Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS150293.roa
File:                     AS150293.roa (raw, json)
Hash identifier:          fPfZAT6EslT+bXtuOWgprbN8BZqNE19OYlN6+pd7uUM=
Subject key identifier:   45:A6:FC:64:30:27:70:D5:78:3D:09:DD:36:33:F9:53:94:C1:28:C7
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       10334488C406B43C9C835F61D1E72C3F562265F3
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS150293.roa
Signing time:             Tue 28 Apr 2026 10:32:39 +0000
ROA not before:           Tue 28 Apr 2026 10:27:39 +0000
ROA not after:            Tue 27 Apr 2027 10:32:39 +0000
asID:                     150293
IP address blocks:        104.234.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 10:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:33:44:88:c4:06:b4:3c:9c:83:5f:61:d1:e7:2c:3f:56:22:65:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Apr 28 10:27:39 2026 GMT
            Not After : Apr 27 10:32:39 2027 GMT
        Subject: CN=45A6FC64302770D5783D09DD3633F95394C128C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ba:1d:b4:ed:da:4e:79:e3:26:fc:51:71:1e:
                    41:ef:d7:2f:9a:81:bf:60:e8:28:ca:b8:59:bd:45:
                    0e:c4:78:ad:f5:35:94:5b:ee:91:df:21:d1:90:1a:
                    fa:ed:f0:ee:1b:86:b1:6f:62:fe:da:f4:77:e0:16:
                    d6:fe:c4:45:53:9a:ae:8d:da:30:9f:91:ea:ab:da:
                    ec:08:01:68:ab:07:b3:88:e4:04:97:c7:e3:07:8d:
                    36:1d:33:2b:c0:9b:a8:7f:83:f4:e9:98:f9:0e:85:
                    7e:7e:5c:a9:21:6e:6b:16:94:56:27:98:af:83:e3:
                    7d:fc:9a:27:12:35:03:31:e3:42:43:f7:1f:8d:8b:
                    26:79:c0:80:d7:7c:c0:d9:cf:85:1a:f8:a6:9a:e9:
                    99:65:b2:e6:c0:05:bb:6d:14:a5:1f:47:25:04:e2:
                    a6:4a:e5:eb:97:50:0f:48:44:8e:36:16:d1:1d:36:
                    dd:77:93:2e:fb:08:76:a1:ea:01:91:9b:4e:ec:27:
                    34:f0:f0:50:e8:c0:fb:5c:48:de:76:61:9b:23:e0:
                    a4:1a:e7:1c:0f:43:da:31:88:62:b4:ce:3d:f4:b2:
                    b2:12:cb:2d:05:1f:20:43:0e:d1:ec:de:1f:af:36:
                    10:52:21:ca:4c:29:89:97:69:e6:41:a5:e3:5f:46:
                    fc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A6:FC:64:30:27:70:D5:78:3D:09:DD:36:33:F9:53:94:C1:28:C7
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS150293.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:c0:63:c8:27:fd:56:59:e8:dd:4b:86:bb:3a:e5:a1:79:fc:
         51:1b:b6:e5:5e:d7:90:fb:b5:c4:48:9c:4d:c3:ac:b9:62:be:
         e3:48:27:87:ba:0b:80:4a:d0:7a:3e:ae:da:9b:b4:17:fe:72:
         b1:c1:32:99:dc:2c:0a:f5:07:be:1d:5b:3e:0b:19:66:ab:76:
         84:9c:07:27:e3:c8:0e:eb:70:65:ac:f0:53:f5:b3:56:8d:25:
         0d:cf:e1:27:f4:54:09:7e:12:a3:7f:b3:e9:0b:7d:33:b2:ea:
         2e:a8:75:14:11:46:ac:61:f3:f3:39:93:f2:5e:95:35:3e:b7:
         e1:1d:c2:3a:4d:32:70:ef:a8:0d:1e:62:4e:60:7b:35:67:2f:
         65:d2:4a:27:63:68:db:15:e5:3e:1c:20:36:cd:8f:63:d8:90:
         45:6c:14:10:47:00:93:ac:d1:31:69:9f:6a:cc:0e:45:ef:7f:
         03:b6:a9:75:0e:65:53:ba:50:2e:21:0a:ec:1b:94:11:d2:37:
         e5:ee:35:2c:27:09:fe:30:1d:d3:80:97:27:69:c6:16:da:9c:
         34:7b:c5:c3:eb:56:b4:6e:2e:34:47:0a:c8:92:43:df:1a:0a:
         56:e9:fa:32:7c:06:4b:00:52:cc:92:6d:31:08:e3:09:e6:21:
         af:23:30:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:42:46 2026 by rpki-client