Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/375635db-b9dd-3973-adcc-dbf85d1be62c.roa
File:                     375635db-b9dd-3973-adcc-dbf85d1be62c.roa (raw, json)
Hash identifier:          LxtiOSsng+nFAkzFc2cc8Gw+xdwhLBQcYQinE/OiTCs=
Subject key identifier:   FF:87:56:D3:01:BA:A0:A9:BC:5D:E7:F9:51:60:47:42:01:DD:75:58
Certificate issuer:       /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial:       010D0C9F4328584ABD4B9D29792DC2EE34049B00
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/375635db-b9dd-3973-adcc-dbf85d1be62c.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     19257
IP address blocks:        107.150.160.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:9d:29:79:2d:c2:ee:34:04:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=7d5d5005-6ac4-42c9-a616-6f8dae8a4587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:dd:66:50:8f:84:c8:97:b7:86:7b:41:d5:47:
                    e9:8c:63:26:18:48:b7:9c:d4:a2:00:10:e8:97:bf:
                    30:38:4c:79:4b:80:e0:ef:d7:01:31:0d:7a:e5:1a:
                    3e:46:11:c5:d1:17:c4:e4:11:8e:95:68:e0:92:e0:
                    16:8a:bc:76:4d:20:1b:da:f5:1b:eb:18:b5:be:3b:
                    30:7c:76:aa:f4:d6:21:85:e5:04:6c:77:24:f0:22:
                    5c:5a:f7:4f:e9:2a:c1:3a:cf:28:8a:cb:52:a6:8a:
                    f6:9f:ca:95:cc:3c:3c:ce:b5:da:4a:50:d8:60:53:
                    fe:a3:3e:28:ec:b1:b7:71:87:1e:05:8d:98:91:b0:
                    26:47:de:16:19:6c:cb:2e:31:f6:c8:38:81:51:ad:
                    4c:3d:cf:b6:c2:74:23:db:c0:83:06:4a:bf:02:ae:
                    bd:83:ec:80:5d:6f:11:20:b4:76:ce:95:6e:0f:aa:
                    59:62:4a:9b:4b:0f:75:82:3a:64:91:7b:ea:59:93:
                    52:66:07:ae:bd:b8:a8:d0:8d:cb:8b:41:38:80:09:
                    dd:5f:03:6e:9b:62:68:47:99:7b:bf:a0:85:3d:97:
                    ae:e2:a7:4a:9f:09:d0:13:09:d4:f9:79:ff:a9:bf:
                    cd:e0:10:9b:d4:23:60:aa:9d:54:9f:77:d5:e6:42:
                    69:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:87:56:D3:01:BA:A0:A9:BC:5D:E7:F9:51:60:47:42:01:DD:75:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/375635db-b9dd-3973-adcc-dbf85d1be62c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.150.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:d2:8d:33:1f:10:5a:c4:a0:b0:7e:d4:a9:03:c5:78:cf:df:
         17:56:13:84:bc:11:ba:47:39:5e:26:0e:f1:fb:e2:ec:b5:fb:
         53:b8:27:db:9b:5a:77:87:a7:cf:76:25:f0:50:b5:b5:98:e9:
         44:88:9e:03:4f:20:53:67:62:53:10:02:d0:c6:23:84:a8:08:
         e0:a8:e4:2f:22:28:94:47:32:fd:35:76:06:e5:fb:ee:34:14:
         e8:76:ab:e7:dd:99:33:0a:e1:ea:2a:10:78:f8:37:89:80:98:
         e6:53:44:f4:51:3e:16:72:63:a5:4b:0b:88:4a:bc:83:61:90:
         9e:a4:e4:c8:dc:8d:03:36:33:f2:59:f4:f6:d7:8b:0e:69:56:
         b3:2c:fd:b3:43:9e:b1:81:a6:d6:a5:41:c1:c6:fb:6d:4a:18:
         32:a4:42:fb:95:12:32:f0:05:58:99:8e:c6:92:95:60:59:95:
         50:3d:cb:4a:c2:ca:64:15:fa:0c:65:9b:57:df:9c:16:bc:c4:
         cc:91:d5:e3:53:fd:fc:f8:6f:19:87:fc:35:c0:03:c0:aa:4b:
         de:ea:86:c0:cd:a9:1d:f3:0b:00:35:01:ff:90:50:54:72:38:
         5e:d1:05:d3:60:1f:3e:0f:f6:e8:4d:d3:38:a5:20:f6:d9:75:
         35:fd:13:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:17:10 2025 by rpki-client