Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS150127.roa
File:                     AS150127.roa (raw, json)
Hash identifier:          B7E4ULoMuJEvrEwUphAowUmXvmZqp04mI4WJ8+w9KOk=
Subject key identifier:   51:DC:D2:CA:03:2F:F9:F1:B8:09:90:90:26:B0:8C:6B:91:06:61:48
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       75DCD6B3C6C1A27EC91B0C5EB541C1D8956F8225
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS150127.roa
Signing time:             Thu 10 Jul 2025 05:29:44 +0000
ROA not before:           Thu 10 Jul 2025 05:24:44 +0000
ROA not after:            Thu 09 Jul 2026 05:29:44 +0000
asID:                     150127
IP address blocks:        140.99.148.0/23 maxlen: 24
                          140.99.152.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 07:14:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:dc:d6:b3:c6:c1:a2:7e:c9:1b:0c:5e:b5:41:c1:d8:95:6f:82:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Jul 10 05:24:44 2025 GMT
            Not After : Jul  9 05:29:44 2026 GMT
        Subject: CN=51DCD2CA032FF9F1B809909026B08C6B91066148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e9:c6:34:c2:ea:89:ba:e6:e4:92:f6:1e:9a:
                    d1:fd:52:e0:84:d6:ba:e8:40:ed:0a:4b:28:50:22:
                    ee:12:32:b7:f4:b8:63:1f:1e:f1:16:f9:e6:7b:95:
                    dc:46:d0:fe:1a:ac:5b:32:e4:f2:af:1b:5a:b3:4e:
                    ea:3e:05:40:75:4a:ce:6c:c9:d0:fd:ce:32:4d:d5:
                    2a:cc:b8:34:e4:59:a2:1f:44:48:5d:9d:e0:b3:0e:
                    e7:a1:d5:56:d5:c2:c1:8a:ea:22:b7:1b:c7:20:fa:
                    f5:80:f7:72:e7:88:7b:cf:d3:9e:22:ce:48:ae:50:
                    6f:a9:f3:72:65:1b:b2:45:4a:a3:be:0a:09:6d:d9:
                    23:ad:a2:dc:f6:bc:84:a7:1b:54:08:32:c9:fb:d8:
                    2f:3b:32:7a:4f:b0:42:9b:d2:9d:2e:78:3f:79:0b:
                    5f:be:5b:53:2c:8a:4f:ee:0b:4c:e3:d2:2b:40:81:
                    dd:d0:15:5d:b1:51:00:63:72:92:04:12:82:7a:28:
                    3e:15:84:b9:5b:56:96:7f:8f:68:ef:ae:51:4d:8e:
                    39:49:31:77:ac:ab:57:c1:f9:2d:f6:74:28:d7:7c:
                    28:bd:ea:27:5a:bd:49:2a:04:31:bd:0b:ff:a3:d2:
                    11:97:f4:68:22:f3:16:5d:e8:ff:c3:9f:2d:89:86:
                    c3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DC:D2:CA:03:2F:F9:F1:B8:09:90:90:26:B0:8C:6B:91:06:61:48
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS150127.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.148.0/23
                  140.99.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:ac:96:28:02:3b:8c:3f:28:36:bc:6e:83:94:8b:9b:b9:66:
         45:17:45:5f:a6:84:77:36:61:d7:9f:24:19:17:06:26:20:34:
         33:20:2c:8c:c2:bc:ef:5f:7a:f3:aa:3e:a9:15:cc:ed:cf:79:
         36:ef:c3:57:c1:10:b9:26:ee:9b:8f:b5:00:a6:75:f0:d7:12:
         fa:37:48:59:4e:70:ef:24:1d:a6:02:2e:5e:54:e9:57:c6:70:
         92:db:f9:b0:67:68:35:20:f8:34:e2:ce:24:76:3b:5a:b1:64:
         63:20:ad:33:23:e4:b7:50:e5:46:71:60:05:bd:c2:63:4f:9c:
         3d:b7:74:fe:a8:08:22:18:cd:74:22:71:c4:3b:ec:ca:8b:a1:
         cc:92:c8:1d:05:17:90:94:5c:f4:d9:f4:ce:99:37:2d:0e:71:
         ce:e5:8a:53:d7:fc:c7:b6:32:d8:c3:76:4b:e7:d0:e2:e0:10:
         32:1a:6b:51:b1:90:7d:45:00:80:d6:a3:d6:2c:92:bb:50:51:
         32:01:19:ba:cf:90:ee:b1:f1:12:97:9f:e0:6e:3a:81:ac:35:
         d6:23:09:b3:3d:41:4b:61:54:9d:26:d8:a9:a1:fc:c2:47:17:
         b7:0e:3a:5d:85:e4:45:32:bf:df:56:34:f1:c9:82:b1:8a:51:
         84:e9:aa:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:07:03 2025 by rpki-client