Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/f99b7391-85a3-3cb4-a259-107cd981ef97.roa
File:                     f99b7391-85a3-3cb4-a259-107cd981ef97.roa (raw, json)
Hash identifier:          jPkHHcygSgvjpiso+2HG5jDsOkbVrqTLEHokUMSA2dE=
Subject key identifier:   82:ED:84:09:74:E4:C9:94:4E:AD:6C:9D:48:4D:19:F4:E0:02:E5:18
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584E736A27392700131C60A83B80
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/f99b7391-85a3-3cb4-a259-107cd981ef97.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     15313
IP address blocks:        150.252.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:27:39:27:00:13:1c:60:a8:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=d6604538-230d-4c99-8c6f-77f405e26459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e1:f9:1e:b2:84:71:e4:8e:52:e9:4d:81:c7:
                    3d:5a:37:e8:a1:cd:60:eb:b2:c7:c5:3a:10:76:da:
                    7e:fb:83:85:a2:76:75:21:82:74:2a:7d:d0:99:49:
                    d2:30:bd:0c:f6:9d:24:ad:96:6c:93:21:0f:84:c6:
                    61:f7:82:ee:19:9a:10:dc:ca:69:ae:4b:40:97:9d:
                    42:e3:cc:48:28:76:39:9e:85:47:f4:9d:f6:7c:be:
                    ac:d9:06:5e:b9:95:d0:e5:0a:09:ff:1b:7f:cc:7f:
                    79:8b:53:6e:ef:2e:70:51:0c:e2:bd:a4:09:2d:38:
                    fd:7a:f4:46:b8:d7:15:bc:e0:c0:6d:41:44:4d:7b:
                    30:86:14:e0:7f:a9:93:1a:89:7e:c7:16:b8:b4:ac:
                    3e:a4:60:66:25:63:dd:1a:32:ca:29:de:cc:80:a4:
                    19:88:97:d4:f5:77:97:f4:70:3d:d3:9c:2e:de:7f:
                    5e:2d:09:4a:0b:98:fa:ba:6a:f1:21:61:e0:5c:9e:
                    77:a8:63:46:8a:8d:15:00:e0:56:e6:a5:84:99:2d:
                    96:d1:29:40:ee:da:02:47:d6:bb:3a:11:df:a0:2f:
                    40:01:e0:ae:10:44:4d:7f:4b:84:14:c8:15:91:16:
                    66:3c:dd:ad:00:8a:46:c2:50:75:8d:65:30:0b:1d:
                    7b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:ED:84:09:74:E4:C9:94:4E:AD:6C:9D:48:4D:19:F4:E0:02:E5:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/f99b7391-85a3-3cb4-a259-107cd981ef97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:5e:80:7d:49:29:25:29:ce:3a:47:1d:a8:83:ca:2e:e0:a2:
         01:fd:cb:05:2d:fd:86:c4:c0:c5:6b:ea:d2:3c:e4:00:08:a4:
         a4:ad:a1:25:81:50:14:b8:0a:c6:19:f3:17:47:58:1b:a3:05:
         18:50:0b:3b:6b:b4:dc:cb:cb:89:5c:eb:55:be:50:67:29:27:
         cc:a6:8d:cf:e9:9d:8b:7e:ff:ed:14:6a:56:41:7d:74:06:84:
         d3:0b:73:41:a9:95:a1:7a:8c:80:f6:e1:a9:d3:19:a2:86:d9:
         bc:99:3e:f7:eb:f2:10:db:dd:f7:88:4a:05:b3:5a:b4:20:f0:
         e4:04:6b:26:7b:94:c0:91:a3:25:24:8a:2d:e1:8b:47:06:5a:
         60:b1:84:55:2f:b3:2d:90:0e:09:28:18:2f:38:26:ff:38:df:
         31:20:6f:fa:d0:74:a5:76:80:3c:f7:2c:c2:a2:00:13:f4:90:
         a5:ca:3d:c3:ef:1d:83:ad:c1:bc:47:39:2d:77:48:63:3e:22:
         a2:78:90:2d:1b:64:ff:a8:e5:65:5e:31:5e:70:3a:18:e1:0d:
         35:59:b2:99:44:cf:90:e4:3d:29:4c:45:97:80:aa:07:ec:99:
         d9:aa:97:88:71:c7:70:d5:dc:3d:65:49:60:84:7b:21:e3:5e:
         b2:c9:e1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:52:23 2026 by rpki-client