Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/af254d16-e698-393e-9cd3-e39bd484cccd.roa
File:                     af254d16-e698-393e-9cd3-e39bd484cccd.roa (raw, json)
Hash identifier:          Y5BS1Djaeuo22C/dhCbQyg0LUMapFmODKMGvndl5q2A=
Subject key identifier:   85:11:BF:3B:A7:30:95:0B:D9:54:8F:B9:D5:74:25:58:0E:05:D8:49
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584D9325503C10BD61758F1D1820
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/af254d16-e698-393e-9cd3-e39bd484cccd.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     26744
IP address blocks:        150.252.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:50:3c:10:bd:61:75:8f:1d:18:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=93fb47ef-5f72-4f0f-b7fd-f621d54d46f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:24:0c:71:ce:2f:9d:1e:08:35:63:7c:52:af:
                    0a:1c:37:cf:3d:9a:d7:de:e1:fd:07:1d:34:e9:05:
                    40:fa:60:64:c1:c9:0c:18:7b:64:da:c7:b3:d3:35:
                    85:02:e9:66:92:3b:0b:89:79:08:be:02:e1:d4:c2:
                    38:87:bf:36:1d:32:e3:3d:e9:bb:09:35:03:81:3c:
                    13:d0:a1:61:ad:09:2c:be:72:ef:99:cd:29:7f:0a:
                    ac:54:e4:89:bf:82:77:fc:bc:98:94:d5:93:0d:67:
                    d6:fc:5f:33:6b:8b:b9:c0:5b:69:a2:dd:f6:a5:bf:
                    a6:9b:34:ca:24:d3:90:10:2f:f0:f6:34:91:74:1c:
                    67:fa:1c:67:88:e9:66:a7:82:08:27:52:73:21:ce:
                    35:fc:27:51:d5:eb:5b:8e:32:1e:f4:ab:bf:75:36:
                    80:11:ff:94:53:ab:09:4f:1d:9f:cc:b2:17:54:1b:
                    66:eb:92:96:f1:90:22:82:68:25:13:fb:3e:c1:88:
                    b0:35:ee:82:6e:21:b6:89:71:50:a3:1c:3b:10:1f:
                    f6:73:d4:29:80:93:81:55:4e:ad:e8:da:8e:32:bd:
                    39:f6:91:c9:d5:3c:db:d6:39:c0:73:fa:b1:8f:45:
                    f6:a8:bb:90:77:bf:4b:e9:76:19:66:67:cd:b1:4e:
                    9e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:11:BF:3B:A7:30:95:0B:D9:54:8F:B9:D5:74:25:58:0E:05:D8:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/af254d16-e698-393e-9cd3-e39bd484cccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:a3:1b:0b:70:64:1e:29:be:01:57:b7:28:67:30:84:1f:83:
         bd:e5:fb:87:c9:f8:c1:32:6d:2d:3c:fb:51:c8:ae:3b:60:4c:
         95:5d:01:fb:44:10:b9:44:a4:9f:e0:73:31:47:28:f8:34:11:
         8f:6a:f1:f9:a0:fa:ed:a5:3a:e5:7f:c0:c9:2d:cf:3b:90:8e:
         c5:33:21:b8:5e:71:9e:06:4c:2c:eb:9a:fa:81:39:35:96:9b:
         99:9f:ba:37:aa:b4:a9:c6:ff:4c:22:e0:fa:9b:b5:05:bd:ca:
         1d:61:76:3a:3b:d0:69:9c:24:1f:4e:52:14:48:d1:6d:7d:2b:
         43:21:c5:b6:0b:80:c4:62:cf:f1:35:fe:4b:f1:79:8d:ce:9d:
         f5:00:1e:d7:57:5b:ad:ca:a7:26:6d:c0:8f:04:e4:86:61:19:
         54:d4:49:cf:93:83:39:c3:1f:9e:0d:c7:f3:74:e5:21:00:c7:
         e8:5e:3c:16:78:fb:75:db:49:89:0d:5f:86:33:84:dd:ff:1e:
         5f:27:59:d4:16:5b:a5:93:d9:4c:f7:dd:65:13:6a:27:57:4f:
         a7:ae:8b:df:58:f0:4a:36:20:ff:84:7d:01:af:68:cd:3c:fb:
         2a:e0:d4:b6:62:df:34:79:ae:7d:21:41:83:ce:93:9a:ec:9b:
         2a:36:bd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 17:01:58 2026 by rpki-client