Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/4f230356-edb1-3718-812a-5f636fb960c9.roa
File:                     4f230356-edb1-3718-812a-5f636fb960c9.roa (raw, json)
Hash identifier:          qQDIC09FiSmjH5QwIMZXl1VHdka7IcfMvVnlYj41ILk=
Subject key identifier:   5A:79:98:F9:D2:F6:25:48:F9:FF:E0:1D:29:14:45:A6:26:5D:8B:3D
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584B0CDC13800706C7661F3740A8
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/4f230356-edb1-3718-812a-5f636fb960c9.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     26744
IP address blocks:        150.252.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:13:80:07:06:c7:66:1f:37:40:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=9faa2f07-e5f9-431e-947b-32f1a73839c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5f:5e:61:6d:c5:0f:5e:1f:b1:04:41:bf:61:
                    b6:b8:87:35:3d:c0:75:99:fb:ad:0b:f1:e9:64:60:
                    b8:d4:75:d1:80:ab:76:fb:03:0e:56:2c:b6:73:9a:
                    1e:0e:ff:23:3b:43:fa:a7:27:92:64:9d:85:da:ce:
                    7f:da:3a:09:35:26:4a:d8:1c:03:c8:df:1c:a0:a7:
                    c3:cc:86:29:d6:ee:4e:72:c4:8a:d8:90:99:a7:6d:
                    85:d1:8a:8c:25:f9:8f:5b:f2:c4:4c:e0:d7:09:9c:
                    e8:d7:51:9c:ca:4e:88:a8:0d:bc:dd:1e:38:68:69:
                    2f:ed:ff:6e:be:85:72:a4:ef:fa:4a:c6:69:3a:c8:
                    2a:ca:96:a3:ba:88:55:ec:02:9d:77:71:dd:06:a5:
                    ad:a3:d2:8b:83:c7:4b:0b:ad:83:87:1e:93:15:c3:
                    fc:79:ae:00:7d:4c:5a:db:7b:18:80:eb:5d:eb:ae:
                    a2:f0:c1:57:fc:97:5d:4a:22:1a:10:20:b9:0c:db:
                    2e:10:5b:ab:3d:7f:02:e6:56:7f:79:12:2d:41:fc:
                    23:8c:75:2d:ae:1c:06:23:e4:13:32:da:ee:fb:d4:
                    79:7f:e5:a2:35:0e:c2:cd:ca:3e:64:0b:81:c3:dd:
                    cf:ea:79:dd:dc:a7:66:ec:45:15:65:10:06:4a:81:
                    bd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:79:98:F9:D2:F6:25:48:F9:FF:E0:1D:29:14:45:A6:26:5D:8B:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/4f230356-edb1-3718-812a-5f636fb960c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:08:7f:97:f3:9a:89:7e:64:b8:36:f7:63:7e:9e:c1:df:56:
         dc:3c:14:25:e0:13:41:fd:76:64:4e:59:b6:a8:e1:3d:d6:02:
         eb:af:29:f3:3f:b7:99:61:ca:b2:2c:02:17:0e:b3:37:75:d9:
         9a:e8:35:6b:98:4b:2a:ed:1b:98:c0:86:70:05:ae:aa:5d:e3:
         b5:41:57:ce:de:27:57:84:93:35:92:c4:b9:8e:de:b1:67:0a:
         8c:5e:6c:a8:4c:44:dc:38:50:43:29:7d:f8:54:b9:0a:25:c8:
         d4:20:85:5d:e4:a8:5a:d9:30:6b:e6:87:c6:83:ab:e6:46:b5:
         62:0e:33:5d:e9:c4:9a:42:99:7d:0e:10:2b:a8:e3:cf:2a:a9:
         33:c1:83:a7:d6:1e:cd:46:05:38:c0:d4:0e:b8:a4:17:58:c6:
         a7:66:f3:4a:37:0e:a9:0b:70:30:d8:47:c9:ff:3b:3c:9a:01:
         66:33:80:0f:0f:9a:c9:32:23:be:72:8d:b8:bf:03:42:c4:d3:
         68:ee:23:74:17:70:05:ee:c5:54:c7:f7:99:6e:a3:3e:29:bb:
         3b:cc:6d:5e:56:89:43:5d:7d:59:12:b2:aa:8e:1c:40:dd:f6:
         57:27:b8:5e:77:bd:7e:e3:79:49:32:10:bd:b1:a8:64:16:38:
         99:46:6f:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3BOABwbHZh83QKgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz
ZjhjMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk
OWZhYTJmMDctZTVmOS00MzFlLTk0N2ItMzJmMWE3MzgzOWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol9eYW3FD14fsQRBv2G2uIc1PcB1mfutC/Hp
ZGC41HXRgKt2+wMOViy2c5oeDv8jO0P6pyeSZJ2F2s5/2joJNSZK2BwDyN8coKfD
zIYp1u5OcsSK2JCZp22F0YqMJfmPW/LETODXCZzo11Gcyk6IqA283R44aGkv7f9u
voVypO/6SsZpOsgqypajuohV7AKdd3HdBqWto9KLg8dLC62Dhx6TFcP8ea4AfUxa
23sYgOtd666i8MFX/JddSiIaECC5DNsuEFurPX8C5lZ/eRItQfwjjHUtrhwGI+QT
Mtru+9R5f+WiNQ7Czco+ZAuBw93P6nnd3Kdm7EUVZRAGSoG92QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFp5mPnS9iVI+f/gHSkURaYmXYs9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm
ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvNGYyMzAzNTYtZWRiMS0z
NzE4LTgxMmEtNWY2MzZmYjk2MGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm
ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx
M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj
ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElvzAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABgIf5fzmol+ZLg292N+nsHfVtw8FCXgE0H9dmROWbao4T3WAuuvKfM/
t5lhyrIsAhcOszd12ZroNWuYSyrtG5jAhnAFrqpd47VBV87eJ1eEkzWSxLmO3rFn
CoxebKhMRNw4UEMpffhUuQolyNQghV3kqFrZMGvmh8aDq+ZGtWIOM13pxJpCmX0O
ECuo488qqTPBg6fWHs1GBTjA1A64pBdYxqdm80o3DqkLcDDYR8n/OzyaAWYzgA8P
mskyI75yjbi/A0LE02juI3QXcAXuxVTH95luoz4puzvMbV5WiUNdfVkSsqqOHEDd
9lcnuF53vX7jeUkyEL2xqGQWOJlGbzE=
-----END CERTIFICATE-----
Generated at Fri Sep 19 18:05:52 2025 by rpki-client