Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/375635db-b9dd-3973-adcc-dbf85d1be62c.roa
File:                     375635db-b9dd-3973-adcc-dbf85d1be62c.roa (raw, json)
Hash identifier:          K7XeH8E3UBV4+n4l1BRESTcAyFQal809hroVyOTtso8=
Subject key identifier:   0C:E4:6A:A5:6C:90:E0:C0:04:5A:25:FD:75:13:A1:3A:98:06:96:C9
Certificate issuer:       /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial:       010D0C9F4328584D5E1A6B30BF21A04EC7E60600
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/375635db-b9dd-3973-adcc-dbf85d1be62c.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     19257
IP address blocks:        107.150.160.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:6b:30:bf:21:a0:4e:c7:e6:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=aa122113-3fe7-49aa-8590-4adce23049ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:92:26:4b:21:40:ad:21:3f:a8:5f:94:9c:e3:
                    00:71:eb:e9:3e:a0:cd:25:95:a5:2f:49:db:b9:ee:
                    8c:4f:d4:bf:c8:df:e4:73:ea:ab:19:48:bb:37:ac:
                    52:d9:e3:67:08:ff:a9:c6:c9:9d:2c:bc:cd:d1:2d:
                    26:2d:2b:62:c3:65:77:60:10:f0:7d:67:e2:36:40:
                    6c:69:8b:bf:30:50:48:5f:ac:f2:21:14:87:9a:84:
                    65:0e:ed:8d:9d:a7:0a:62:53:6b:8e:ba:30:f2:97:
                    8d:6d:29:26:fd:c8:3c:a4:64:2f:85:11:e0:2f:4e:
                    8a:5f:18:42:d2:ce:f7:44:36:e2:12:c0:ac:7e:5d:
                    cf:be:40:44:7b:c6:81:a9:59:e7:60:f0:91:13:73:
                    dd:06:ae:73:1a:00:b6:c1:0c:87:9f:90:c2:c9:b3:
                    22:86:9b:bf:7c:6e:e5:39:86:75:65:b0:5e:e4:76:
                    3f:eb:0e:8a:2f:2d:f0:66:73:1b:05:92:a7:7c:5f:
                    7b:ed:df:25:24:07:88:3e:4e:bd:ad:a4:86:9d:f6:
                    fd:16:c0:81:ae:34:e5:48:d7:a2:6b:dd:fd:4b:9f:
                    17:a2:cd:29:09:54:28:04:71:7a:89:47:3a:28:88:
                    16:f5:08:b4:49:9a:b5:59:84:d4:9b:c4:24:33:31:
                    8a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E4:6A:A5:6C:90:E0:C0:04:5A:25:FD:75:13:A1:3A:98:06:96:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/375635db-b9dd-3973-adcc-dbf85d1be62c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.150.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:54:7b:cc:c8:69:aa:a3:a9:ce:fb:5f:69:db:27:8c:f8:5f:
         53:46:17:a4:51:24:67:c3:18:4c:f4:3a:ba:46:62:1c:28:57:
         92:72:e7:b5:b6:a7:74:f7:42:82:a3:ad:61:03:69:91:2e:c2:
         48:df:0b:f6:e7:37:0e:9d:37:8a:d2:d8:9f:f5:9b:a5:98:61:
         6e:85:a1:55:db:be:8b:20:a9:7b:f5:dc:8a:ce:2d:3b:ac:b6:
         f7:7f:94:48:a2:c3:73:ae:c1:1c:ab:e6:5d:fc:31:5c:3d:0a:
         48:c3:c9:cd:e8:f0:b4:d8:e3:8a:f1:e2:e9:dd:fb:e8:1f:98:
         7f:51:4b:5d:19:e5:2c:14:38:0d:1a:64:9a:d1:d6:9c:b0:14:
         9b:55:23:ed:66:7c:f7:00:61:1f:a6:3d:f6:9a:49:93:f9:10:
         8a:54:d5:44:f5:70:37:5e:a2:b5:34:d6:0f:4f:07:28:78:20:
         83:79:09:61:15:88:ac:47:72:53:9a:87:5f:36:46:f8:0d:e4:
         14:08:c8:55:5d:b5:d4:94:39:2f:54:95:af:64:2c:12:b1:7b:
         aa:20:4c:52:45:a9:2b:eb:82:0a:84:db:82:c1:50:b4:a5:b2:
         47:20:0f:e8:12:df:70:8b:21:96:9b:1c:0c:7f:28:ef:e2:44:
         2c:40:5b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:07:24 2026 by rpki-client