Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/a9bcbc84-a116-3b19-9bd9-c40a4001f050.roa
File:                     a9bcbc84-a116-3b19-9bd9-c40a4001f050.roa (raw, json)
Hash identifier:          2LRNfbuubBq06eAYrda25iCrpbOB0v27VGe7mrjTz9w=
Subject key identifier:   2C:A3:D2:0A:EB:4D:85:A0:83:8F:A3:81:F6:D7:6F:65:97:42:DA:E7
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584CB287332D57FD933B4CA31540
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/a9bcbc84-a116-3b19-9bd9-c40a4001f050.roa
Signing time:             Fri 30 Jan 2026 14:00:40 +0000
ROA not before:           Fri 30 Jan 2026 14:00:40 +0000
ROA not after:            Thu 30 Apr 2026 13:00:40 +0000
asID:                     15313
IP address blocks:        150.252.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b2:87:33:2d:57:fd:93:3b:4c:a3:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Jan 30 14:00:40 2026 GMT
            Not After : Apr 30 13:00:40 2026 GMT
        Subject: CN=1e51364d-0444-4ed2-8897-30284a98d208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6d:0b:9f:ef:b4:97:1a:f5:8c:c0:4e:fc:64:
                    59:05:3e:ee:5f:97:b4:39:48:f0:6a:29:25:90:39:
                    e0:70:15:8d:01:e0:58:ae:07:bb:81:e4:d3:23:1d:
                    95:65:d3:20:76:e3:01:84:a1:36:8f:08:7d:19:69:
                    a7:03:c4:1b:f1:23:2c:04:48:22:51:53:63:4a:7b:
                    8d:d2:3f:e4:cd:7a:34:c9:ae:2c:eb:0a:67:59:96:
                    47:af:99:03:26:e2:bf:cd:c8:15:31:18:df:c9:0f:
                    9d:93:3c:d7:5b:37:6c:d6:33:fe:c3:56:05:cd:3c:
                    86:61:6d:0f:33:27:c5:8d:88:59:4f:93:15:28:bb:
                    68:26:11:30:cd:e4:14:41:58:e1:df:0d:e1:b3:a5:
                    d3:7b:ab:27:c5:db:23:97:e5:7a:e6:c2:6a:12:63:
                    51:45:da:4b:9e:02:54:66:eb:8c:34:67:b8:5e:b5:
                    07:82:17:69:6e:d2:62:f9:db:e0:83:04:89:66:cf:
                    f9:36:15:a1:82:60:a3:7e:36:16:77:70:3c:67:4c:
                    5b:b3:5c:14:86:db:43:f4:79:b4:79:aa:41:29:7f:
                    63:61:29:8f:ff:45:65:98:e7:f8:c9:e7:d0:04:03:
                    8f:91:e2:1e:d8:8a:8e:f1:44:f6:95:f9:61:cb:69:
                    7c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A3:D2:0A:EB:4D:85:A0:83:8F:A3:81:F6:D7:6F:65:97:42:DA:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/a9bcbc84-a116-3b19-9bd9-c40a4001f050.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:54:91:89:2a:11:e5:75:e6:7b:0f:8c:9d:53:c4:46:a1:de:
         23:8d:be:01:8d:6e:cc:c2:8a:e1:05:ae:e8:b8:a0:ef:96:74:
         e3:2b:6e:34:5c:95:ef:9b:23:bb:c4:8b:43:d2:21:54:e0:bf:
         5a:5b:94:7e:9f:2b:04:93:00:8f:27:75:a6:73:e3:12:f1:44:
         d8:74:04:af:11:83:7e:0b:c8:bf:5c:51:80:6e:1f:d6:4d:66:
         21:22:b5:2d:b2:07:d4:b0:9a:9a:bb:b2:48:63:84:71:52:69:
         a5:37:33:99:ec:17:da:0a:05:72:ee:1e:86:20:ef:04:88:b4:
         48:64:f2:e2:71:76:09:07:04:a0:db:2d:7a:e7:0b:47:49:fa:
         0e:26:fd:ee:58:b1:43:f5:5e:bd:d8:27:fd:d5:26:f7:dc:94:
         c6:3b:60:d4:1d:95:78:fe:21:e3:be:89:d0:ae:a6:ff:a2:c9:
         03:96:d8:6f:53:92:12:1a:55:8f:2b:8e:8d:eb:74:8e:78:4e:
         a0:a1:c3:04:e5:d5:6f:61:16:e7:63:53:4b:cd:56:36:7d:0c:
         ec:44:b0:16:b6:bb:d1:e8:10:bc:f6:2f:66:3f:11:4d:be:bf:
         ba:b7:c8:d8:e4:23:78:c1:61:6d:91:11:a9:4e:09:5a:0e:00:
         1d:73:f5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:26:11 2026 by rpki-client