Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/af688446-fb3c-3d46-b9d5-402fe1dbc68a.roa
File:                     af688446-fb3c-3d46-b9d5-402fe1dbc68a.roa (raw, json)
Hash identifier:          ZzZ2zzXFyc1oHnZxayndHwaIkStxxCe/5N4ESR3iPeI=
Subject key identifier:   9C:6F:00:AB:A9:7D:07:36:31:23:C8:B8:25:56:C1:FA:58:02:20:C9
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584F15CCF1F43625584C6529AC00
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/af688446-fb3c-3d46-b9d5-402fe1dbc68a.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     26744
IP address blocks:        150.252.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:f1:f4:36:25:58:4c:65:29:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=3f17d7e5-1dab-40a2-9b0f-6b649ae05bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c3:c7:9e:e8:e0:92:cd:1a:77:84:5f:8d:85:
                    73:59:0b:4e:98:88:c5:51:73:53:3c:4e:ab:77:de:
                    13:75:5e:7b:d7:3a:43:c0:86:9b:e3:9f:d3:dc:d8:
                    75:45:c0:a6:c1:aa:68:32:82:52:9b:71:c3:a2:03:
                    17:7a:a6:56:d5:9c:ee:49:bd:35:44:82:a5:4b:34:
                    8c:83:b2:31:8d:ba:bd:03:5a:11:42:57:05:c6:e7:
                    3c:42:49:42:31:57:cb:5b:83:9d:7c:7b:7c:de:5d:
                    b5:e0:fd:e3:c8:d0:c5:0d:4c:4e:9a:ff:25:b4:a3:
                    60:d5:97:9b:4c:91:1c:d8:0e:09:7a:26:90:53:d5:
                    f5:8c:cd:7a:20:ae:35:80:ef:f1:41:ba:10:e7:bc:
                    29:c4:f1:1e:69:f5:5f:eb:bb:c3:91:47:e1:18:dc:
                    0d:0d:ea:c1:3b:4a:a6:3c:d5:5b:24:19:c1:80:28:
                    f7:d7:0e:2f:48:71:c7:96:38:e8:f2:1b:8d:3f:46:
                    cc:fa:f4:17:32:44:d0:c2:56:b4:ab:fd:6e:f8:1a:
                    41:e3:73:ba:97:27:e9:6c:a1:40:a3:37:6a:9a:c4:
                    e3:69:5a:5a:43:23:37:86:be:8a:db:9a:2f:33:f0:
                    2b:b8:f3:2c:88:77:d3:61:fa:27:a2:1d:0f:f1:e2:
                    e6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6F:00:AB:A9:7D:07:36:31:23:C8:B8:25:56:C1:FA:58:02:20:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/af688446-fb3c-3d46-b9d5-402fe1dbc68a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:f7:19:1b:3c:7a:f9:89:b6:33:4f:35:78:87:62:8d:ac:f5:
         9c:24:cd:94:1f:9c:4f:bd:09:3d:49:c2:18:4d:2d:90:a6:37:
         d4:fb:c3:c4:29:f5:c4:4b:5b:43:de:44:e7:38:24:60:a8:6d:
         31:18:e4:1d:b2:9f:a6:75:27:7a:44:ae:bc:ac:bd:7f:0e:72:
         3c:7c:0c:42:7b:8b:c8:70:59:a5:c0:4c:0c:4b:75:44:45:23:
         8a:9f:54:b3:5a:86:a2:49:9f:d9:4f:b4:fb:5e:09:88:72:71:
         58:7d:5d:a1:58:63:0b:b5:d8:4f:bb:a3:eb:a3:d5:4b:9f:a6:
         d6:5a:c6:ec:10:a7:7d:c7:6a:51:ba:22:68:bd:26:88:42:95:
         08:ba:56:7c:e9:b6:7f:06:d5:a3:0d:dc:0e:39:5a:40:54:05:
         7a:ff:fb:aa:53:a4:4b:8e:0f:4f:c9:05:65:02:1f:ce:b7:7e:
         47:4a:af:ad:9f:62:5f:f7:51:33:f5:61:cd:9d:2b:f9:3f:ab:
         89:52:25:b6:25:ed:ab:d7:97:bd:03:5e:1b:f7:94:dc:7d:a1:
         c2:ad:91:e6:5c:2f:35:a6:ca:cc:e9:e9:1e:4b:e2:6d:74:cb:
         74:8b:e2:38:ae:54:20:cc:c2:dc:d7:16:26:73:42:68:5b:d2:
         1d:e9:a3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:08:41 2026 by rpki-client