Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/4f230356-edb1-3718-812a-5f636fb960c9.roa
File:                     4f230356-edb1-3718-812a-5f636fb960c9.roa (raw, json)
Hash identifier:          8gQzD3b1CLRlQHqYt5uCfjlfZ2uAvJwPfdJEFl/6Ck0=
Subject key identifier:   E3:35:2D:1E:13:FD:D9:13:98:90:69:E2:6A:93:2B:8E:2E:F2:2C:38
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584A2C201A38E0AB2F0A317BC7C8
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/4f230356-edb1-3718-812a-5f636fb960c9.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     26744
IP address blocks:        150.252.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:1a:38:e0:ab:2f:0a:31:7b:c7:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=d38b33d6-292e-4494-b749-8620ba614055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d2:51:f3:d8:99:d6:32:57:19:cc:0d:4e:b3:
                    3a:4a:9b:fa:33:02:5a:23:46:80:16:18:ca:d6:f1:
                    c8:41:e2:fe:43:2c:f8:cc:79:f6:a7:bc:d4:14:ed:
                    3e:d4:92:e5:80:3f:d4:0e:61:84:85:68:e2:24:96:
                    ca:01:bc:28:63:42:f4:97:4f:5e:1d:14:15:df:60:
                    0d:79:00:14:84:7e:87:d3:7c:d4:28:7c:84:cc:0a:
                    56:f4:f7:9a:d3:37:77:8a:34:bb:b4:5b:ee:37:aa:
                    26:b6:b9:6b:c6:0b:36:c6:e7:7d:ad:04:fb:78:88:
                    6b:c7:bb:9e:55:38:78:51:39:71:f6:27:bb:f7:18:
                    7f:b1:6d:46:35:d4:0f:35:fa:81:96:ee:4e:bc:61:
                    bf:79:0b:cd:53:d1:f8:ef:42:ab:ea:3f:e3:28:0f:
                    33:dc:80:1e:44:6d:a8:9e:3f:59:73:d9:bf:d5:52:
                    fe:d0:46:27:aa:02:07:52:fb:9a:84:f2:5c:d8:3e:
                    58:d0:f7:64:5d:00:7c:d0:7b:14:01:cd:33:ab:88:
                    3f:33:44:d8:51:0f:8d:6d:9d:d7:b9:b5:25:2a:42:
                    9c:35:83:e8:9e:f5:61:6c:72:10:02:d5:3a:ef:64:
                    35:b0:ea:78:2e:1e:e1:d5:52:36:e4:85:73:09:91:
                    56:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:35:2D:1E:13:FD:D9:13:98:90:69:E2:6A:93:2B:8E:2E:F2:2C:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/4f230356-edb1-3718-812a-5f636fb960c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:62:f3:c7:e8:6a:18:0e:13:58:98:e5:ee:61:25:38:81:1e:
         73:3b:8d:94:39:fe:b5:b7:c0:34:f7:da:4f:8a:43:3e:73:71:
         14:35:9b:c8:67:38:79:7f:a7:ea:31:bd:d7:5f:98:93:67:49:
         41:89:b6:3a:7e:f8:e0:33:e1:86:27:64:5a:1f:43:a3:58:9c:
         54:8c:1c:9c:e4:93:43:c7:84:be:f0:ab:68:7d:1d:53:14:87:
         db:e2:ce:b1:d2:64:d5:51:a5:4d:f5:6f:6b:19:cf:3b:69:59:
         0b:eb:9a:31:d8:45:e0:70:43:d9:cc:71:72:99:cd:31:84:6d:
         6d:c4:8e:f9:69:2b:e4:1d:19:ba:5e:4b:27:92:3b:ae:28:91:
         8b:b0:29:bd:94:a6:70:ab:c2:1e:84:16:5e:e8:8c:3f:74:b3:
         79:df:b4:2e:88:da:14:dd:a7:a7:29:18:cc:ac:0c:9e:7d:46:
         c7:64:b8:a6:04:9f:04:fd:60:06:66:28:59:c0:ee:67:4e:f6:
         22:e2:71:22:a0:6b:80:d0:7d:a0:e0:9e:ac:32:8a:93:6d:e5:
         20:04:71:25:54:dc:b9:90:f8:b9:64:f4:fe:6c:b4:dc:f3:04:
         ff:5e:6f:af:57:92:c7:69:8e:1d:07:b0:1f:98:a2:5f:e7:d7:
         4e:f7:0b:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosIBo44KsvCjF7x8gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz
ZjhjMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk
ZDM4YjMzZDYtMjkyZS00NDk0LWI3NDktODYyMGJhNjE0MDU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNJR89iZ1jJXGcwNTrM6Spv6MwJaI0aAFhjK
1vHIQeL+Qyz4zHn2p7zUFO0+1JLlgD/UDmGEhWjiJJbKAbwoY0L0l09eHRQV32AN
eQAUhH6H03zUKHyEzApW9Pea0zd3ijS7tFvuN6omtrlrxgs2xud9rQT7eIhrx7ue
VTh4UTlx9ie79xh/sW1GNdQPNfqBlu5OvGG/eQvNU9H470Kr6j/jKA8z3IAeRG2o
nj9Zc9m/1VL+0EYnqgIHUvuahPJc2D5Y0PdkXQB80HsUAc0zq4g/M0TYUQ+NbZ3X
ubUlKkKcNYPonvVhbHIQAtU672Q1sOp4Lh7h1VI25IVzCZFWSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOM1LR4T/dkTmJBp4mqTK44u8iw4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm
ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvNGYyMzAzNTYtZWRiMS0z
NzE4LTgxMmEtNWY2MzZmYjk2MGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm
ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx
M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj
ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElvzAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHJi88foahgOE1iY5e5hJTiBHnM7jZQ5/rW3wDT32k+KQz5zcRQ1m8hn
OHl/p+oxvddfmJNnSUGJtjp++OAz4YYnZFofQ6NYnFSMHJzkk0PHhL7wq2h9HVMU
h9vizrHSZNVRpU31b2sZzztpWQvrmjHYReBwQ9nMcXKZzTGEbW3EjvlpK+QdGbpe
SyeSO64okYuwKb2UpnCrwh6EFl7ojD90s3nftC6I2hTdp6cpGMysDJ59RsdkuKYE
nwT9YAZmKFnA7mdO9iLicSKga4DQfaDgnqwyipNt5SAEcSVU3LmQ+Llk9P5stNzz
BP9eb69Xksdpjh0HsB+Yol/n1073C+4=
-----END CERTIFICATE-----
Generated at Mon Jun 16 20:58:28 2025 by rpki-client