Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/0ec9ccab-54ad-3379-8f6b-0a0f6e583d96.roa
File:                     0ec9ccab-54ad-3379-8f6b-0a0f6e583d96.roa (raw, json)
Hash identifier:          woJ7k4g1TCQfCWeW5YHlLvkx5cX0L1DTOqaJtOlh92E=
Subject key identifier:   74:A8:88:58:2D:73:8E:9E:07:84:4D:2C:29:61:74:BE:95:96:11:A3
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584D8EF57631272A378E3E397060
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/0ec9ccab-54ad-3379-8f6b-0a0f6e583d96.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     393740
IP address blocks:        206.180.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:76:31:27:2a:37:8e:3e:39:70:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=8d4d72ea-2cac-4041-80ca-bed93d2b0cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:54:35:9f:92:55:b4:e6:74:79:e8:61:fe:14:
                    5e:4e:4b:59:bb:32:e6:b7:fb:16:f0:1f:a0:07:fe:
                    75:7c:2b:f2:8e:fe:08:f0:b8:04:31:85:53:20:30:
                    80:23:fe:e7:07:93:bc:59:95:6d:62:89:a1:c4:e1:
                    20:ef:90:d2:27:56:39:2a:ee:db:ac:a2:11:ee:75:
                    a4:f1:da:3b:d0:bc:68:67:91:eb:4d:8c:97:57:c1:
                    56:40:91:0e:d5:3b:13:fe:02:d8:00:e4:62:01:51:
                    15:75:f6:bc:7d:fe:49:a8:a4:ac:47:03:9d:0a:9e:
                    98:3a:6b:2d:a2:26:d4:a9:48:d4:d0:97:d1:ee:e6:
                    66:c8:59:44:11:f9:44:6b:9b:77:ac:b3:12:20:93:
                    cd:65:78:6e:26:1b:be:64:8a:23:5d:64:a3:03:ff:
                    e3:63:c4:75:c5:5c:ad:cd:24:28:4c:3b:32:bc:f5:
                    9b:3b:bc:48:10:86:42:d3:bc:ad:ec:69:2a:8c:de:
                    ab:d6:39:eb:22:34:f2:bc:06:38:d8:52:37:16:4e:
                    f8:1b:93:dd:18:12:94:78:e2:76:40:ac:6a:e0:f2:
                    70:85:db:7f:25:33:85:61:fc:b2:ac:cd:2c:70:ad:
                    75:f8:33:b1:c2:c3:d8:d4:70:68:17:0b:57:19:87:
                    30:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A8:88:58:2D:73:8E:9E:07:84:4D:2C:29:61:74:BE:95:96:11:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/0ec9ccab-54ad-3379-8f6b-0a0f6e583d96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:6d:32:1c:5e:4c:b4:44:5d:38:30:db:7a:e8:51:3a:70:30:
         12:c9:57:81:ad:2a:01:e9:27:b1:4d:57:a5:41:b0:2d:59:83:
         1f:2f:82:be:12:fe:c7:c0:c8:71:da:e7:52:93:dd:1c:b4:9d:
         30:80:f7:d2:aa:07:04:a2:4f:e9:2b:ed:19:03:7d:11:98:95:
         c4:92:92:f4:d6:68:68:12:e2:4d:cc:0b:3f:5a:73:b5:24:92:
         56:19:ad:58:f1:32:23:1a:5c:0c:3c:bb:14:c6:64:a5:d5:a3:
         97:47:74:8f:cc:58:31:d6:8a:1f:b2:d2:99:a2:d6:7f:3e:87:
         4d:53:5d:b6:0c:e4:06:10:24:39:70:e7:42:f9:08:e1:99:e1:
         72:89:22:40:48:97:fa:b5:11:80:ee:20:d0:d8:42:02:55:b4:
         eb:16:e4:d5:f2:c3:b5:58:95:bb:10:2d:10:1b:e4:8b:1a:ed:
         01:bf:f2:3a:bb:06:3e:42:84:57:8c:9a:fe:3b:38:3d:a9:f0:
         51:40:4d:8c:aa:12:bb:fd:f6:08:44:80:8a:d9:76:31:32:b3:
         2a:a7:a1:4c:ac:d3:f6:52:34:56:6e:a1:65:9c:d5:e0:d0:47:
         7c:a9:1b:52:40:15:29:90:18:f2:94:b7:e3:ef:cd:63:42:25:
         9f:f0:6e:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9XYxJyo3jj45cGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz
ZjhjMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
OGQ0ZDcyZWEtMmNhYy00MDQxLTgwY2EtYmVkOTNkMmIwY2JhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1Q1n5JVtOZ0eehh/hReTktZuzLmt/sW8B+g
B/51fCvyjv4I8LgEMYVTIDCAI/7nB5O8WZVtYomhxOEg75DSJ1Y5Ku7brKIR7nWk
8do70LxoZ5HrTYyXV8FWQJEO1TsT/gLYAORiAVEVdfa8ff5JqKSsRwOdCp6YOmst
oibUqUjU0JfR7uZmyFlEEflEa5t3rLMSIJPNZXhuJhu+ZIojXWSjA//jY8R1xVyt
zSQoTDsyvPWbO7xIEIZC07yt7GkqjN6r1jnrIjTyvAY42FI3Fk74G5PdGBKUeOJ2
QKxq4PJwhdt/JTOFYfyyrM0scK11+DOxwsPY1HBoFwtXGYcwswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHSoiFgtc46eB4RNLClhdL6VlhGjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm
ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvMGVjOWNjYWItNTRhZC0z
Mzc5LThmNmItMGEwZjZlNTgzZDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm
ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx
M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj
ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzrSXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEZtMhxeTLREXTgw23roUTpwMBLJV4GtKgHpJ7FNV6VBsC1Zgx8vgr4S
/sfAyHHa51KT3Ry0nTCA99KqBwSiT+kr7RkDfRGYlcSSkvTWaGgS4k3MCz9ac7Uk
klYZrVjxMiMaXAw8uxTGZKXVo5dHdI/MWDHWih+y0pmi1n8+h01TXbYM5AYQJDlw
50L5COGZ4XKJIkBIl/q1EYDuINDYQgJVtOsW5NXyw7VYlbsQLRAb5Isa7QG/8jq7
Bj5ChFeMmv47OD2p8FFATYyqErv99ghEgIrZdjEysyqnoUys0/ZSNFZuoWWc1eDQ
R3ypG1JAFSmQGPKUt+PvzWNCJZ/wbto=
-----END CERTIFICATE-----
Generated at Fri May 1 17:04:32 2026 by rpki-client