Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/8acbc2c9-7125-34b8-a346-13cd157a460f.roa
File:                     8acbc2c9-7125-34b8-a346-13cd157a460f.roa (raw, json)
Hash identifier:          OOilPBMULU4fymWNV/meNWRYfhZP0Z5FR35UDt19CFY=
Subject key identifier:   D1:7B:1B:6B:F7:86:2D:0D:82:6F:AF:57:B5:C0:5C:F1:28:D7:C6:A5
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584A119AB4F1D1AE15C7772D7480
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/8acbc2c9-7125-34b8-a346-13cd157a460f.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     26744
IP address blocks:        150.252.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:b4:f1:d1:ae:15:c7:77:2d:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=13d637c7-9479-4394-8691-e793d53f3168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d5:dd:3f:63:3d:d2:17:94:86:9d:d1:89:1c:
                    c5:fa:df:91:0e:13:07:82:29:d7:ed:04:8d:55:eb:
                    8b:ea:55:be:0f:7e:d6:6d:48:4d:c9:b7:51:63:e8:
                    7d:83:1a:b3:88:c5:9b:08:26:cc:a5:9b:45:85:41:
                    2a:06:c2:ac:81:1b:d5:c1:50:a1:c7:29:fe:18:21:
                    d5:81:dd:6f:e7:4c:9f:9f:e2:66:af:03:3a:fa:59:
                    98:05:7d:00:0e:08:6c:43:a6:61:a7:b8:74:b4:73:
                    ab:7e:bc:7c:40:98:f5:3f:da:9a:e6:e4:b0:f5:ba:
                    5c:d1:89:99:cf:bc:54:c0:70:e2:f4:73:34:6f:ec:
                    aa:2f:9e:2f:72:c2:2a:42:cd:a9:c0:95:45:f1:7f:
                    52:82:23:8a:a8:4b:49:4d:71:1d:be:66:54:cf:6e:
                    72:f0:e5:a2:ff:55:73:e2:6b:e7:39:b7:26:03:36:
                    e7:4f:09:b6:cd:16:2c:0c:dc:75:ad:b4:f8:89:d3:
                    d2:81:bc:26:8b:7e:9a:72:44:ac:d5:83:e8:a9:3c:
                    fe:de:a9:c0:2d:a3:b9:58:cc:00:85:9a:45:4e:84:
                    5e:33:f8:e5:ee:a5:40:0e:3e:b2:df:e0:6d:1a:5c:
                    7f:d9:f0:af:aa:4c:29:dd:f8:85:5b:12:be:ed:5e:
                    d2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7B:1B:6B:F7:86:2D:0D:82:6F:AF:57:B5:C0:5C:F1:28:D7:C6:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/8acbc2c9-7125-34b8-a346-13cd157a460f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:d2:fe:36:fb:35:9c:44:f7:8c:66:a1:2f:dc:6b:37:db:61:
         ef:30:56:c6:5f:65:d7:cb:09:9f:36:78:c2:36:f1:65:72:c0:
         2c:f6:ae:e7:d3:80:a2:c3:71:8a:6f:0e:23:aa:8e:0d:f6:6f:
         62:88:56:b1:66:7d:5f:a1:92:fd:43:6a:b6:e6:c3:49:cc:cc:
         f0:a3:49:a4:d6:dd:f3:ec:8a:5a:3f:77:5e:7f:33:79:a7:16:
         10:83:b3:8e:79:84:95:0a:bb:03:e0:9e:d6:9b:fd:f0:87:d4:
         92:1d:86:e0:64:5d:f4:bb:3e:f2:76:06:d5:b8:ca:10:66:a9:
         d8:5f:30:8f:91:35:0f:cd:9f:e2:1a:71:95:da:ce:c5:f2:1f:
         ef:dd:43:0b:2f:88:31:9b:cf:f8:43:92:ec:24:6d:e3:fb:b1:
         7f:b6:78:a9:5b:e6:a0:a0:f4:e5:78:13:7a:52:9d:93:d1:5e:
         94:33:58:a3:99:f8:6b:77:59:c2:99:07:71:8a:d2:64:ff:d1:
         20:05:56:9d:89:00:1f:75:0d:ef:23:18:60:16:07:7a:5e:7b:
         3d:b1:dc:70:db:60:8c:67:83:c1:95:53:8a:a6:77:e7:a0:67:
         6b:46:84:56:ba:62:05:cc:e3:56:f1:21:31:e7:2c:53:e0:8e:
         f0:71:38:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmrTx0a4Vx3ctdIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz
ZjhjMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk
MTNkNjM3YzctOTQ3OS00Mzk0LTg2OTEtZTc5M2Q1M2YzMTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNXdP2M90heUhp3RiRzF+t+RDhMHginX7QSN
VeuL6lW+D37WbUhNybdRY+h9gxqziMWbCCbMpZtFhUEqBsKsgRvVwVChxyn+GCHV
gd1v50yfn+JmrwM6+lmYBX0ADghsQ6Zhp7h0tHOrfrx8QJj1P9qa5uSw9bpc0YmZ
z7xUwHDi9HM0b+yqL54vcsIqQs2pwJVF8X9SgiOKqEtJTXEdvmZUz25y8OWi/1Vz
4mvnObcmAzbnTwm2zRYsDNx1rbT4idPSgbwmi36ackSs1YPoqTz+3qnALaO5WMwA
hZpFToReM/jl7qVADj6y3+BtGlx/2fCvqkwp3fiFWxK+7V7SyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNF7G2v3hi0Ngm+vV7XAXPEo18alMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm
ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvOGFjYmMyYzktNzEyNS0z
NGI4LWEzNDYtMTNjZDE1N2E0NjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm
ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx
M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj
ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlvzJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEzS/jb7NZxE94xmoS/cazfbYe8wVsZfZdfLCZ82eMI28WVywCz2rufT
gKLDcYpvDiOqjg32b2KIVrFmfV+hkv1Darbmw0nMzPCjSaTW3fPsilo/d15/M3mn
FhCDs455hJUKuwPgntab/fCH1JIdhuBkXfS7PvJ2BtW4yhBmqdhfMI+RNQ/Nn+Ia
cZXazsXyH+/dQwsviDGbz/hDkuwkbeP7sX+2eKlb5qCg9OV4E3pSnZPRXpQzWKOZ
+Gt3WcKZB3GK0mT/0SAFVp2JAB91De8jGGAWB3peez2x3HDbYIxng8GVU4qmd+eg
Z2tGhFa6YgXM41bxITHnLFPgjvBxOLc=
-----END CERTIFICATE-----
Generated at Mon Jun 30 00:59:04 2025 by rpki-client