Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/e4c585bb-d469-30ca-b358-f447dafebaa1.roa
File:                     e4c585bb-d469-30ca-b358-f447dafebaa1.roa (raw, json)
Hash identifier:          93NKsOGHf4vAl2qPMbK64l/8AIw0BWAZ0jAHJIr2V+0=
Subject key identifier:   AC:29:38:2A:41:5F:7F:04:E8:86:FD:48:8F:7A:30:F7:AF:4E:8D:3C
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584BD3306B9A015D61516FB92780
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/e4c585bb-d469-30ca-b358-f447dafebaa1.roa
Signing time:             Tue 11 Nov 2025 14:00:38 +0000
ROA not before:           Tue 11 Nov 2025 14:00:38 +0000
ROA not after:            Mon 09 Feb 2026 14:00:38 +0000
asID:                     15313
IP address blocks:        150.252.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d3:30:6b:9a:01:5d:61:51:6f:b9:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Nov 11 14:00:38 2025 GMT
            Not After : Feb  9 14:00:38 2026 GMT
        Subject: CN=8274c47c-7d69-4bbf-8f02-9dec58423f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:83:f8:27:51:3f:7f:37:5a:a9:0c:09:9f:2e:
                    b6:b6:c6:ed:91:6d:36:31:c5:31:04:78:55:67:ff:
                    07:e5:2f:1b:dd:d4:04:f3:73:f7:20:72:c7:69:12:
                    14:30:ef:c2:86:ce:54:64:41:52:61:27:b5:0c:07:
                    20:95:43:04:ea:71:fe:06:dc:06:fc:72:80:de:ed:
                    98:7f:f2:8e:c5:d0:41:95:85:02:6f:e0:d7:49:2a:
                    e3:0f:52:c3:0e:79:39:55:43:79:2f:2b:7f:82:43:
                    f5:d6:e2:12:f4:86:d0:e6:b2:5a:f4:7b:22:37:77:
                    15:1c:39:9f:bd:0a:d9:0b:85:13:32:c3:1b:d5:c1:
                    2a:0d:2c:35:77:55:cf:b9:fb:0a:cf:69:7b:90:9e:
                    69:f4:64:ee:0a:0b:3d:fd:c6:fb:24:75:95:0c:5f:
                    24:66:01:16:de:ae:d6:fb:05:4b:98:75:b0:1b:fb:
                    e2:a7:5d:68:5e:c4:48:d0:74:07:c3:0e:75:55:a3:
                    90:b8:07:31:ca:e7:b8:2b:d5:d0:dd:c0:11:ef:79:
                    bc:05:05:90:67:fc:63:32:21:6c:75:9f:f7:d3:19:
                    f3:0e:35:4f:03:49:94:ce:40:ea:e7:02:c3:5c:d7:
                    12:84:97:92:ae:2b:01:16:a5:cd:8c:1c:e8:b0:86:
                    d8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:29:38:2A:41:5F:7F:04:E8:86:FD:48:8F:7A:30:F7:AF:4E:8D:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/e4c585bb-d469-30ca-b358-f447dafebaa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:b6:f8:ec:67:01:21:9a:dd:f3:18:18:3a:ac:0e:40:b5:28:
         1f:2b:04:c8:cd:19:6b:c1:0c:4c:25:a5:9a:fe:a0:48:83:37:
         34:db:f5:8e:2b:e5:f8:5a:e4:64:71:6b:c3:7d:91:60:94:99:
         1a:d6:66:00:2b:ad:06:ce:64:5f:f7:44:d1:0e:56:46:4c:4d:
         c4:1f:89:23:97:68:f3:67:df:e9:72:ce:29:77:56:4e:ae:46:
         16:93:be:6a:4d:b7:95:c9:b8:d5:9f:45:27:1d:fa:3b:98:ae:
         95:3d:e6:4d:b3:20:1d:b1:8e:97:f5:15:1f:7a:cc:14:6a:3c:
         5e:9a:b1:78:2e:82:f9:d7:23:4d:79:a4:6e:c3:64:fd:76:c6:
         11:8a:fe:73:9d:33:08:ae:86:60:92:cb:dd:27:a8:d8:87:fb:
         77:38:7e:7e:7d:1d:81:97:1a:02:0d:53:c2:3b:9d:b9:1a:ef:
         da:b7:4f:f4:ea:66:2a:05:d2:2d:95:d2:b3:9f:28:12:db:bb:
         aa:53:0a:58:b8:45:d9:77:f3:86:3c:33:6d:62:fb:cc:f8:dd:
         dc:a1:b5:e1:e9:4e:19:55:bf:8d:71:7b:f0:aa:d7:47:4a:bb:
         00:1f:95:58:23:5d:19:d7:2d:33:bd:b5:ee:4f:e7:b1:b8:e9:
         f1:b7:16:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 16 22:11:17 2025 by rpki-client