Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/abb4a57c-2060-352e-9b8b-a9c38a981df7.roa
File:                     abb4a57c-2060-352e-9b8b-a9c38a981df7.roa (raw, json)
Hash identifier:          TnlmjKUwVPZJspe7Dqx7p3laewgMyiqVM5tLhJDFcxo=
Subject key identifier:   32:67:58:C6:19:2C:17:E9:30:64:48:5B:13:93:66:0E:B6:C1:E8:54
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584D8EF5765468DC6E16B5F1B240
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/abb4a57c-2060-352e-9b8b-a9c38a981df7.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     393740
IP address blocks:        206.180.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:76:54:68:dc:6e:16:b5:f1:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=c882c702-3463-412a-ad45-baae3e7a7ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:de:a5:6c:41:a3:15:65:39:50:ed:82:5d:d8:
                    49:08:5e:40:70:4b:d9:06:d4:94:97:22:38:b5:b2:
                    66:08:56:52:9e:70:ae:a3:d2:cb:61:a9:6d:ef:6d:
                    58:0c:06:99:0e:ca:ec:3e:fc:48:f8:5f:f9:19:70:
                    54:53:76:16:a2:a9:64:94:98:89:a3:b6:e5:e5:16:
                    b0:fa:78:e8:2c:76:a1:7a:71:2a:6e:c1:89:b6:6f:
                    45:02:06:9b:85:91:a3:f6:bd:85:d9:b5:36:4a:77:
                    86:23:22:5a:c9:23:8d:9a:02:bb:92:61:8e:11:1a:
                    79:fd:cb:be:b3:37:32:7e:12:f3:ba:22:b9:b3:7f:
                    b1:73:d6:db:c0:50:d1:f0:70:76:c7:a4:06:44:45:
                    b0:79:02:22:77:5e:c3:a2:0a:15:e6:c9:4c:63:84:
                    d7:5d:c4:0f:9e:f8:79:e8:54:29:ed:53:1d:5d:19:
                    d0:9b:c8:bf:90:4f:3c:19:c7:d5:b8:0f:7f:67:05:
                    cf:87:56:0f:a8:67:56:8c:8f:77:d4:2b:96:d0:ef:
                    f1:4b:73:f5:9b:07:cf:d8:e2:a3:60:56:85:46:86:
                    5d:16:57:e3:5d:37:d4:40:d9:25:9f:b0:90:51:07:
                    74:d0:38:a7:7d:08:38:60:07:4e:e5:15:d2:16:f3:
                    27:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:67:58:C6:19:2C:17:E9:30:64:48:5B:13:93:66:0E:B6:C1:E8:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/abb4a57c-2060-352e-9b8b-a9c38a981df7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:b2:e0:e5:94:1f:30:cc:47:c1:b5:59:2d:ff:28:98:6d:d8:
         08:1c:53:e6:a3:21:85:01:98:11:a7:c7:07:49:b0:c9:67:72:
         44:26:00:05:b5:8d:80:82:e4:32:54:ea:2d:11:da:19:db:dd:
         83:10:93:ce:d1:d1:3b:f4:a4:de:ad:e6:3d:55:fe:ca:7a:4c:
         9e:e5:f1:48:80:e0:b7:d1:c6:b7:bf:95:53:35:ce:ee:65:2c:
         1e:43:bb:5c:08:2f:1d:1c:37:81:d6:b9:df:a8:7e:03:de:d4:
         42:47:7d:dd:9c:19:ca:8f:d0:c4:f3:14:4f:74:60:7a:b2:b2:
         14:67:ee:af:bb:e7:19:7f:50:d3:a0:51:02:79:c4:f4:f1:a2:
         6f:d1:e4:52:ec:5a:04:b5:9a:af:57:5b:f4:75:8f:be:6e:14:
         54:79:84:7d:9c:06:51:a9:d7:44:cc:21:a6:9e:8f:22:fd:af:
         a3:6e:b7:51:7f:e2:38:03:5b:0a:82:d9:67:cc:b1:00:98:7b:
         75:d2:d5:1e:44:74:22:53:34:a5:42:22:f5:16:2e:c0:97:8c:
         7c:73:a6:9e:e6:55:27:36:f7:c3:2e:f1:ea:58:75:8b:89:96:
         2e:8f:0e:83:1e:22:e4:f2:9c:b8:74:d2:9d:ef:bf:31:82:13:
         2b:54:f4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 17:04:32 2026 by rpki-client