Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/4699a5c4-d286-3cfd-9267-2f11080d1857.roa
File:                     4699a5c4-d286-3cfd-9267-2f11080d1857.roa (raw, json)
Hash identifier:          J4vMewkzQmCIw+UxjrqMzwkxKoIYRA3OWR6O6yJViuE=
Subject key identifier:   2C:3C:04:F2:58:ED:F2:2D:F3:9C:BE:E4:4F:36:D7:EE:50:14:71:04
Certificate issuer:       /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial:       010D0C9F4328584ABD4B9D581B10013FCA4858C0
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/4699a5c4-d286-3cfd-9267-2f11080d1857.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     393294
IP address blocks:        107.150.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:9d:58:1b:10:01:3f:ca:48:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=f52c76fa-d0ba-4f1a-80cf-2233f35f2595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9c:f0:dd:50:64:c5:f7:32:ff:7b:3e:33:8b:
                    18:24:8f:19:7d:5e:1f:c0:7d:bc:a2:03:43:70:cb:
                    3a:49:ea:c8:63:43:6a:57:ed:57:f2:18:02:11:db:
                    a9:d8:27:41:23:61:0f:83:c8:22:fb:85:6c:19:2b:
                    98:fb:95:9c:2c:ed:aa:e7:53:9a:2e:c8:c3:23:8b:
                    f1:a8:78:e3:dc:32:d1:d7:f6:82:73:df:34:f3:fd:
                    35:08:f5:5c:9f:3b:3d:37:55:9d:0e:b9:72:57:10:
                    22:4c:49:82:5a:a8:f2:6c:03:d4:f1:b6:88:7a:f2:
                    17:b3:7d:f5:bc:b5:32:ba:8d:10:86:81:4f:d1:b0:
                    30:dc:fd:b2:47:18:f9:25:14:95:9e:32:5a:f5:8b:
                    15:df:a2:39:76:7f:36:01:f0:f6:be:6b:bc:37:93:
                    52:d9:9b:8b:66:db:76:6a:50:b6:c0:a6:40:12:1a:
                    e2:9c:4d:00:20:10:25:04:82:46:ee:a5:3e:a4:ca:
                    44:c8:b1:0d:f5:2d:52:f7:96:20:d2:c2:79:34:53:
                    3d:04:3f:da:b4:65:ed:30:47:1a:46:f0:ee:f7:7e:
                    45:52:c2:d3:0b:37:87:35:53:e5:7f:25:d5:34:f8:
                    e1:e8:8b:fd:9b:33:6f:06:cc:04:78:8c:89:54:8f:
                    34:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3C:04:F2:58:ED:F2:2D:F3:9C:BE:E4:4F:36:D7:EE:50:14:71:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/4699a5c4-d286-3cfd-9267-2f11080d1857.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.150.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:89:f0:79:ff:76:c4:02:c9:41:e8:cb:d7:de:89:e2:dd:6d:
         6c:97:8e:21:24:c1:58:4b:28:25:f6:bf:1b:fb:a7:c3:b8:df:
         1c:07:d4:41:a0:62:8c:6b:73:1e:8c:f1:6c:ff:ae:3d:66:bc:
         4a:52:f4:6b:6c:81:45:af:67:da:12:8c:a6:5d:d8:ed:1c:6f:
         e5:ca:00:43:4e:66:5f:82:89:eb:fa:b8:e2:54:19:f7:ec:3f:
         e1:a9:76:1a:c1:b8:ee:ec:96:d8:b8:8c:41:a3:c1:13:18:8b:
         e2:bb:8d:f1:10:e4:a7:b1:59:c3:37:36:94:ce:ba:29:bf:38:
         af:69:11:c4:a1:11:66:19:cf:8d:c3:2f:40:cb:87:7b:8a:95:
         f6:02:b4:5f:c7:fb:38:03:15:61:fd:09:c5:de:6e:e8:d2:65:
         1e:68:1d:4a:b9:39:7a:ba:0d:8f:96:18:dd:7e:87:a1:72:ac:
         c7:01:c7:85:9d:24:0a:a6:f0:dc:3c:c9:98:82:a0:9b:d0:a4:
         28:6b:17:b1:da:39:a3:11:12:fc:37:5a:80:60:51:b6:e2:c8:
         cc:cd:4b:fd:56:db:6e:3e:33:4e:bb:8e:a2:dd:f5:9b:83:9c:
         c0:c0:63:4a:19:b0:f2:ef:c1:9d:b5:f9:81:cc:39:d1:b5:58:
         5c:b1:dd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:00:20 2025 by rpki-client