Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/af688446-fb3c-3d46-b9d5-402fe1dbc68a.roa
File:                     af688446-fb3c-3d46-b9d5-402fe1dbc68a.roa (raw, json)
Hash identifier:          eDjvxzm9IQv9SoUfj0c67n3Z/L4pvDhtDhN/y0d8MH4=
Subject key identifier:   3A:EC:B0:EB:D7:47:47:72:11:07:61:44:13:37:10:64:36:3A:7E:3C
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584A119AB58654391E16268C4980
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/af688446-fb3c-3d46-b9d5-402fe1dbc68a.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     26744
IP address blocks:        150.252.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:b5:86:54:39:1e:16:26:8c:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=9918149e-776e-46ee-855d-c7f8b86d40cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b3:84:5d:71:e0:e4:54:10:54:92:25:ee:40:
                    00:90:a5:b1:08:cc:9e:c7:f8:0b:ea:ea:6f:1a:d6:
                    a1:c1:5e:94:e8:7b:7f:25:c3:25:19:95:02:2e:da:
                    88:21:76:b6:2e:5b:f3:3d:63:2b:38:fb:67:7d:30:
                    e0:e2:be:df:17:31:0b:a5:dd:69:01:77:24:a2:f9:
                    fd:be:91:92:7f:cf:8c:8c:39:ed:f8:3e:49:1f:c4:
                    0a:cb:43:c3:75:36:d3:12:42:6b:fc:93:39:1b:9d:
                    bf:3c:4b:b2:5f:54:c6:54:4b:fa:0b:09:c4:35:8f:
                    67:df:db:6a:84:bd:05:e5:8f:0f:1a:30:4b:5e:dd:
                    b3:69:3b:7b:b4:d2:2a:05:cb:a8:af:2b:46:e7:67:
                    24:c1:60:c1:3e:17:42:d6:7c:79:c9:90:1b:16:9a:
                    48:2d:4c:0a:fe:0f:e3:64:ac:43:00:df:9d:b9:96:
                    35:92:a0:56:e5:51:fa:5e:95:fc:4b:88:e8:67:ac:
                    9e:06:ab:91:07:ce:9a:7e:20:dc:24:2a:66:09:58:
                    7c:b6:32:da:27:db:21:f7:51:e2:9d:d0:4f:68:2c:
                    9f:68:37:75:43:42:0b:f7:59:d9:fb:23:73:23:d9:
                    9a:d8:d2:9e:3e:b4:f1:08:24:ba:a8:b3:03:6d:7a:
                    b7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EC:B0:EB:D7:47:47:72:11:07:61:44:13:37:10:64:36:3A:7E:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/af688446-fb3c-3d46-b9d5-402fe1dbc68a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:3c:d2:9a:a3:85:38:a1:5f:ee:d3:d2:5f:dd:78:94:ee:ad:
         38:8c:ab:bf:70:9f:d7:04:e8:da:7c:2e:fd:45:2b:97:7f:d6:
         c9:35:b6:bf:8e:00:fc:ee:d2:3c:0f:dd:c7:f7:d6:c3:d7:5d:
         1f:fe:6e:4e:da:20:35:05:9a:06:4a:8b:53:8e:4d:38:2d:50:
         41:9e:01:89:3c:c9:70:73:7e:16:17:59:0c:53:51:ed:24:cf:
         ce:da:14:26:31:d3:75:de:eb:f3:7c:8a:eb:35:e6:43:3e:1b:
         14:65:dc:27:89:89:33:d7:7a:57:09:3d:76:98:c3:51:df:e7:
         38:97:02:b0:89:c7:a3:e2:b5:9a:9c:be:9a:69:1e:1e:16:eb:
         c6:99:c2:5f:44:21:61:0d:1b:a4:a5:02:78:d9:84:5f:dc:0e:
         6c:11:73:26:14:ee:18:55:73:7e:f3:54:ab:39:12:3e:cc:75:
         6b:5f:a9:8c:53:99:b4:5e:87:e3:2a:24:3e:ec:f4:e9:19:45:
         7c:cd:8a:b6:9b:5e:c8:08:b0:9f:37:50:4f:ed:05:52:15:7d:
         44:c8:1f:be:97:49:df:3e:f9:a2:cc:e4:d7:46:51:07:2b:09:
         f8:ed:01:1f:ed:cf:b8:a9:75:68:75:5c:76:41:1f:9f:39:e8:
         56:28:b8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:09:29 2025 by rpki-client