Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/f99b7391-85a3-3cb4-a259-107cd981ef97.roa
File:                     f99b7391-85a3-3cb4-a259-107cd981ef97.roa (raw, json)
Hash identifier:          9tDuZkXSsA5dbQJkAGtosAsgjWEje0g7Wcv4kKVsKaU=
Subject key identifier:   C0:EB:CC:33:1C:BE:00:B6:34:95:0C:87:AA:24:0E:CD:B9:E8:61:1C
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584CB28732F7AA381519741C61C0
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/f99b7391-85a3-3cb4-a259-107cd981ef97.roa
Signing time:             Fri 30 Jan 2026 14:00:40 +0000
ROA not before:           Fri 30 Jan 2026 14:00:40 +0000
ROA not after:            Thu 30 Apr 2026 13:00:40 +0000
asID:                     15313
IP address blocks:        150.252.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b2:87:32:f7:aa:38:15:19:74:1c:61:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Jan 30 14:00:40 2026 GMT
            Not After : Apr 30 13:00:40 2026 GMT
        Subject: CN=6ee0cc78-da09-4cdc-8c5a-143c4b958169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:61:e4:ad:14:cf:1d:9c:67:88:ca:19:82:83:
                    c5:eb:96:30:5c:0b:67:6e:8d:6e:2c:0c:23:b6:07:
                    e3:8f:0b:c9:a2:fa:42:e0:2b:86:02:1c:ea:6a:3e:
                    76:bc:36:ac:f6:35:9c:11:33:ec:ce:74:5c:ae:db:
                    61:d4:97:a6:55:51:ef:bc:82:c1:19:fd:46:1c:39:
                    b9:d1:e4:27:24:3c:65:ce:bd:60:4b:f5:72:20:dc:
                    39:6f:0b:04:41:a2:f5:a4:0e:82:17:f8:29:a3:53:
                    15:9e:99:a8:8f:fb:c4:f2:58:02:7e:80:08:d4:9a:
                    ba:56:0b:fb:55:da:05:6e:fa:7d:a0:e3:55:57:76:
                    f9:2d:43:a3:40:e5:e4:46:ed:6a:46:42:8b:41:d1:
                    aa:50:15:bd:db:4f:86:9d:70:17:fc:71:25:e4:df:
                    e5:05:ed:04:19:ca:a9:c5:53:50:ca:84:ab:ed:30:
                    ee:af:ec:89:c2:b2:b3:d4:48:38:af:8f:f8:fc:a2:
                    23:2d:6d:ad:91:e4:0b:4b:09:0c:04:cb:21:66:e8:
                    ee:46:58:5b:57:60:67:eb:74:ef:6e:93:a7:ac:6e:
                    bc:50:d2:70:a7:25:fc:ba:0f:fa:d8:41:78:67:56:
                    3d:9e:6d:43:2b:8e:bb:48:aa:01:6d:a0:64:67:ed:
                    79:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:EB:CC:33:1C:BE:00:B6:34:95:0C:87:AA:24:0E:CD:B9:E8:61:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/f99b7391-85a3-3cb4-a259-107cd981ef97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:b6:06:2a:5e:62:db:98:bd:d0:2a:96:ab:0c:37:83:fb:75:
         77:b8:b2:3a:75:0f:d4:64:74:00:be:b2:57:4d:5f:ca:b2:34:
         3c:25:54:af:2d:94:d0:ea:c8:7d:d6:27:f5:27:e3:95:db:c9:
         a4:df:7d:de:78:8f:a2:ec:64:c5:c1:34:fe:f5:dc:dc:0c:90:
         d4:22:34:d2:26:a5:16:0e:f9:3b:c1:0e:7a:59:b0:cd:a5:17:
         19:18:6a:7e:8e:58:39:dc:c5:37:8e:56:f1:7a:8b:ee:90:b0:
         16:7c:d5:7e:a1:ac:db:7e:15:81:12:e4:76:cb:ca:32:c5:9c:
         ef:df:c1:19:2d:d3:4f:d8:fd:f0:f9:c4:d5:e5:c6:aa:ea:6a:
         69:4d:69:d2:3c:79:cf:09:ef:48:96:50:4d:1a:5a:98:28:02:
         74:30:f6:26:b1:a6:60:37:d7:ec:ab:8f:ca:22:ff:b5:c7:42:
         f7:7b:fc:1f:80:ad:8d:82:56:44:21:2c:36:6c:9a:67:8f:4b:
         bd:2d:aa:fa:b1:0a:70:27:72:62:9b:9f:df:9b:bc:6d:15:b3:
         5e:21:99:f2:c1:dc:e2:b8:90:14:88:3a:52:de:79:c7:60:f6:
         18:e2:ba:fc:0d:9f:4f:a2:3d:f8:5f:ba:0b:82:b9:d5:1a:e2:
         ae:53:63:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyhzL3qjgVGXQcYcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz
ZjhjMB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk
NmVlMGNjNzgtZGEwOS00Y2RjLThjNWEtMTQzYzRiOTU4MTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2HkrRTPHZxniMoZgoPF65YwXAtnbo1uLAwj
tgfjjwvJovpC4CuGAhzqaj52vDas9jWcETPsznRcrtth1JemVVHvvILBGf1GHDm5
0eQnJDxlzr1gS/VyINw5bwsEQaL1pA6CF/gpo1MVnpmoj/vE8lgCfoAI1Jq6Vgv7
VdoFbvp9oONVV3b5LUOjQOXkRu1qRkKLQdGqUBW920+GnXAX/HEl5N/lBe0EGcqp
xVNQyoSr7TDur+yJwrKz1Eg4r4/4/KIjLW2tkeQLSwkMBMshZujuRlhbV2Bn63Tv
bpOnrG68UNJwpyX8ug/62EF4Z1Y9nm1DK467SKoBbaBkZ+15vwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMDrzDMcvgC2NJUMh6okDs256GEcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm
ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvZjk5YjczOTEtODVhMy0z
Y2I0LWEyNTktMTA3Y2Q5ODFlZjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm
ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx
M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj
ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlvzFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHm2BipeYtuYvdAqlqsMN4P7dXe4sjp1D9RkdAC+sldNX8qyNDwlVK8t
lNDqyH3WJ/Un45XbyaTffd54j6LsZMXBNP713NwMkNQiNNImpRYO+TvBDnpZsM2l
FxkYan6OWDncxTeOVvF6i+6QsBZ81X6hrNt+FYES5HbLyjLFnO/fwRkt00/Y/fD5
xNXlxqrqamlNadI8ec8J70iWUE0aWpgoAnQw9iaxpmA31+yrj8oi/7XHQvd7/B+A
rY2CVkQhLDZsmmePS70tqvqxCnAncmKbn9+bvG0Vs14hmfLB3OK4kBSIOlLeecdg
9hjiuvwNn0+iPfhfuguCudUa4q5TY+c=
-----END CERTIFICATE-----
Generated at Tue Mar 3 05:30:01 2026 by rpki-client