELMYdidFhFtIV/qF3B1BU2k=
Subject key identifier:   19:81:8B:6E:03:0A:8D:8F:36:AF:9A:4D:06:E2:81:C0:43:A7:4D:E8
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F4328584AE0311D1F30BE9069CDD613B0
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/c9321b99-c887-3411-afb6-b13a5a25ac1e.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     6334
IP address blocks:        151.193.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:1d:1f:30:be:90:69:cd:d6:13:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=9be02952-6804-44b4-acf2-6e6baf22b647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:95:62:cd:c4:9f:1d:5f:2f:fd:d3:30:a6:e6:
                    45:f5:93:96:84:1f:ea:32:c1:5a:48:1a:88:c7:59:
                    80:73:e0:f9:47:78:21:02:b9:31:e9:89:fe:e7:e2:
                    b4:ac:f9:70:93:e1:e9:c3:0b:3f:4f:af:5f:f1:e4:
                    26:ab:2e:3f:8a:78:f1:52:50:75:0b:81:e4:10:e0:
                    b9:f8:40:d2:e9:48:7b:aa:52:e9:1e:d9:94:fc:8f:
                    10:17:42:9f:0d:bc:36:4d:f6:65:8e:db:90:db:3a:
                    65:39:e9:21:c9:ee:9b:43:e3:5d:c5:a1:95:34:fb:
                    55:20:2f:9c:1d:dc:6e:ef:50:ca:84:e6:d7:75:2c:
                    ae:2b:e2:16:48:ea:62:49:2d:a6:ab:d5:b2:f9:7d:
                    c9:b1:ad:f0:a8:80:2f:29:1c:9a:78:82:39:e2:f0:
                    3c:0f:95:4d:32:b0:b4:45:1c:11:91:be:d1:e1:ee:
                    b5:2b:c2:27:82:21:d7:53:c0:dc:de:4b:48:81:ec:
                    a3:ae:2f:c0:19:39:17:93:e2:26:82:24:67:8e:6b:
                    8c:fa:c9:ec:0f:58:97:46:b4:00:5f:2e:11:3f:70:
                    3f:f0:29:7d:4a:e4:28:ea:66:79:54:92:38:86:ba:
                    22:02:f2:8f:81:d3:fc:3f:48:30:9e:74:66:24:73:
                    f8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:81:8B:6E:03:0A:8D:8F:36:AF:9A:4D:06:E2:81:C0:43:A7:4D:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/c9321b99-c887-3411-afb6-b13a5a25ac1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:19:aa:ba:35:59:4e:ff:28:c2:f5:e7:bf:df:91:2c:f3:d2:
         b2:40:39:aa:db:5c:87:85:ce:e2:c2:98:2e:14:7a:2a:f5:bf:
         42:b8:a1:96:d8:48:f0:c5:2e:12:78:a9:46:50:95:c7:5f:39:
         18:e9:78:b3:84:03:1c:ce:cd:71:ea:f1:b7:d6:18:2f:94:fa:
         ba:16:7d:19:76:d8:bd:66:f1:f6:f2:09:85:6a:98:58:96:a0:
         2f:00:81:2f:b8:8e:8a:af:2c:da:c5:1a:3c:92:24:8f:8a:3b:
         15:b1:be:85:81:8c:e1:4d:b9:30:5f:44:74:fe:3d:2f:fc:7c:
         69:5e:a0:4f:bd:66:88:0d:68:45:bf:43:36:27:6b:e6:28:96:
         39:9d:2f:db:8d:fb:f4:c1:76:ff:9d:d5:46:c3:08:a0:06:0c:
         e6:da:be:f2:6e:dd:58:d8:6a:f2:6b:48:91:c2:e5:3f:94:0c:
         fe:56:e3:06:0b:69:04:b1:75:61:f2:1e:f5:4c:91:a2:12:a2:
         73:a0:57:bb:14:e7:18:ac:0d:8a:91:3f:67:67:1c:86:91:70:
         0a:c7:24:83:1f:b0:7e:a5:e9:00:e3:4d:25:d1:46:dd:42:85:
         81:90:36:60:78:c9:69:46:71:79:62:5e:53:f1:ab:50:49:45:
         c0:9f:2b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:30:55 2025 by rpki-client