Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/8acbc2c9-7125-34b8-a346-13cd157a460f.roa
File:                     8acbc2c9-7125-34b8-a346-13cd157a460f.roa (raw, json)
Hash identifier:          zUZVEdfDsMagAhyGYJOkVjCYwNyPo70uXcrgJ02soTU=
Subject key identifier:   C0:59:D9:23:9A:13:F6:AD:9F:FC:53:6A:51:DC:D9:14:57:3E:DE:80
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F432858493243E41074B496E56042D180
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/8acbc2c9-7125-34b8-a346-13cd157a460f.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     26744
IP address blocks:        150.252.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:e4:10:74:b4:96:e5:60:42:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=765e2598-2ec7-43c3-8253-12d1906c98f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b4:8f:83:03:32:a1:6f:3e:11:71:19:a7:17:
                    01:62:e2:24:cf:6b:9d:9e:2a:46:2f:8f:00:99:a6:
                    03:8c:41:44:c2:5b:f5:ee:e0:58:da:f3:39:af:32:
                    a5:2a:e2:7f:c1:55:87:d0:05:35:8f:46:c9:a7:de:
                    54:d3:f2:6d:c8:fd:f9:1f:b6:ec:50:9e:f4:f8:90:
                    33:07:d6:83:ae:cf:ec:95:6e:bd:b6:bf:ca:fc:7c:
                    f7:50:38:12:4b:70:f7:86:02:f0:24:12:73:b9:82:
                    3a:29:18:3b:f4:9e:47:5c:ba:cd:d1:77:c1:03:65:
                    70:d2:6d:57:cf:54:2c:63:9a:e1:b1:8f:11:a7:51:
                    74:04:5e:be:54:ea:e4:56:bf:c0:d5:85:14:7d:31:
                    70:e4:41:e2:a7:6c:eb:73:2a:52:2e:b7:21:7e:f5:
                    a8:6d:89:31:c3:1b:cc:6a:99:eb:dd:14:15:24:55:
                    c1:db:9e:7d:cb:99:eb:1b:b1:6d:93:70:6d:ff:a1:
                    b4:8f:b3:55:3c:ae:10:0a:2f:35:dd:01:7c:0b:ee:
                    47:45:18:9d:18:e1:b4:95:3c:4e:e7:28:c6:a9:9f:
                    fe:59:78:f0:10:9a:e3:75:cc:8d:ce:18:d0:17:59:
                    c0:d5:54:56:a8:02:e8:9c:ec:d8:f1:c9:1d:a0:04:
                    c9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:59:D9:23:9A:13:F6:AD:9F:FC:53:6A:51:DC:D9:14:57:3E:DE:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/8acbc2c9-7125-34b8-a346-13cd157a460f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:48:3b:2a:97:5e:3a:4d:60:53:76:25:7e:ac:46:6a:e9:f2:
         58:ba:5d:6a:b8:98:d9:0b:b5:3c:1e:9d:c3:5a:cd:6b:c9:39:
         4c:54:31:13:8d:7a:4a:8b:b7:a2:7e:71:95:49:d9:cd:3f:58:
         8b:d3:a8:ac:ee:00:22:ed:f0:e7:18:6d:5e:39:82:5d:01:12:
         f9:ce:64:9d:24:28:67:87:50:50:0b:c0:eb:3a:7f:fe:2b:b3:
         7d:1d:42:ca:5e:f4:eb:ad:20:ae:9f:d0:a7:87:cd:b5:6e:fb:
         ed:31:76:cd:16:73:8d:5f:ad:07:f3:59:34:10:1d:42:fb:25:
         fe:0a:d9:3c:41:73:57:f4:fb:2c:3b:04:d8:2e:3e:e8:f1:d0:
         0e:1a:a4:37:17:06:b7:27:cf:2b:e7:44:c5:e0:1f:e6:d2:98:
         62:ab:31:3a:31:2f:2b:40:99:a2:c6:47:d4:b0:ad:3e:69:e7:
         c5:09:23:8d:08:37:c2:8d:b8:3d:3e:c3:91:d3:ee:b7:8c:02:
         5a:6c:32:ac:4d:b8:c4:93:87:d9:b4:b5:a6:97:63:36:f4:85:
         48:f9:ce:30:53:08:9d:65:4e:8d:03:e6:da:e9:61:a6:fe:93:
         b5:60:ce:65:05:69:21:16:a2:4e:24:a8:c3:5c:52:0f:70:f0:
         01:60:d7:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ+QQdLSW5WBC0YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz
ZjhjMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk
NzY1ZTI1OTgtMmVjNy00M2MzLTgyNTMtMTJkMTkwNmM5OGYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbSPgwMyoW8+EXEZpxcBYuIkz2udnipGL48A
maYDjEFEwlv17uBY2vM5rzKlKuJ/wVWH0AU1j0bJp95U0/JtyP35H7bsUJ70+JAz
B9aDrs/slW69tr/K/Hz3UDgSS3D3hgLwJBJzuYI6KRg79J5HXLrN0XfBA2Vw0m1X
z1QsY5rhsY8Rp1F0BF6+VOrkVr/A1YUUfTFw5EHip2zrcypSLrchfvWobYkxwxvM
apnr3RQVJFXB2559y5nrG7Ftk3Bt/6G0j7NVPK4QCi813QF8C+5HRRidGOG0lTxO
5yjGqZ/+WXjwEJrjdcyNzhjQF1nA1VRWqALonOzY8ckdoATJJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMBZ2SOaE/atn/xTalHc2RRXPt6AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm
ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvOGFjYmMyYzktNzEyNS0z
NGI4LWEzNDYtMTNjZDE1N2E0NjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm
ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx
M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj
ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlvzJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEpIOyqXXjpNYFN2JX6sRmrp8li6XWq4mNkLtTwencNazWvJOUxUMRON
ekqLt6J+cZVJ2c0/WIvTqKzuACLt8OcYbV45gl0BEvnOZJ0kKGeHUFALwOs6f/4r
s30dQspe9OutIK6f0KeHzbVu++0xds0Wc41frQfzWTQQHUL7Jf4K2TxBc1f0+yw7
BNguPujx0A4apDcXBrcnzyvnRMXgH+bSmGKrMToxLytAmaLGR9SwrT5p58UJI40I
N8KNuD0+w5HT7reMAlpsMqxNuMSTh9m0taaXYzb0hUj5zjBTCJ1lTo0D5trpYab+
k7VgzmUFaSEWok4kqMNcUg9w8AFg12U=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:43:30 2025 by rpki-client