Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/e2f7e278-f16d-3808-87f8-455ca138f75e.roa
File:                     e2f7e278-f16d-3808-87f8-455ca138f75e.roa (raw, json)
Hash identifier:          kCWJKaw16J+Lc9x6OUy5ntItVFo0YB2i0DAURUQMOrU=
Subject key identifier:   07:28:E7:2C:6E:42:42:15:A2:88:82:EE:4C:54:EA:89:6E:E6:53:C2
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584D93254FC104C983ECCE659F00
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/e2f7e278-f16d-3808-87f8-455ca138f75e.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     26744
IP address blocks:        150.252.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:4f:c1:04:c9:83:ec:ce:65:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=4b147fc4-035f-4d4c-8c3b-52b6a4cf031c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:71:bc:00:6a:9f:b9:a9:47:97:39:78:df:dd:
                    80:8d:b0:54:35:64:f4:5a:72:85:82:a8:12:c6:5d:
                    56:e7:ee:a2:88:e2:e7:27:47:10:2f:6e:91:f6:b3:
                    26:c3:20:7c:cf:39:be:b9:91:83:f5:e1:75:76:38:
                    15:ea:3f:87:96:48:ed:86:48:6e:81:55:4a:dd:35:
                    4c:40:52:e6:43:e4:66:d8:45:a8:f0:40:6f:f1:8f:
                    46:df:d0:33:d4:d7:08:ba:23:02:84:5a:b4:c6:ff:
                    38:84:06:36:2b:d2:fa:2a:b0:69:fb:a9:0c:f3:c6:
                    b7:a0:a5:cd:d2:76:69:df:a5:ff:5e:7c:f3:1c:5f:
                    a1:f1:e6:a1:6c:4a:9a:20:62:56:a0:70:ea:29:1c:
                    75:3a:e0:7c:20:06:4d:76:a3:86:3c:6d:69:4b:79:
                    67:e1:44:83:34:c5:e8:10:30:f6:9e:20:f9:28:c9:
                    b7:20:e8:e7:f4:3c:6b:c9:63:4c:92:b1:f7:ef:d1:
                    c2:57:6d:3d:b8:50:2d:05:f5:2c:a0:e5:6a:65:86:
                    75:e4:93:e0:65:a9:2d:e9:97:1a:c2:73:7a:de:e4:
                    f4:10:79:cf:54:57:fa:dd:c6:d7:ad:66:4b:a3:50:
                    9d:b8:af:35:07:26:73:86:c8:e0:c5:fe:af:40:48:
                    6a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:28:E7:2C:6E:42:42:15:A2:88:82:EE:4C:54:EA:89:6E:E6:53:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/e2f7e278-f16d-3808-87f8-455ca138f75e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:44:79:ed:cb:f1:8e:4d:89:72:1d:52:7a:02:b2:4c:49:91:
         26:a8:0a:15:22:54:9e:b3:ce:12:79:87:06:a7:71:84:fe:42:
         5e:a4:1c:9d:b8:ca:82:09:e9:9f:1d:9d:2e:2f:b0:e1:bf:d4:
         0f:ee:8e:71:1d:ef:44:9d:fe:ca:8e:01:c7:40:74:19:d0:80:
         a7:6e:da:e9:1e:7a:c2:f8:65:42:f9:38:c8:cd:f2:bb:bf:ff:
         b1:39:65:b1:e1:f4:dc:01:1b:31:a6:49:d5:ad:55:51:cd:b5:
         a0:21:13:f6:ea:76:ef:89:79:fa:c6:f6:03:3f:ee:57:29:80:
         dc:93:14:89:e4:96:0b:f3:b9:ad:06:21:85:c0:70:92:e5:e8:
         de:d8:96:11:d4:64:07:57:32:76:c1:85:af:d0:64:c0:8a:75:
         cf:d5:a1:bd:2b:dc:5b:64:21:ac:9f:f8:5f:3f:b5:0b:40:80:
         32:4e:37:48:b5:6c:60:e9:10:ed:68:a0:42:7d:d6:55:95:83:
         fe:9f:eb:7d:a5:39:7c:f6:4c:07:bf:a8:1f:43:45:93:30:04:
         24:7f:27:40:05:52:92:88:85:35:65:f6:9b:8a:cd:5a:e3:09:
         ff:82:29:bd:d8:05:18:3a:65:76:f0:97:5b:53:0b:0d:0a:4f:
         c2:56:fd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 17:06:24 2026 by rpki-client