Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS150127.roa
File:                     AS150127.roa (raw, json)
Hash identifier:          9NpeQEPGi4HkpbjENSylU1KJrWUOLUTtQJ6cTR0bGas=
Subject key identifier:   C7:C2:6E:33:BD:0F:4D:7D:6D:91:C9:49:35:DC:7C:7B:06:76:9D:B3
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       714FE0C8655BDFA61D964250FF2820F75983F10B
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS150127.roa
Signing time:             Thu 11 Jun 2026 05:36:05 +0000
ROA not before:           Thu 11 Jun 2026 05:31:05 +0000
ROA not after:            Thu 10 Jun 2027 05:36:05 +0000
asID:                     150127
IP address blocks:        140.99.148.0/23 maxlen: 24
                          140.99.152.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:26:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:4f:e0:c8:65:5b:df:a6:1d:96:42:50:ff:28:20:f7:59:83:f1:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Jun 11 05:31:05 2026 GMT
            Not After : Jun 10 05:36:05 2027 GMT
        Subject: CN=C7C26E33BD0F4D7D6D91C94935DC7C7B06769DB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:06:72:12:79:79:00:ee:30:af:3d:50:f7:3a:
                    01:09:60:9a:24:6a:b8:a8:d1:e7:fe:51:d0:7b:e9:
                    9e:91:42:de:33:f1:1f:16:83:5c:57:36:94:d0:7c:
                    7e:30:6b:40:68:f6:5d:65:97:8b:df:d3:17:74:45:
                    9b:26:03:11:13:0e:57:4b:eb:e8:b5:d1:ec:d7:7e:
                    3f:03:97:8b:ac:5e:e0:8b:a0:74:56:4a:3d:ff:83:
                    21:4e:23:8f:b2:6c:ca:5a:f0:ab:86:ed:24:a5:19:
                    e7:8f:e7:8b:7a:18:6b:7c:94:fd:ca:fb:78:fa:6e:
                    61:1d:ac:3f:f6:6d:66:fc:99:ef:19:e8:91:1a:3f:
                    73:2d:6d:b6:be:f7:8d:19:19:81:a1:9a:0f:a2:cb:
                    e8:4c:90:22:85:b2:41:a1:c8:f9:ac:f4:1f:8b:65:
                    17:19:da:c8:92:7b:60:e8:cb:f0:e0:96:18:16:93:
                    9e:25:de:f1:86:3c:6c:91:68:d8:5b:3d:36:e3:05:
                    c6:58:0f:76:dd:65:a9:60:a5:6a:5c:6d:51:a8:62:
                    ca:e6:09:83:40:1e:c0:92:09:f7:cd:0b:b5:77:d0:
                    70:cd:bb:f2:64:8f:e9:a4:53:27:fe:df:19:b1:31:
                    82:95:36:ca:1c:ad:62:cd:50:b6:0a:08:23:b8:74:
                    dc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C2:6E:33:BD:0F:4D:7D:6D:91:C9:49:35:DC:7C:7B:06:76:9D:B3
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS150127.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.148.0/23
                  140.99.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:c7:f2:29:9c:b2:de:ae:79:f2:b4:bc:8e:a4:d0:ef:52:14:
         ac:6e:e1:6d:68:b6:bb:98:76:d4:28:3b:81:07:98:41:b0:aa:
         a0:15:25:f7:99:4d:74:42:eb:22:77:99:6c:b9:e2:83:55:71:
         12:b4:8b:64:89:82:fd:25:81:04:08:ef:29:3d:38:59:ca:6e:
         8b:ec:bc:3e:c2:75:26:4f:01:81:7f:b5:81:b8:a7:7a:08:7f:
         dd:76:3a:6b:ad:19:e7:fc:a8:82:bb:3f:87:13:e4:35:5e:55:
         dd:1f:ca:a9:3f:ae:b2:b3:52:07:8d:7a:0a:46:ad:4e:29:f5:
         c0:b8:a6:b1:76:0f:ab:39:20:e7:74:18:cd:3c:3d:b3:d5:5b:
         97:d3:2d:46:a6:4a:26:7d:24:86:98:de:b0:0d:90:7a:b1:fb:
         fc:60:ed:72:b9:14:34:ed:a4:ce:d1:bd:0d:f7:70:46:10:9f:
         7f:29:96:cc:cb:a8:9d:aa:c0:16:32:8e:5a:14:89:e1:ed:0e:
         9a:b5:45:f6:b3:e8:c9:96:f1:5b:df:b4:95:da:48:b0:c3:2c:
         af:38:88:fd:fe:70:e7:84:3a:a8:0d:d6:31:15:e8:5f:d4:70:
         22:c0:c9:ab:4c:7a:84:86:53:09:c9:76:10:0b:ee:30:26:78:
         e2:99:22:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:12:48 2026 by rpki-client