Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/856a6587-3b63-3174-9775-a30ce7def824.roa
File:                     856a6587-3b63-3174-9775-a30ce7def824.roa (raw, json)
Hash identifier:          E2/a4+M00Uesoj0ovrRmeGx0Fnhx3C0quymAe0fhaWM=
Subject key identifier:   CC:A2:AC:BD:BD:00:F0:07:5C:E6:CB:84:88:53:57:C5:AF:39:51:D5
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584AF256852C570D17C35A6F0700
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/856a6587-3b63-3174-9775-a30ce7def824.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     26744
IP address blocks:        150.252.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:85:2c:57:0d:17:c3:5a:6f:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=6a41e42d-728a-4916-a294-ead98e9ff279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:58:a6:65:68:5b:32:00:30:b3:db:06:35:08:
                    8f:bc:4d:aa:d4:48:11:67:74:a2:4a:06:06:7f:c6:
                    8c:be:d0:f9:65:f6:4c:e5:2b:b5:dc:76:49:22:27:
                    5b:14:b2:5c:17:2d:92:19:ea:80:b5:9e:63:66:6d:
                    26:da:3e:34:76:8c:b4:48:ba:72:33:97:a5:17:e6:
                    dd:6d:c9:3f:86:b2:1a:e8:68:0e:71:b0:22:7f:9c:
                    96:4c:f9:54:3d:98:dc:79:b6:3d:82:3c:7c:d5:97:
                    ce:1e:1b:25:c4:70:af:f7:8a:70:4d:ec:78:ac:17:
                    92:6d:d2:fd:05:04:4f:3c:77:65:7b:b2:30:d0:db:
                    63:e1:f7:a4:0a:f9:88:5f:a6:7a:b4:8f:e4:50:c7:
                    8a:6e:63:f0:9e:37:60:b0:4e:30:bd:8f:84:44:19:
                    a0:ca:36:86:c4:53:6e:ac:f9:04:1e:0d:34:7c:74:
                    f2:06:9e:32:3a:98:70:81:1d:9c:16:68:77:b6:32:
                    a8:46:68:79:41:84:a4:67:8b:a3:19:0f:80:c7:4e:
                    df:aa:ce:4c:5e:e7:f1:16:cd:76:79:75:6c:88:c0:
                    85:81:9c:85:b9:89:97:68:86:d3:1a:af:57:57:4e:
                    22:02:96:f5:ad:75:30:b7:b5:13:62:1c:f5:8e:35:
                    d6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A2:AC:BD:BD:00:F0:07:5C:E6:CB:84:88:53:57:C5:AF:39:51:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/856a6587-3b63-3174-9775-a30ce7def824.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:39:e9:f8:ea:2d:61:67:e2:f5:cc:f8:d4:d0:7a:c6:af:4e:
         fc:28:ab:d6:11:0c:ea:1f:bd:33:9b:7c:53:27:6b:d1:69:47:
         64:8f:b8:69:36:42:93:8a:66:9f:74:9f:a8:35:29:68:d4:2b:
         13:46:c7:bb:df:20:fa:d5:ce:dc:00:bf:af:54:b9:74:27:15:
         32:c3:66:df:25:87:c1:82:d7:1a:70:f1:27:fa:1e:98:c9:77:
         69:63:0e:a3:9c:3c:7e:de:90:82:0c:8f:07:19:60:c3:e8:59:
         2c:9e:68:d4:2f:2c:fd:06:24:a4:8d:49:b4:7e:ef:93:7c:8d:
         24:5d:9a:f8:94:96:dc:41:26:90:81:7e:c3:10:e7:6f:c3:b4:
         94:a3:dd:08:92:38:79:86:6f:ea:e7:28:5c:cc:a7:e0:03:e6:
         54:98:b0:b6:b6:eb:4f:44:50:0d:82:10:ef:42:67:0d:30:50:
         e4:21:97:40:a8:6e:82:e8:b1:f0:86:79:b1:87:27:44:dc:72:
         6c:79:50:b3:77:39:6c:01:8c:95:0d:fb:42:57:92:6f:57:5c:
         96:9f:2f:21:15:20:0f:52:25:ce:36:b5:39:32:0c:cf:4a:70:
         a6:29:83:f6:79:53:a7:4f:ba:c7:92:4c:3e:2e:9c:e0:61:dc:
         93:11:18:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVoUsVw0Xw1pvBwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz
ZjhjMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk
NmE0MWU0MmQtNzI4YS00OTE2LWEyOTQtZWFkOThlOWZmMjc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolimZWhbMgAws9sGNQiPvE2q1EgRZ3SiSgYG
f8aMvtD5ZfZM5Su13HZJIidbFLJcFy2SGeqAtZ5jZm0m2j40doy0SLpyM5elF+bd
bck/hrIa6GgOcbAif5yWTPlUPZjcebY9gjx81ZfOHhslxHCv94pwTex4rBeSbdL9
BQRPPHdle7Iw0Ntj4fekCvmIX6Z6tI/kUMeKbmPwnjdgsE4wvY+ERBmgyjaGxFNu
rPkEHg00fHTyBp4yOphwgR2cFmh3tjKoRmh5QYSkZ4ujGQ+Ax07fqs5MXufxFs12
eXVsiMCFgZyFuYmXaIbTGq9XV04iApb1rXUwt7UTYhz1jjXWQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMyirL29APAHXObLhIhTV8WvOVHVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm
ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvODU2YTY1ODctM2I2My0z
MTc0LTk3NzUtYTMwY2U3ZGVmODI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm
ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx
M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj
ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlvzLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGY56fjqLWFn4vXM+NTQesavTvwoq9YRDOofvTObfFMna9FpR2SPuGk2
QpOKZp90n6g1KWjUKxNGx7vfIPrVztwAv69UuXQnFTLDZt8lh8GC1xpw8Sf6HpjJ
d2ljDqOcPH7ekIIMjwcZYMPoWSyeaNQvLP0GJKSNSbR+75N8jSRdmviUltxBJpCB
fsMQ52/DtJSj3QiSOHmGb+rnKFzMp+AD5lSYsLa2609EUA2CEO9CZw0wUOQhl0Co
boLosfCGebGHJ0Tccmx5ULN3OWwBjJUN+0JXkm9XXJafLyEVIA9SJc42tTkyDM9K
cKYpg/Z5U6dPuseSTD4unOBh3JMRGFk=
-----END CERTIFICATE-----
Generated at Sun Aug 24 05:35:44 2025 by rpki-client