Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/98efc1a1-5462-3404-9b0d-2d526095567d.roa
File:                     98efc1a1-5462-3404-9b0d-2d526095567d.roa (raw, json)
Hash identifier:          ih3lm0Nvjv0xkjsWl0sy8It7ZL5dCfcuaPhWAdxXVaM=
Subject key identifier:   42:99:B9:CC:E5:8E:33:90:2E:45:8F:9A:7A:57:99:A6:D9:B4:D4:80
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584F15CCF200191095697E5F1120
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/98efc1a1-5462-3404-9b0d-2d526095567d.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     26744
IP address blocks:        150.252.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:f2:00:19:10:95:69:7e:5f:11:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=15ea0cc2-475c-46ce-abe9-4895d3a86524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7e:cb:2e:5b:2f:1d:00:f2:0c:6a:fb:8e:76:
                    1d:ff:fa:b1:ca:37:22:e3:6e:8a:89:70:f0:2c:7e:
                    aa:4d:a9:c9:91:77:f9:b3:fc:e1:2a:32:c6:f8:b7:
                    51:f2:73:a1:5c:02:d8:99:da:77:ee:30:5f:c0:a1:
                    e4:8f:05:a9:76:14:37:5a:bf:47:fa:45:2c:09:30:
                    ad:47:63:b6:69:52:58:2b:95:ac:dc:10:5a:75:94:
                    03:85:7e:10:49:e6:be:3d:2d:7c:94:e0:75:84:f7:
                    71:75:1e:aa:01:8c:d1:8c:3a:cb:b4:01:3f:14:c9:
                    a0:aa:1a:e8:a8:29:b3:4b:14:1c:0b:d1:fc:9b:c2:
                    9e:2c:05:d9:bc:b5:f1:b4:4e:4e:41:75:2a:4d:df:
                    4d:17:16:0a:12:cb:fa:6d:90:f7:b5:92:c0:44:c0:
                    44:72:43:49:a0:8b:43:8c:56:8b:c2:3f:6c:3e:a9:
                    f8:9f:5a:93:c6:5e:10:93:63:19:ae:2a:31:92:45:
                    68:78:3b:c3:7d:ce:d1:fc:91:bb:80:62:84:fb:d9:
                    57:3a:80:cd:90:9f:58:d3:3c:d0:d9:78:4f:27:23:
                    87:e2:54:f5:43:f8:eb:44:a4:55:33:23:1d:51:4a:
                    fb:14:3b:a7:a5:2e:3e:cb:59:50:2e:7f:0b:b1:de:
                    7d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:99:B9:CC:E5:8E:33:90:2E:45:8F:9A:7A:57:99:A6:D9:B4:D4:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/98efc1a1-5462-3404-9b0d-2d526095567d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:f2:1c:e7:9e:76:ce:95:a0:0b:88:e1:66:bb:bc:fb:50:c3:
         49:24:8c:d9:76:bd:64:17:aa:d3:e9:34:e9:d3:85:0e:61:8c:
         ef:bb:88:b2:f2:81:0f:5d:07:93:65:a1:fa:96:23:7d:e1:7f:
         2e:af:ff:d6:0a:b2:91:c0:a3:64:52:0b:97:54:1a:c7:47:19:
         be:a6:39:88:bd:a7:75:20:e9:c7:4f:ae:af:c0:93:b6:df:4c:
         e5:b4:71:b2:1a:0a:04:36:6c:db:b8:a3:e6:86:38:cf:cb:74:
         3d:94:39:91:13:6c:00:1b:d1:18:c3:d6:d8:e8:f0:88:05:f9:
         7e:1b:55:e7:fb:9e:8e:e6:37:9c:24:6b:7f:f1:20:b5:91:dd:
         4b:25:c1:0a:c8:7f:cf:68:d3:45:14:77:3c:d5:f6:a9:ce:af:
         82:9a:9b:ef:e1:20:46:44:3e:29:7c:92:d0:3a:77:7f:9c:16:
         d8:27:74:f1:aa:6b:13:43:02:e5:af:52:99:a7:d5:c5:4d:fb:
         69:ce:c2:54:98:80:6e:62:76:97:50:a4:c7:5e:08:7d:40:88:
         89:1f:95:f6:b6:d4:b5:d9:1d:f2:e7:7c:1d:a9:dc:9a:09:a3:
         d3:aa:67:81:f7:18:d8:d4:c8:e8:0b:28:35:bd:18:2e:94:b5:
         fc:c1:98:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:01:30 2026 by rpki-client