Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/1d4b81ab-a172-31e6-b5cf-6c3e052b40b3.roa
File:                     1d4b81ab-a172-31e6-b5cf-6c3e052b40b3.roa (raw, json)
Hash identifier:          DYXBpNwsF2Y/o0gh962D8fBOmIP/LEspZMIKDJoEHdI=
Subject key identifier:   58:BA:8D:00:93:2A:51:3F:C9:43:78:D9:7F:80:E9:EF:4A:95:FA:F1
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584F15CCF140BFC0A23899A656C0
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/1d4b81ab-a172-31e6-b5cf-6c3e052b40b3.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     15313
IP address blocks:        150.252.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:f1:40:bf:c0:a2:38:99:a6:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=087ede71-260f-4128-8b50-75e47590903a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d4:18:f0:9d:92:6e:4e:ec:b5:2e:2e:49:4f:
                    22:99:d4:3a:8f:f9:ea:4b:d3:7d:57:dd:06:7c:17:
                    4e:bb:41:aa:7e:ec:58:ee:ed:9d:6f:48:52:5f:67:
                    0c:f9:75:0c:a7:b6:d2:46:f6:11:63:c3:c8:da:8d:
                    20:82:92:c4:9c:f1:e5:4c:2a:fb:64:a5:48:b9:26:
                    d9:81:f8:9c:32:6d:a8:d8:31:42:63:6a:ac:c8:9a:
                    57:0d:f2:68:83:42:8f:4c:97:64:42:2b:3d:90:04:
                    ce:27:2e:76:bb:5e:e3:6d:06:54:a5:bf:c7:ae:c6:
                    98:20:75:da:4e:52:27:ea:3a:41:9e:63:3a:15:45:
                    b8:98:fd:bf:e6:23:4e:69:21:73:30:b3:4a:ca:62:
                    58:29:d4:cd:70:b5:7c:3c:ff:03:4f:32:9f:25:d0:
                    02:79:40:7f:1a:e0:94:bf:8d:17:77:3f:ce:89:87:
                    6e:82:65:93:67:d1:a7:c4:5f:b8:11:e8:fd:77:6a:
                    ad:f2:58:7e:59:cc:90:40:4d:70:cb:f7:4f:54:aa:
                    03:1e:6c:59:53:54:de:29:98:56:0a:4d:9a:78:6c:
                    8c:d4:a7:f2:11:bd:42:20:78:24:77:56:ec:9c:87:
                    61:35:6c:47:41:b2:85:63:27:ed:02:bb:3d:8d:8b:
                    8a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BA:8D:00:93:2A:51:3F:C9:43:78:D9:7F:80:E9:EF:4A:95:FA:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/1d4b81ab-a172-31e6-b5cf-6c3e052b40b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:bf:e6:18:90:cb:96:66:14:44:69:38:8e:0c:80:ae:ce:fe:
         db:22:5a:94:18:c9:31:24:5a:b3:11:8a:11:63:52:d4:83:e3:
         31:71:35:6d:80:6a:2d:34:eb:dc:d5:dd:13:70:d5:26:4b:e1:
         a9:32:40:d8:b8:29:6b:f4:c5:a6:b6:35:68:91:32:f9:39:9f:
         7b:3a:d1:5e:61:4f:7b:81:bf:5b:db:40:4a:eb:57:60:cd:09:
         f0:73:5a:21:1c:62:aa:d0:35:9f:57:ef:26:11:4a:73:36:19:
         77:06:85:da:e4:2a:53:da:62:bb:43:d0:43:91:0d:6f:55:db:
         0d:fd:e7:61:b1:c0:80:5c:23:6d:31:16:58:38:ab:01:6f:28:
         06:c0:c9:7b:aa:a4:65:aa:af:d2:2d:51:66:8a:18:79:a0:b7:
         a0:72:6a:45:fd:48:87:e3:b6:b1:80:bf:32:5e:4d:83:c8:00:
         25:ed:8c:e4:99:53:4c:1b:2a:97:a9:78:47:e9:83:e5:2e:dd:
         f1:9f:01:4f:57:ad:bf:30:e4:1f:b5:cb:df:d6:db:5e:93:a7:
         41:b7:95:9c:25:e7:df:67:98:4c:85:2f:49:76:28:38:f2:be:
         31:3a:71:ae:83:1b:83:60:f8:8d:ec:33:02:36:8c:01:9d:55:
         36:29:a3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:46:49 2026 by rpki-client