Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908/facc50b6-c426-360d-8c24-fc9a1c7a54b9.roa
File:                     facc50b6-c426-360d-8c24-fc9a1c7a54b9.roa (raw, json)
Hash identifier:          03QC6WfrhErDAbTn+yRCj3Th/s+B8tRIVKrszwF8kZM=
Subject key identifier:   6D:D0:8E:19:7E:A2:E3:36:73:BA:C4:D4:17:1B:E2:95:57:96:CB:39
Certificate issuer:       /CN=ec2c9ce7-041a-4f47-8928-4a1f5b344908
Certificate serial:       010D0C9F4328584F7A4D9B05235A7BE2B9C85800
Authority key identifier: 3C:0E:F3:12:24:78:E1:73:3D:2B:53:D7:7D:CF:D0:1A:DD:58:83:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908/facc50b6-c426-360d-8c24-fc9a1c7a54b9.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     55105
IP address blocks:        150.252.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908/ec2c9ce7-041a-4f47-8928-4a1f5b344908.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908/ec2c9ce7-041a-4f47-8928-4a1f5b344908.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4d:9b:05:23:5a:7b:e2:b9:c8:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec2c9ce7-041a-4f47-8928-4a1f5b344908
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=0cf18f50-b23c-45c6-897f-45f159e11579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4f:b1:33:a0:0f:a8:10:44:c4:7a:de:87:e3:
                    96:75:5e:34:a6:77:99:20:9b:c5:7f:55:2b:23:ed:
                    10:f2:e1:d1:18:c6:0c:29:3e:ad:b1:20:4d:a7:c9:
                    38:1d:3e:e7:38:bd:10:ad:f2:de:64:fc:38:d0:16:
                    b9:10:d3:f7:6c:7f:6b:a8:16:06:7d:b4:34:6f:52:
                    f2:4f:20:38:79:00:8d:fb:94:aa:4d:45:bc:4f:93:
                    9c:20:55:40:31:6b:57:22:5f:11:9e:d2:7a:97:2b:
                    17:53:f6:59:ea:49:ed:9b:ef:62:fa:3f:40:aa:21:
                    df:ba:ca:b9:21:63:c2:fb:17:45:36:46:17:03:86:
                    cc:7f:ee:40:97:af:b8:33:14:d0:9a:92:95:7c:5a:
                    8e:03:1b:46:07:16:1b:d8:1b:9c:77:22:65:f8:36:
                    3c:73:b3:8e:a9:0f:94:a2:e6:22:0a:c5:c4:b3:c0:
                    6c:0d:1f:10:70:04:67:52:e1:65:fc:a7:3b:0e:76:
                    fc:69:da:c6:a0:92:f8:2e:89:83:66:70:a0:3b:04:
                    f3:a2:d6:b1:78:fd:cf:8b:0f:35:6b:b6:fa:4e:95:
                    47:5f:1e:1c:20:51:2b:4e:4f:5f:ec:05:22:98:f9:
                    39:e3:9f:87:7d:2a:d5:1b:45:c7:09:00:89:05:5f:
                    61:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D0:8E:19:7E:A2:E3:36:73:BA:C4:D4:17:1B:E2:95:57:96:CB:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908/facc50b6-c426-360d-8c24-fc9a1c7a54b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908/ec2c9ce7-041a-4f47-8928-4a1f5b344908.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0E:F3:12:24:78:E1:73:3D:2B:53:D7:7D:CF:D0:1A:DD:58:83:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:fe:db:43:ad:65:01:69:c0:e2:b1:c6:99:00:4d:5a:21:20:
         7d:23:e1:91:9a:53:2b:f9:87:82:12:b3:3c:44:0d:22:0c:1e:
         38:9d:8a:8c:a2:8b:d6:97:db:a6:83:57:bd:29:eb:5d:f0:fe:
         50:f8:b5:b8:14:78:9b:7d:51:8e:5c:6c:74:40:cd:e7:f4:2d:
         d3:ec:a7:c1:a9:52:33:4b:fc:db:43:dd:5a:c0:e5:11:e5:63:
         ed:0a:b2:13:86:46:2b:95:55:69:d0:44:af:9c:f2:61:0c:1b:
         ed:95:3e:64:9f:56:7b:34:62:b8:a1:94:ae:2c:3c:90:d6:1a:
         01:88:f0:90:b2:88:bd:92:28:a1:3b:52:b7:d0:f8:9a:fc:67:
         87:ea:f8:32:f8:b9:04:ca:2a:fb:b2:b1:2f:e5:e6:e8:58:4d:
         4f:a6:19:c1:c0:74:37:26:29:71:d8:b8:e3:5f:04:7d:f1:1a:
         8c:01:16:c2:3c:14:de:7b:ee:e5:42:e9:e4:37:46:75:5e:ba:
         66:c6:00:f7:70:42:39:bf:c4:33:b6:bf:ed:f8:68:d7:84:dd:
         eb:a2:d8:b4:ae:fc:08:7e:b0:e5:fe:ef:11:23:00:8a:55:34:
         d3:73:79:35:76:a1:c5:06:27:ee:8b:d3:be:76:2f:ee:92:40:
         74:68:30:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:39:12 2026 by rpki-client