Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/a9bcbc84-a116-3b19-9bd9-c40a4001f050.roa
File:                     a9bcbc84-a116-3b19-9bd9-c40a4001f050.roa (raw, json)
Hash identifier:          Yd2aZtjrUD/u9C/XiPc8lGzGN1PnoUQBPTul8KVRNcw=
Subject key identifier:   DC:48:20:2E:CE:D6:98:D6:F0:4F:FE:58:04:C3:53:1B:2B:91:E8:D5
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584BD3306C299EB253A45B472D60
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/a9bcbc84-a116-3b19-9bd9-c40a4001f050.roa
Signing time:             Tue 11 Nov 2025 14:00:38 +0000
ROA not before:           Tue 11 Nov 2025 14:00:38 +0000
ROA not after:            Mon 09 Feb 2026 14:00:38 +0000
asID:                     15313
IP address blocks:        150.252.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d3:30:6c:29:9e:b2:53:a4:5b:47:2d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Nov 11 14:00:38 2025 GMT
            Not After : Feb  9 14:00:38 2026 GMT
        Subject: CN=3137187e-8b1d-4d68-9fb6-3ba947bf7cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f8:41:9d:36:5f:68:b8:c3:e4:26:87:ae:04:
                    eb:bb:64:e9:7e:69:16:7c:e1:3a:c2:b8:bf:5b:95:
                    47:08:e6:b9:f6:91:52:43:cc:7f:6d:9c:d4:ce:02:
                    7b:7d:88:c7:cb:15:db:05:33:69:1e:7b:9b:df:36:
                    02:17:0e:4a:ab:cc:0a:7a:1f:1a:88:8a:6a:ee:de:
                    6d:10:86:bd:f8:be:36:97:88:76:8c:ea:01:e1:bf:
                    2b:c4:c1:a6:eb:a3:90:95:64:21:4f:17:0c:e6:a7:
                    dd:c0:7e:55:ae:7e:d3:c9:de:2b:13:5d:b3:ef:ce:
                    df:c6:dc:6c:4a:2d:89:36:a3:75:06:e0:58:56:e2:
                    c5:fa:ae:bc:2b:d9:fb:d1:8b:7a:cf:9e:0b:3c:6c:
                    b8:e2:50:2c:3a:0c:9d:41:43:f8:ac:52:df:d3:f6:
                    58:88:18:0d:7e:5b:b1:f5:59:ca:61:d7:28:75:11:
                    c2:8d:d3:1d:5c:e4:2f:a1:d9:56:fb:dd:bc:1f:3b:
                    37:e1:53:db:eb:32:89:ab:a9:b3:27:e3:02:90:c2:
                    cd:c9:8a:ea:6a:ed:73:28:21:c6:72:de:e0:53:1a:
                    56:43:92:06:34:ac:33:be:c6:3d:c8:29:bb:27:b9:
                    08:0d:06:b8:c7:24:b6:65:97:d1:15:44:6b:94:34:
                    39:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:48:20:2E:CE:D6:98:D6:F0:4F:FE:58:04:C3:53:1B:2B:91:E8:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/a9bcbc84-a116-3b19-9bd9-c40a4001f050.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:0a:1b:75:98:e1:d6:33:79:41:f4:f4:93:45:a9:b5:4d:91:
         f8:a0:b4:71:59:1d:11:0d:e0:28:97:13:a5:b4:aa:7f:97:16:
         0b:19:2b:94:1e:9f:00:9c:bf:e7:14:cf:a6:9a:28:b2:b5:db:
         2e:4f:11:77:a2:b9:2c:8d:41:20:90:ae:c4:d6:15:8b:80:b0:
         37:2f:33:96:6b:01:78:cd:df:ac:48:e3:ca:d1:f1:c5:b5:0c:
         83:a4:3e:49:8a:0b:51:bf:b5:37:67:27:4a:43:7b:6d:9e:50:
         6b:22:4f:58:97:8c:74:1c:cc:70:4d:8b:4d:fc:39:5b:28:4b:
         90:7d:85:dc:4e:b5:ed:f5:2f:d4:3c:3d:9a:99:a5:c7:ce:8a:
         6c:e3:61:7b:fb:9f:d8:2f:e5:09:82:16:85:91:16:96:be:99:
         d6:08:d8:62:a9:7b:eb:2a:eb:c3:0e:51:a7:88:96:1a:fe:f2:
         9a:79:ef:fc:31:e0:28:0c:69:6a:c2:35:82:29:61:2c:02:e9:
         d1:74:5a:b1:f2:78:7e:73:92:87:c6:21:17:1d:1b:88:6f:20:
         f2:a5:15:23:41:64:e6:ec:98:10:4a:94:71:0d:3e:79:e7:e0:
         54:75:45:af:7f:dc:e5:94:37:79:c2:80:2f:ae:ab:9a:9d:78:
         4b:2f:e9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 16 22:05:26 2025 by rpki-client