Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/af688446-fb3c-3d46-b9d5-402fe1dbc68a.roa
File:                     af688446-fb3c-3d46-b9d5-402fe1dbc68a.roa (raw, json)
Hash identifier:          9Ji52NwioryzWStsQ32iMfEcxEwxyQgnbpVARwkX5gQ=
Subject key identifier:   D9:73:B1:C0:0E:53:F3:52:59:D4:C3:79:88:97:83:3B:83:3A:05:5E
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584AF25685A64EFC54FFB05B6380
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/af688446-fb3c-3d46-b9d5-402fe1dbc68a.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     26744
IP address blocks:        150.252.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:85:a6:4e:fc:54:ff:b0:5b:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=2bcc5343-2039-415d-a455-a44376e2cf94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:54:8a:3d:c7:95:25:46:7c:05:af:3d:58:8b:
                    3c:89:de:6d:64:c2:d6:4f:dc:6c:ea:db:94:a8:cf:
                    9b:9c:0e:42:5b:7c:24:b5:d4:20:fd:66:b8:3e:d9:
                    cc:78:b5:11:6e:68:d3:e4:84:5c:a8:32:e1:12:3a:
                    bf:c2:a8:51:07:ec:19:3f:7a:e0:0a:23:7f:c5:f4:
                    3f:54:e5:e1:cc:e9:de:e8:63:4e:41:87:97:a4:3a:
                    12:3f:2f:2f:39:db:35:51:09:3d:76:d6:2c:95:ab:
                    27:70:c8:8e:f6:65:d2:e1:9f:9f:fc:e5:87:fb:9d:
                    f2:27:9f:bc:38:0e:5d:e5:99:71:c4:42:2d:18:36:
                    00:d3:67:81:50:0a:07:9a:78:de:c4:b3:61:f0:90:
                    57:e2:c2:54:f2:60:6d:30:af:04:a3:01:0b:02:c4:
                    76:7f:f3:ee:9e:b7:f7:4f:d8:a6:d7:f4:4c:46:19:
                    ab:bb:b2:a3:06:12:50:34:5b:62:91:0a:63:e7:00:
                    b5:1d:b6:cb:39:34:d1:db:c0:49:f4:25:f8:da:7a:
                    cf:da:8d:7a:e5:bd:dc:80:e1:0a:ad:c2:88:a5:ef:
                    45:e8:9d:e6:ae:20:f2:7c:87:16:c1:c1:c3:11:48:
                    dc:ec:31:ab:c0:58:8a:0a:0b:ae:4d:b4:ef:93:23:
                    ae:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:73:B1:C0:0E:53:F3:52:59:D4:C3:79:88:97:83:3B:83:3A:05:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/af688446-fb3c-3d46-b9d5-402fe1dbc68a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:94:e4:a4:56:ee:ae:13:bc:f3:66:a0:d2:7e:b3:1b:95:90:
         d2:62:01:84:82:94:31:1c:8c:5e:de:4f:b3:f8:6e:7f:d0:94:
         6b:67:d4:60:c0:6d:ed:05:0e:af:3c:42:1c:30:cc:2b:1e:9e:
         3e:fd:29:45:36:54:53:6a:47:09:5b:e1:f2:bf:a1:9f:19:4b:
         bd:81:16:dc:08:7d:f3:81:ac:b0:8e:c4:d3:5e:c7:d3:ec:ec:
         9d:0b:26:a5:8b:c1:a1:8c:f4:ad:ac:e3:48:28:da:c1:fe:ee:
         d8:4b:6c:dd:20:e8:c2:17:f3:da:5a:13:c7:a9:da:f1:18:35:
         4e:82:59:c9:e8:c6:4f:8f:71:e4:4f:5c:af:d8:07:2c:74:45:
         50:eb:d3:c4:c6:a8:45:44:ac:b1:00:b2:87:19:cd:f2:a6:36:
         25:30:58:52:a0:e6:f4:b3:1f:af:22:e6:16:a3:56:4b:a7:da:
         e0:08:af:91:76:48:d5:d2:c8:a2:03:65:28:a2:72:3c:f9:b1:
         fa:4b:24:ce:f9:01:34:c1:14:02:0e:ad:11:98:03:e8:6e:42:
         b8:f7:b8:f6:ba:29:3e:37:c6:13:79:99:68:61:d2:4e:ef:45:
         03:ac:6f:e4:0e:57:df:d7:6e:fa:66:9c:c3:56:1a:d5:d8:7d:
         d0:e6:bd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:48:45 2025 by rpki-client