Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/ab7acae0-b363-34b5-acd1-1cea7c934a3b.roa
File:                     ab7acae0-b363-34b5-acd1-1cea7c934a3b.roa (raw, json)
Hash identifier:          fq+9mpr8x+hKt0PhZEMHtnELP3f3kx5Sq0/QUXVE64Y=
Subject key identifier:   3F:D4:CC:03:40:5E:4D:01:09:15:36:3C:CD:C8:DD:68:93:01:EE:93
Certificate issuer:       /CN=8b2124a8-d6b6-483e-92de-67f8d7975cc4
Certificate serial:       010D0C9F4328584DF640A4B59D3FF66535973A80
Authority key identifier: 29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/ab7acae0-b363-34b5-acd1-1cea7c934a3b.roa
Signing time:             Tue 26 May 2026 13:00:31 +0000
ROA not before:           Tue 26 May 2026 13:00:31 +0000
ROA not after:            Mon 24 Aug 2026 13:00:31 +0000
asID:                     394470
IP address blocks:        172.83.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:40:a4:b5:9d:3f:f6:65:35:97:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b2124a8-d6b6-483e-92de-67f8d7975cc4
        Validity
            Not Before: May 26 13:00:31 2026 GMT
            Not After : Aug 24 13:00:31 2026 GMT
        Subject: CN=19e44547-7b21-4753-97d8-ed86d8c6c1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:da:ec:2c:ad:cb:71:63:99:0c:34:8d:48:3b:
                    17:7d:9c:33:b6:c5:c4:a4:48:49:b1:1a:cd:d8:c6:
                    3d:85:ff:d8:91:db:3f:2b:e6:92:58:ff:fd:80:20:
                    8a:5d:ae:9a:c6:1f:7d:be:90:e2:2f:fe:45:a4:af:
                    85:9e:4f:eb:33:d6:67:ed:1e:76:88:9d:d0:15:d7:
                    2a:d8:e6:d9:27:31:63:b7:d6:72:74:fd:a2:84:15:
                    91:51:38:42:67:fa:a7:2b:de:7e:1d:66:d4:b6:20:
                    08:99:db:3e:25:67:d2:31:a0:3d:9d:73:18:63:a5:
                    16:f2:53:25:d5:3f:2c:f0:59:90:b7:40:9b:fd:bd:
                    43:04:c5:b1:f4:cd:1d:f5:8a:32:a5:a3:9b:bb:9d:
                    be:22:c5:00:32:af:53:8b:02:ce:50:a9:42:2f:c9:
                    8b:c3:ec:95:85:11:0d:48:61:b5:0e:ab:ec:40:ee:
                    9e:d3:3d:6e:9a:13:83:cf:9a:60:57:7c:fc:fa:12:
                    7f:4d:97:f1:95:21:26:81:3b:73:5f:c9:6a:f3:6c:
                    68:2a:65:5c:f3:13:f5:df:b4:17:a6:73:49:53:9f:
                    9b:7e:34:56:20:14:dd:42:78:7a:32:39:c7:00:74:
                    db:99:cc:75:1e:dc:1a:a1:99:d1:34:74:1f:5f:df:
                    b6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D4:CC:03:40:5E:4D:01:09:15:36:3C:CD:C8:DD:68:93:01:EE:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/ab7acae0-b363-34b5-acd1-1cea7c934a3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.crl

            X509v3 Authority Key Identifier:
                keyid:29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.83.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:9b:42:50:a6:cb:29:53:ea:2c:33:27:c0:f8:4a:4c:61:f1:
         5f:06:d6:c4:eb:84:21:0b:ac:c3:26:43:3f:91:9c:49:db:d5:
         83:cf:20:b1:c7:a6:30:0f:48:0f:79:04:fe:4b:23:5c:89:14:
         ef:77:7d:ea:ef:6d:82:b4:80:92:d7:26:b6:2d:d6:65:4b:1e:
         b0:71:b5:13:76:3f:15:78:6b:4f:30:e8:5d:f4:6c:34:91:91:
         7a:d7:23:b2:c1:fb:4d:03:bb:e5:a2:ee:61:e8:44:d5:fe:75:
         0a:bf:58:a4:7a:33:fd:10:26:aa:73:15:e3:73:ae:d1:4e:77:
         d1:25:2a:b8:57:c0:d6:7a:1b:ef:c9:f6:55:a9:e9:00:bb:f1:
         e5:56:c2:c1:60:d4:ba:ec:07:4b:8c:90:91:3e:09:18:d4:07:
         c3:01:bf:5e:13:3d:2f:f2:73:fd:f9:10:73:b8:d8:e9:41:f6:
         11:f4:72:cc:b3:a0:4d:f0:23:a4:1f:df:e2:74:e9:36:9f:59:
         d7:88:e2:31:98:b3:5c:57:8e:c6:7f:1e:9b:f3:ac:a3:b3:d4:
         bd:05:da:af:e9:b6:5d:e1:1a:d3:39:2e:00:98:47:a6:49:02:
         66:33:a1:72:eb:79:04:48:c8:f2:73:f4:f4:6b:02:74:b3:b1:
         43:76:19:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE32QKS1nT/2ZTWXOoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGIyMTI0YTgtZDZiNi00ODNlLTkyZGUtNjdmOGQ3OTc1
Y2M0MB4XDTI2MDUyNjEzMDAzMVoXDTI2MDgyNDEzMDAzMVowLzEtMCsGA1UEAxMk
MTllNDQ1NDctN2IyMS00NzUzLTk3ZDgtZWQ4NmQ4YzZjMWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9rsLK3LcWOZDDSNSDsXfZwztsXEpEhJsRrN
2MY9hf/Ykds/K+aSWP/9gCCKXa6axh99vpDiL/5FpK+Fnk/rM9Zn7R52iJ3QFdcq
2ObZJzFjt9ZydP2ihBWRUThCZ/qnK95+HWbUtiAImds+JWfSMaA9nXMYY6UW8lMl
1T8s8FmQt0Cb/b1DBMWx9M0d9YoypaObu52+IsUAMq9TiwLOUKlCL8mLw+yVhREN
SGG1DqvsQO6e0z1umhODz5pgV3z8+hJ/TZfxlSEmgTtzX8lq82xoKmVc8xP137QX
pnNJU5+bfjRWIBTdQnh6MjnHAHTbmcx1HtwaoZnRNHQfX9+2gwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD/UzANAXk0BCRU2PM3I3WiTAe6TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YjIx
MjRhOC1kNmI2LTQ4M2UtOTJkZS02N2Y4ZDc5NzVjYzQvYWI3YWNhZTAtYjM2My0z
NGI1LWFjZDEtMWNlYTdjOTM0YTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGIyMTI0YTgtZDZiNi00ODNlLTky
ZGUtNjdmOGQ3OTc1Y2M0LzhiMjEyNGE4LWQ2YjYtNDgzZS05MmRlLTY3ZjhkNzk3
NWNjNC5jcmwwHwYDVR0jBBgwFoAUKVokfqKJm+K6LEmBT1XmY0qa+ugwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84YjIxMjRhOC1kNmI2LTQ4M2UtOTJkZS02N2Y4
ZDc5NzVjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFOWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGGbQlCmyylT6iwzJ8D4Skxh8V8G1sTrhCELrMMmQz+RnEnb1YPPILHH
pjAPSA95BP5LI1yJFO93fervbYK0gJLXJrYt1mVLHrBxtRN2PxV4a08w6F30bDSR
kXrXI7LB+00Du+Wi7mHoRNX+dQq/WKR6M/0QJqpzFeNzrtFOd9ElKrhXwNZ6G+/J
9lWp6QC78eVWwsFg1LrsB0uMkJE+CRjUB8MBv14TPS/yc/35EHO42OlB9hH0csyz
oE3wI6Qf3+J06TafWdeI4jGYs1xXjsZ/HpvzrKOz1L0F2q/ptl3hGtM5LgCYR6ZJ
AmYzoXLreQRIyPJz9PRrAnSzsUN2Gdo=
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:18:27 2026 by rpki-client