Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/7edc43fd-1fb4-3a69-a027-dd69506d1c76.roa
File:                     7edc43fd-1fb4-3a69-a027-dd69506d1c76.roa (raw, json)
Hash identifier:          whdaVSOQ0G0EiZrRSTA+OXBx7kxdo3luxQk/zMuHaLE=
Subject key identifier:   B7:CC:01:3E:0B:64:4F:BC:B8:6D:83:D1:94:09:A6:A7:39:5F:16:5B
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584AF2568405F499C56B4DAE8640
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/7edc43fd-1fb4-3a69-a027-dd69506d1c76.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     15313
IP address blocks:        150.252.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:84:05:f4:99:c5:6b:4d:ae:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=f3274a61-e168-425b-a6f1-9049c6409e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fc:eb:76:0b:91:fa:d2:e3:a5:ca:82:78:7a:
                    ce:9d:0c:c7:3d:54:df:e1:4e:de:95:81:df:3a:2e:
                    f8:6d:f3:83:65:5c:bb:a6:2a:9b:ba:84:f3:84:9c:
                    61:75:ec:65:f1:c1:cd:bb:42:9c:94:fc:be:98:9c:
                    3c:33:8e:02:ab:48:78:38:65:14:3b:c7:79:bd:88:
                    c4:5d:a4:4b:20:71:76:1d:a8:72:ac:ab:82:72:2d:
                    5e:53:29:a9:9f:b2:3c:fb:81:1a:b2:0b:27:f4:8e:
                    2d:05:88:20:26:b0:22:b5:6f:8c:d7:b2:29:de:cb:
                    bc:49:d8:38:74:82:53:f6:a3:47:6c:bb:e6:5a:45:
                    bc:a8:87:83:c2:01:f7:41:b5:f3:4a:16:65:90:1f:
                    b5:dd:e7:21:55:9c:56:c5:a3:dd:0a:03:19:74:68:
                    5b:6e:1f:88:b4:f3:7a:c9:f3:8e:30:0d:52:c0:95:
                    18:b6:e0:d4:48:b3:80:3f:a6:28:cb:e4:53:69:ab:
                    9b:fd:81:97:a8:eb:44:28:5e:4a:91:55:77:74:33:
                    14:13:b2:77:ff:69:b4:a4:53:24:41:e4:52:b9:db:
                    f2:1a:c2:84:03:49:5e:7e:89:7f:a3:b3:5b:02:f9:
                    98:8d:7b:96:54:de:c0:b1:6b:14:8a:d4:be:04:44:
                    2d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CC:01:3E:0B:64:4F:BC:B8:6D:83:D1:94:09:A6:A7:39:5F:16:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/7edc43fd-1fb4-3a69-a027-dd69506d1c76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:e4:89:7c:30:49:9c:82:eb:af:06:85:85:57:5b:24:f9:9f:
         aa:ca:cb:ee:ef:8c:87:5d:20:37:ed:dc:e1:db:74:7e:2e:c5:
         e5:07:7f:c3:cf:ef:ab:c8:3f:12:2e:c5:c8:c9:a6:2f:8a:3d:
         b9:94:18:a0:12:4f:08:06:8f:34:06:ae:4b:af:f4:31:c4:a5:
         99:3d:d9:a7:c4:e6:d5:2c:e1:d4:f1:4e:cc:b9:47:e3:61:d6:
         3f:cb:87:fb:4b:1d:c9:55:8f:17:72:41:63:c5:7d:96:cb:45:
         e1:cc:03:e1:78:8e:3e:44:45:8e:b6:d3:a1:5a:30:6a:bd:4c:
         e0:5d:7c:0d:a5:1b:fb:4f:ed:eb:a7:fe:41:79:5e:36:00:9d:
         cf:23:dd:c0:c4:f5:da:30:4a:21:55:0b:37:31:1f:b8:3d:7e:
         93:f0:cc:44:80:96:27:80:70:3d:50:c4:09:1a:a8:b7:6b:e1:
         85:dc:40:bc:46:e3:f1:fe:c4:65:ca:a4:cd:52:b8:60:b2:0e:
         34:8d:ce:7c:86:7c:db:e8:2b:34:88:72:77:1a:e6:e3:b9:f3:
         a9:ba:de:58:45:52:19:cc:fc:f4:ee:b6:96:41:c2:ba:5e:f0:
         df:d8:ed:43:2b:8c:69:b5:23:76:51:a5:e4:9b:de:da:41:b6:
         37:a3:a1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:27:13 2025 by rpki-client