Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/1d4b81ab-a172-31e6-b5cf-6c3e052b40b3.roa
File:                     1d4b81ab-a172-31e6-b5cf-6c3e052b40b3.roa (raw, json)
Hash identifier:          gUyRxcAPagGsLwoPrI7ZBs8BNunXUp+WzFfugx/N51g=
Subject key identifier:   A2:A9:13:03:C1:DF:DC:70:89:E1:24:1E:9C:7B:A1:0F:C4:64:09:ED
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584A119AB4962D4F4EB6F5EA7600
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/1d4b81ab-a172-31e6-b5cf-6c3e052b40b3.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     15313
IP address blocks:        150.252.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:b4:96:2d:4f:4e:b6:f5:ea:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=5b647dda-bf08-4780-a4a5-0beebf9926dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:84:31:69:35:1a:8a:74:15:0b:9a:70:48:f8:
                    ca:31:17:8a:47:ca:10:90:26:1b:0f:01:20:9b:83:
                    72:e5:b8:42:a4:1f:d4:4d:4b:35:e2:a3:a4:73:ae:
                    37:6a:66:4d:92:ba:80:83:a6:19:6b:06:c4:9d:e1:
                    3e:a8:0c:b2:8c:c8:f3:93:a0:e3:bd:fe:76:0f:03:
                    01:d2:d1:43:aa:20:92:c4:a2:11:aa:9c:84:c5:69:
                    3c:63:e0:08:d1:3f:d4:24:44:dc:09:45:84:22:f7:
                    0e:42:85:bc:e8:cd:e1:f4:e4:13:81:5f:d1:40:cc:
                    79:b5:db:5f:b7:b0:ff:02:01:cd:3d:53:75:8b:9e:
                    32:3e:46:e6:fa:5a:7b:2b:ec:2d:fc:19:8b:56:43:
                    a6:56:e8:75:9a:05:48:a1:fd:a4:6c:44:34:22:9b:
                    c2:40:3b:d5:3b:7c:22:da:3c:17:24:fc:ba:4d:de:
                    7a:2f:ae:48:af:f4:b2:7e:0c:d6:48:16:e0:4f:99:
                    01:d7:25:06:48:c1:88:b5:df:06:b4:5d:44:42:d6:
                    07:a7:a1:58:2b:e2:19:27:eb:2c:23:bc:c5:0e:80:
                    fd:05:81:2f:3b:0c:93:54:86:df:48:4d:39:c3:7b:
                    6d:b2:d3:bf:4e:de:82:05:d0:f3:26:c5:f5:e5:f2:
                    f5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A9:13:03:C1:DF:DC:70:89:E1:24:1E:9C:7B:A1:0F:C4:64:09:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/1d4b81ab-a172-31e6-b5cf-6c3e052b40b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:87:6e:49:6c:c2:9a:7e:63:64:b8:17:f7:d4:47:2c:21:06:
         2a:d1:89:0d:87:34:1b:23:a2:76:a7:8e:24:65:47:b1:1b:a1:
         35:4b:45:15:1a:70:73:b4:94:22:dd:8a:b2:7c:8e:f7:f3:91:
         18:21:eb:3a:78:2e:a3:df:c8:22:01:12:5a:cf:b8:14:ee:c2:
         e5:b8:4c:1c:9d:4f:77:e6:2f:b1:f7:f2:fa:b5:51:f3:aa:2a:
         7e:ef:05:8e:ac:a8:f2:90:ae:74:8c:fb:4f:ef:ab:18:3a:d7:
         16:95:62:01:5d:b6:08:6e:63:46:86:9e:d5:c6:ce:4a:c9:39:
         2d:7a:78:72:46:2b:17:2e:f2:52:02:5f:36:0c:40:00:b8:20:
         ed:8d:40:b1:bc:26:f4:25:9a:6f:43:60:73:18:a5:2c:04:ad:
         95:a1:b5:eb:97:13:bb:2f:c7:ae:41:93:34:b7:0a:b0:2c:17:
         42:de:81:96:a6:7d:12:4d:9d:11:72:b9:f7:6c:95:e9:75:f4:
         fc:4d:55:a3:f9:c1:3f:d6:37:2e:2c:56:ed:73:11:d2:81:09:
         be:ae:db:94:32:95:06:b3:3a:ab:54:e8:6e:07:1b:88:f6:a7:
         23:73:3f:e2:3d:11:af:d2:6c:8f:c9:62:a7:3e:93:8d:96:65:
         03:ee:e5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:58:48 2025 by rpki-client