Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/534fe870-258f-3234-99f0-f2bf51fcbb0d.roa
File:                     534fe870-258f-3234-99f0-f2bf51fcbb0d.roa (raw, json)
Hash identifier:          48NJ1hh8vsB56ZgQlUoPb1SOdpmyALx9lZVzxcT87hc=
Subject key identifier:   24:14:DB:9D:46:9E:3E:91:28:FB:87:53:47:7B:6E:F1:E4:59:C0:6C
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584CB2873358276B1627F5088980
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/534fe870-258f-3234-99f0-f2bf51fcbb0d.roa
Signing time:             Fri 30 Jan 2026 14:00:40 +0000
ROA not before:           Fri 30 Jan 2026 14:00:40 +0000
ROA not after:            Thu 30 Apr 2026 13:00:40 +0000
asID:                     26744
IP address blocks:        150.252.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b2:87:33:58:27:6b:16:27:f5:08:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Jan 30 14:00:40 2026 GMT
            Not After : Apr 30 13:00:40 2026 GMT
        Subject: CN=b62e4d06-b32a-4d77-927f-95a4cd69cb8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:93:3f:e8:55:b9:10:8d:01:25:5d:d1:46:0a:
                    67:8c:e7:5c:1d:4a:d5:4f:b3:27:5d:7b:92:b3:0c:
                    be:81:66:eb:ea:aa:65:37:0a:b0:95:62:01:3a:bc:
                    64:1c:ed:fa:5d:1a:03:e4:b0:c3:8e:b8:f6:ee:92:
                    47:3e:26:32:13:4e:56:6e:5d:53:7e:39:a9:64:c2:
                    ad:5b:4a:c3:0a:08:26:6e:84:56:a8:b5:bd:27:29:
                    d3:83:5c:65:15:25:b9:7e:de:b7:2f:ca:be:9d:95:
                    ab:9e:82:c6:b3:75:dc:f3:5f:f0:38:e2:56:cb:de:
                    3f:ba:3e:e5:25:fb:b1:2d:63:ec:ef:72:d3:14:27:
                    5c:05:a4:ca:e9:33:e6:81:19:26:99:d5:fe:b7:cb:
                    c0:70:97:95:01:57:dc:5a:20:53:c2:78:ac:be:a7:
                    c2:c9:9e:97:a0:3f:db:94:fc:38:8c:d7:ce:03:86:
                    52:dd:fd:e1:e2:7f:4c:45:bf:c7:ae:df:e6:62:1d:
                    fc:e6:57:8c:ae:f8:03:3a:d9:e5:6f:28:77:25:a4:
                    5c:88:4e:5b:4c:07:4b:29:c3:1b:10:36:7f:a6:da:
                    8b:23:f1:29:61:a3:b3:15:0e:56:86:9b:ed:e2:46:
                    a1:52:db:3d:81:94:ed:88:63:d8:99:0d:0b:8d:d6:
                    55:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:14:DB:9D:46:9E:3E:91:28:FB:87:53:47:7B:6E:F1:E4:59:C0:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/534fe870-258f-3234-99f0-f2bf51fcbb0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:28:03:3d:95:ed:8d:a8:02:64:d3:80:7f:71:83:87:a6:0b:
         72:2e:8d:6c:a7:58:58:d6:37:67:7b:4b:e5:55:19:6a:31:71:
         9b:ff:75:6b:d3:b2:6f:02:48:07:6f:5b:45:75:f6:ae:63:ab:
         ba:13:f5:f3:13:8c:63:3b:86:48:01:11:e2:71:9b:85:ca:2a:
         00:f6:4d:e3:8b:62:9a:4c:2d:99:20:cc:d3:e0:02:f5:bb:ec:
         3d:18:55:4f:ae:a6:fb:ff:a6:d4:cf:52:61:f8:ff:01:e8:a7:
         24:58:de:c0:1b:5f:ab:dc:ff:62:71:ee:76:86:8b:bb:1b:7d:
         67:92:11:9e:fa:0c:c1:02:da:ce:9d:22:78:88:39:22:9f:e5:
         8c:83:11:14:7b:20:2e:10:45:d2:e0:2f:1b:f7:68:17:c4:3e:
         37:74:e1:88:be:18:c0:e9:ca:1d:b3:01:2a:18:59:91:56:6b:
         37:be:91:bf:ed:f8:5c:fa:52:d4:b3:69:25:6a:8b:d6:ae:04:
         90:1b:60:dd:2f:66:74:44:fb:8d:d6:db:e4:2e:e3:9d:83:b4:
         11:03:7e:6e:10:b0:42:4e:a9:24:63:b6:7b:c3:c3:eb:68:51:
         e8:ad:fa:f2:58:a3:15:34:a1:e9:64:64:83:4b:c0:ae:ed:70:
         9c:7c:cf:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:49:09 2026 by rpki-client