Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/bf27c839-8fe0-34c3-b3c8-47bc5bf71167.roa
File:                     bf27c839-8fe0-34c3-b3c8-47bc5bf71167.roa (raw, json)
Hash identifier:          /wxtbJzduZWxg8rsQCQEEsz7otjDyV/xV61Ykfe9sJk=
Subject key identifier:   BA:84:C1:E0:39:68:7A:DD:D3:14:F7:0F:11:29:07:B2:07:06:7E:78
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584E736A2767350469191A8630C0
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/bf27c839-8fe0-34c3-b3c8-47bc5bf71167.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     26744
IP address blocks:        150.252.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:27:67:35:04:69:19:1a:86:30:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=95277943-47f3-49b7-a17b-c345085cecb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f2:3b:19:f3:a1:7a:6c:ed:5e:6e:f9:b3:f6:
                    70:d6:6a:54:6b:f0:f2:92:bd:a0:67:26:e0:c2:30:
                    5d:03:15:e0:52:ad:96:ca:2e:a4:80:11:29:fb:ba:
                    d7:e0:43:1c:aa:c9:c8:6e:50:bf:cb:36:b8:c9:64:
                    6d:29:fd:f2:a3:a8:de:a7:8a:8f:5c:f5:8c:65:f3:
                    2a:9e:d2:dd:bd:c7:cf:b0:85:e7:e5:55:3c:25:35:
                    0a:8c:5b:1d:a8:b5:53:35:6c:33:51:de:b5:d5:b6:
                    68:e1:f6:58:da:73:a4:d3:2a:ca:86:eb:5f:60:d4:
                    21:d8:91:b5:be:07:ec:04:a6:b8:ff:66:f7:de:b8:
                    89:12:35:aa:b2:3d:d2:b5:3b:35:ad:02:2a:23:64:
                    c4:d4:78:75:fd:2b:9d:19:4a:b7:73:fb:c5:66:59:
                    91:1b:28:88:fc:18:a3:4f:bf:c2:e4:d2:2a:7f:2d:
                    e3:d6:41:28:44:9f:0d:78:04:29:ab:0f:f0:ec:79:
                    5a:d3:a3:71:91:61:0b:bc:4a:e5:b0:2d:7b:25:3d:
                    e4:18:ac:7e:67:df:64:42:c0:cf:94:24:b7:dc:29:
                    a9:ac:9f:b6:3e:d3:5f:5f:f8:9d:ef:00:ec:29:67:
                    5c:3c:0b:c6:a5:56:75:4e:07:1e:85:ec:c5:63:06:
                    aa:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:84:C1:E0:39:68:7A:DD:D3:14:F7:0F:11:29:07:B2:07:06:7E:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/bf27c839-8fe0-34c3-b3c8-47bc5bf71167.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:6b:46:f9:24:7d:0f:91:ba:b0:d2:79:c6:53:83:83:58:ea:
         6d:d7:5f:d1:60:e3:eb:b8:d7:a2:f4:32:23:56:c8:be:73:78:
         a8:20:fc:81:60:a8:5b:36:fd:2d:fc:f8:23:b8:e8:fc:b5:22:
         a5:44:b8:e9:84:39:40:00:54:28:bf:f3:dd:e3:7b:e3:5f:b9:
         fd:fe:71:54:b0:c9:26:fe:fc:b5:c4:07:a1:fa:df:13:36:8f:
         cb:a3:89:46:5e:79:01:72:a5:bf:42:e5:f0:83:b1:e8:16:98:
         30:d7:dc:d1:46:d4:a8:e6:ea:37:f6:60:ec:14:24:b8:a4:2f:
         92:de:95:6d:f9:d5:57:93:f2:28:18:69:2f:e6:e2:73:72:d1:
         4a:36:21:84:82:0b:9e:96:78:50:cf:b9:62:9e:1f:6c:d6:5c:
         fd:b8:7c:56:42:84:56:70:30:88:76:c2:dd:02:3c:2d:57:4f:
         95:a8:3c:51:68:6b:24:49:f6:22:61:a6:13:e0:38:58:5b:11:
         a2:60:38:98:49:c6:48:36:f6:ad:43:26:71:81:b3:63:3d:74:
         c4:e3:b1:3f:d1:82:78:c2:6a:b9:c9:1f:3b:93:3f:20:bc:59:
         15:aa:b3:31:5f:b5:6d:8a:20:67:77:2e:15:dd:04:54:b8:af:
         70:ee:43:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:58 2026 by rpki-client