Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/a9bcbc84-a116-3b19-9bd9-c40a4001f050.roa
File:                     a9bcbc84-a116-3b19-9bd9-c40a4001f050.roa (raw, json)
Hash identifier:          InqxG4da5pKZFsggB0SlXiI10I7E3NLYu+LxmSP4yT8=
Subject key identifier:   2D:E2:6C:0C:25:9D:14:64:E1:D8:80:91:C6:B6:25:F1:7D:8A:22:9F
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584AF2568482147F28556E282460
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/a9bcbc84-a116-3b19-9bd9-c40a4001f050.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     15313
IP address blocks:        150.252.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:84:82:14:7f:28:55:6e:28:24:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=73265d3d-c1e8-410a-b67b-6499bf23af06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:13:97:c2:5f:0f:de:19:38:5e:05:92:f0:eb:
                    06:5b:37:a5:20:c9:b1:de:35:70:2e:7c:ec:87:cc:
                    fa:d2:22:ea:5d:4f:73:f4:23:84:16:6f:1c:39:f8:
                    b6:52:52:66:8b:3b:73:ff:40:5f:e9:14:f2:52:6b:
                    ee:3b:21:7b:38:19:6d:8e:88:81:40:b5:28:5a:52:
                    6a:d6:29:26:0e:1b:16:50:8d:0f:a2:bc:82:1c:cd:
                    1c:fa:c0:9f:74:36:75:f7:4b:44:67:b4:44:55:16:
                    a9:ef:d0:bb:4b:22:88:86:62:10:1c:66:fb:c1:0f:
                    93:41:0f:b7:cc:f0:f1:ed:fc:93:c7:5e:20:96:e2:
                    e7:5e:1f:60:d4:02:83:8a:29:0c:ff:e5:0d:d3:0a:
                    1a:e3:9b:ad:b4:58:b8:80:13:7d:1b:00:39:8c:ea:
                    c7:aa:b0:4e:2f:6f:b9:9f:56:76:10:aa:1e:25:f3:
                    c5:24:39:4a:35:0a:79:0c:97:17:39:1d:54:54:c9:
                    84:01:be:8b:7d:0b:7f:a0:dc:6b:61:4a:53:e5:aa:
                    65:24:51:06:42:50:dd:e3:1b:63:04:83:fc:39:49:
                    d6:f5:4b:db:0e:69:72:22:b6:3c:02:5c:f6:27:76:
                    66:f1:5d:67:89:35:73:92:75:f0:e8:93:65:e3:50:
                    32:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E2:6C:0C:25:9D:14:64:E1:D8:80:91:C6:B6:25:F1:7D:8A:22:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/a9bcbc84-a116-3b19-9bd9-c40a4001f050.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:b5:99:93:84:e1:ad:dc:ee:03:ab:2d:d5:6a:e8:88:ad:de:
         f9:9d:60:5e:25:15:17:43:db:d9:ab:0c:b2:04:d6:3f:9b:19:
         23:46:09:e5:16:0f:a9:72:8d:93:e8:57:54:5d:80:a8:ca:7e:
         ca:be:02:55:52:c3:05:37:ed:18:0a:9a:47:78:b8:f1:bd:dc:
         16:c5:c1:b5:fd:b8:21:3d:ef:4d:7c:f7:fe:7c:5f:ca:0a:c3:
         c0:dc:f4:b0:a6:3a:00:56:11:62:d2:f6:3c:ce:69:c7:da:31:
         1b:9b:3a:c2:9d:b8:f3:26:9b:23:ed:10:91:5e:42:12:21:bf:
         f0:97:6f:37:77:d2:d6:b1:54:0d:1d:f2:7e:d2:18:5d:b3:a9:
         06:ba:97:21:d5:7f:df:30:48:df:59:0a:cf:5b:b4:b2:d2:1a:
         fd:c7:f2:b9:9d:be:79:06:02:ae:48:ae:f3:e0:b8:0e:c1:aa:
         7a:d0:20:f5:1f:f6:18:b9:5e:97:37:af:94:84:95:fd:9e:a6:
         81:7c:d6:52:78:32:ff:80:a5:93:44:96:ee:cc:95:7b:2a:73:
         47:be:3b:1c:c3:53:9c:f3:03:01:d8:54:65:3b:9d:21:54:6d:
         d2:b6:cb:fa:5f:0e:0d:40:98:68:06:e8:1e:34:75:3a:d7:84:
         84:c9:aa:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:43:17 2025 by rpki-client