Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/3d15cd54-a638-3fbb-9d72-ed29a2cc764e.roa
File:                     3d15cd54-a638-3fbb-9d72-ed29a2cc764e.roa (raw, json)
Hash identifier:          MaJdZPHjkcUWWFcqxRjbaiW/wfCq4oq62y8WRrJlqu4=
Subject key identifier:   AF:2B:C1:91:E3:AA:CD:E5:F9:A3:65:5D:FB:C7:6F:C4:9B:0D:AC:CA
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584CB28732D6174394C7981B9400
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/3d15cd54-a638-3fbb-9d72-ed29a2cc764e.roa
Signing time:             Fri 30 Jan 2026 14:00:40 +0000
ROA not before:           Fri 30 Jan 2026 14:00:40 +0000
ROA not after:            Thu 30 Apr 2026 13:00:40 +0000
asID:                     15313
IP address blocks:        150.252.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b2:87:32:d6:17:43:94:c7:98:1b:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Jan 30 14:00:40 2026 GMT
            Not After : Apr 30 13:00:40 2026 GMT
        Subject: CN=379cefa2-7ced-43fe-85cc-f9389354597e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:39:7d:34:3c:81:15:4d:a2:38:93:ab:9c:6f:
                    7b:b3:45:1c:f3:cc:85:de:f9:f7:05:56:dc:2c:06:
                    aa:77:3f:2b:29:aa:7e:ff:84:d8:58:ff:4e:08:5f:
                    fc:22:6d:bd:a9:dd:d6:97:74:4f:53:e3:e7:d4:82:
                    9c:0c:1d:de:38:86:a7:de:7d:4e:a4:f6:99:28:68:
                    bf:38:79:6f:5d:56:f4:76:ed:5a:a0:13:dd:e8:6e:
                    0c:7d:6f:b0:3e:31:a6:c0:08:91:32:0f:02:00:b3:
                    41:13:49:aa:ad:5d:4f:81:60:6b:a3:94:41:9c:c6:
                    dd:c8:6c:84:d6:67:5d:c3:cc:ff:d4:42:26:18:19:
                    1e:e8:31:a0:4c:01:52:d8:c2:a7:1d:60:3c:b9:f4:
                    cb:93:cb:f0:f4:ec:63:85:3c:49:0c:64:31:34:eb:
                    02:a1:2e:68:df:00:bf:e2:dc:d4:f6:77:0f:0b:05:
                    15:2c:03:ec:e6:6b:1a:ed:13:8f:c3:1c:2c:78:df:
                    b1:dd:48:a0:2a:39:68:7a:6b:25:3c:0e:72:53:29:
                    2f:69:7c:71:5a:87:ef:1e:09:15:7f:2f:12:a9:7c:
                    d9:e0:2f:48:f9:b4:5c:1d:8f:28:21:e2:ca:0a:63:
                    ca:84:7f:ec:83:16:c9:6c:0b:b3:13:16:8b:94:63:
                    e0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:2B:C1:91:E3:AA:CD:E5:F9:A3:65:5D:FB:C7:6F:C4:9B:0D:AC:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/3d15cd54-a638-3fbb-9d72-ed29a2cc764e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:e1:66:9d:3c:0f:22:9f:fb:2c:e8:e0:5f:98:62:dd:28:26:
         1d:49:5d:d3:d7:2d:71:ae:9b:75:70:f9:d6:02:36:2f:b5:d3:
         4c:3b:a6:df:99:66:55:06:94:a8:cd:c1:b8:d2:22:e3:b5:0e:
         15:47:a2:15:3c:ed:0b:b4:b4:a3:12:e4:99:5b:02:cc:3b:f0:
         25:de:4d:e1:11:ed:af:6e:b6:72:31:cf:84:af:7e:c4:0f:aa:
         e8:84:d9:16:c7:10:66:13:63:e9:e8:56:7a:25:d1:33:37:2b:
         e2:cf:ed:01:4e:c6:28:30:e6:d9:96:84:b5:14:1a:e6:66:7a:
         d0:7e:b8:ff:0b:cd:a2:e2:01:54:2d:02:ff:df:58:28:9e:0f:
         33:24:21:c8:84:ca:4f:f0:7a:56:5e:83:cf:de:87:9c:89:2c:
         94:21:2c:a9:f4:e6:b6:f5:2b:e4:7f:f5:7f:8f:31:83:63:1f:
         56:c4:f1:93:f1:39:d4:7a:c7:36:05:e1:e9:87:a5:c6:9c:71:
         fa:66:23:bb:37:0b:7f:97:c8:b6:1a:de:27:f0:62:65:2d:c4:
         b3:bb:3c:fe:87:53:e0:5c:bb:d2:48:d4:8e:3b:20:bb:ac:7a:
         86:ca:56:b0:d2:9c:f4:30:89:0c:6c:62:06:64:f9:eb:fc:97:
         b8:1d:c3:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyhzLWF0OUx5gblAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz
ZjhjMB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk
Mzc5Y2VmYTItN2NlZC00M2ZlLTg1Y2MtZjkzODkzNTQ1OTdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzl9NDyBFU2iOJOrnG97s0Uc88yF3vn3BVbc
LAaqdz8rKap+/4TYWP9OCF/8Im29qd3Wl3RPU+Pn1IKcDB3eOIan3n1OpPaZKGi/
OHlvXVb0du1aoBPd6G4MfW+wPjGmwAiRMg8CALNBE0mqrV1PgWBro5RBnMbdyGyE
1mddw8z/1EImGBke6DGgTAFS2MKnHWA8ufTLk8vw9OxjhTxJDGQxNOsCoS5o3wC/
4tzU9ncPCwUVLAPs5msa7ROPwxwseN+x3UigKjloemslPA5yUykvaXxxWofvHgkV
fy8SqXzZ4C9I+bRcHY8oIeLKCmPKhH/sgxbJbAuzExaLlGPghwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK8rwZHjqs3l+aNlXfvHb8SbDazKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm
ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvM2QxNWNkNTQtYTYzOC0z
ZmJiLTlkNzItZWQyOWEyY2M3NjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm
ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx
M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj
ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlvzEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE3hZp08DyKf+yzo4F+YYt0oJh1JXdPXLXGum3Vw+dYCNi+100w7pt+Z
ZlUGlKjNwbjSIuO1DhVHohU87Qu0tKMS5JlbAsw78CXeTeER7a9utnIxz4SvfsQP
quiE2RbHEGYTY+noVnol0TM3K+LP7QFOxigw5tmWhLUUGuZmetB+uP8LzaLiAVQt
Av/fWCieDzMkIciEyk/welZeg8/eh5yJLJQhLKn05rb1K+R/9X+PMYNjH1bE8ZPx
OdR6xzYF4emHpcaccfpmI7s3C3+XyLYa3ifwYmUtxLO7PP6HU+Bcu9JI1I47ILus
eobKVrDSnPQwiQxsYgZk+ev8l7gdwxA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:41 2026 by rpki-client