Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS150293.roa
File:                     AS150293.roa (raw, json)
Hash identifier:          VXkMBsxnrnl6ffZdkIKYHcs6HK1YBuUmrKTJJVs0Atw=
Subject key identifier:   DD:1E:FA:A7:EF:EA:5B:97:CF:91:A0:D8:4B:FE:3D:DC:EF:0D:25:7C
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       21F44EBB62505E2F7A8093E40B575AD1FC154698
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS150293.roa
Signing time:             Thu 09 Apr 2026 09:16:39 +0000
ROA not before:           Thu 09 Apr 2026 09:11:39 +0000
ROA not after:            Thu 08 Apr 2027 09:16:39 +0000
asID:                     150293
IP address blocks:        107.172.40.0/24 maxlen: 24
                          208.76.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 16:25:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f4:4e:bb:62:50:5e:2f:7a:80:93:e4:0b:57:5a:d1:fc:15:46:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr  9 09:11:39 2026 GMT
            Not After : Apr  8 09:16:39 2027 GMT
        Subject: CN=DD1EFAA7EFEA5B97CF91A0D84BFE3DDCEF0D257C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:50:06:23:15:df:17:be:3f:01:b1:38:29:ec:
                    35:6d:b4:ec:b0:3f:5b:da:f6:24:aa:13:46:bd:aa:
                    a3:05:00:07:49:d3:d7:93:13:52:3e:dc:fc:93:36:
                    14:5f:75:27:b2:61:7b:2e:38:6e:9b:73:c4:7c:94:
                    7f:b2:61:c3:29:bb:f4:bc:5a:06:55:39:44:ca:82:
                    84:26:24:f0:18:d2:3a:d7:1b:0a:ef:bc:1b:90:71:
                    82:34:96:c5:4f:d1:a2:04:3b:fb:00:7a:89:65:48:
                    bc:46:77:7d:80:f2:bd:b2:5d:44:9f:90:27:0c:67:
                    e8:69:2f:10:2c:f5:e7:32:f6:e7:40:e0:4f:6c:8e:
                    7e:7e:e2:32:d1:ac:5f:c6:ec:8a:41:20:d1:5a:2b:
                    a7:1c:7b:d5:90:78:5d:08:17:6e:a8:37:04:dd:18:
                    ec:ba:87:9a:8b:02:5f:d5:26:6d:f0:a6:fa:47:62:
                    6b:7f:61:83:6a:a1:b9:b0:6b:82:99:2f:25:0c:5a:
                    70:af:b7:53:94:b1:5c:9c:0b:d9:e1:ab:fd:bc:86:
                    a0:1c:58:ac:bf:c8:0b:2c:49:9e:66:e4:c8:9c:60:
                    bb:29:3e:96:7d:0c:3e:07:c2:a6:e1:74:59:fa:25:
                    aa:b5:4f:72:21:15:4e:26:cf:66:6a:f9:fb:e3:5e:
                    e5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:1E:FA:A7:EF:EA:5B:97:CF:91:A0:D8:4B:FE:3D:DC:EF:0D:25:7C
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS150293.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.172.40.0/24
                  208.76.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:fd:54:2b:ef:a7:b3:f1:5a:ff:d0:ce:d9:32:6f:da:33:e9:
         5e:af:ab:55:7c:4c:8f:d5:7b:31:ee:dd:f4:c3:0a:e9:c9:20:
         23:ae:d8:0b:8b:66:dc:f9:0d:33:bf:0d:fc:72:31:73:ce:f1:
         47:51:95:6b:05:0a:aa:7c:7c:62:3e:7d:b3:80:74:1b:6a:1c:
         40:e3:ab:d3:14:96:06:fe:23:47:dc:05:39:5b:e3:60:a5:c5:
         ba:fc:19:a6:46:65:7c:8c:61:bc:ee:55:91:c6:56:68:f5:fe:
         48:44:1b:85:60:4c:b2:a1:6d:14:58:e9:0a:a2:84:91:ff:c2:
         9c:83:a3:78:dd:73:e7:4f:48:be:69:64:ce:a3:f1:1c:88:91:
         15:90:a9:20:ae:ed:50:04:4d:20:5b:b6:55:e3:52:e1:71:09:
         5d:03:7d:49:08:6b:d1:cd:57:65:d2:91:03:b7:48:19:d7:9e:
         28:93:18:b9:16:93:65:52:69:77:ad:ac:e6:4a:05:44:e9:58:
         45:63:c7:2e:f7:79:51:00:3a:e1:f9:e3:38:94:4a:3f:f9:c6:
         98:4d:b8:92:a7:62:bd:d5:7f:1b:09:f3:46:61:fb:67:6b:ec:
         fb:47:72:0b:2c:b5:76:c8:6a:6a:21:66:98:a4:41:c9:3c:df:
         53:1a:ce:3a
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUIfROu2JQXi96gJPkC1da0fwVRpgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwNDA5MDkxMTM5WhcNMjcwNDA4MDkxNjM5
WjAzMTEwLwYDVQQDEyhERDFFRkFBN0VGRUE1Qjk3Q0Y5MUEwRDg0QkZFM0REQ0VG
MEQyNTdDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFAGIxXfF74/
AbE4Kew1bbTssD9b2vYkqhNGvaqjBQAHSdPXkxNSPtz8kzYUX3UnsmF7Ljhum3PE
fJR/smHDKbv0vFoGVTlEyoKEJiTwGNI61xsK77wbkHGCNJbFT9GiBDv7AHqJZUi8
Rnd9gPK9sl1En5AnDGfoaS8QLPXnMvbnQOBPbI5+fuIy0axfxuyKQSDRWiunHHvV
kHhdCBduqDcE3RjsuoeaiwJf1SZt8Kb6R2Jrf2GDaqG5sGuCmS8lDFpwr7dTlLFc
nAvZ4av9vIagHFisv8gLLEmeZuTInGC7KT6WfQw+B8Km4XRZ+iWqtU9yIRVOJs9m
avn7417lpwIDAQABo4IChTCCAoEwHQYDVR0OBBYEFN0e+qfv6luXz5Gg2Ev+Pdzv
DSV8MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzE1MDI5My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAGusKAMEANBMKzANBgkqhkiG9w0B
AQsFAAOCAQEAf/1UK++ns/Fa/9DO2TJv2jPpXq+rVXxMj9V7Me7d9MMK6ckgI67Y
C4tm3PkNM78N/HIxc87xR1GVawUKqnx8Yj59s4B0G2ocQOOr0xSWBv4jR9wFOVvj
YKXFuvwZpkZlfIxhvO5VkcZWaPX+SEQbhWBMsqFtFFjpCqKEkf/CnIOjeN1z509I
vmlkzqPxHIiRFZCpIK7tUARNIFu2VeNS4XEJXQN9SQhr0c1XZdKRA7dIGdeeKJMY
uRaTZVJpd62s5koFROlYRWPHLvd5UQA64fnjOJRKP/nGmE24kqdivdV/GwnzRmH7
Z2vs+0dyCyy1dshqaiFmmKRByTzfUxrOOg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:24:26 2026 by rpki-client