Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/2ce96f68-8a9c-3713-b2ba-529c3fdcb5e5.roa
File:                     2ce96f68-8a9c-3713-b2ba-529c3fdcb5e5.roa (raw, json)
Hash identifier:          jVdaL+Kj6DCWMzeU0CoS5QBOsL/KIZoIM3m3+kJqbBU=
Subject key identifier:   B8:E8:54:F9:16:98:0C:5F:CD:B7:A2:FB:83:A0:C0:22:E5:06:BE:56
Certificate issuer:       /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial:       010D0C9F43285849DC8FC7A4D27401CA8715DE00
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/2ce96f68-8a9c-3713-b2ba-529c3fdcb5e5.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     19257
IP address blocks:        107.150.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:c7:a4:d2:74:01:ca:87:15:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=89129b71-9154-4598-8560-251de751ff53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:eb:81:96:d6:ec:17:f8:f4:44:ec:8b:d0:09:
                    78:4a:d9:46:bc:c0:40:85:0f:2c:41:dd:f4:7a:e9:
                    00:5f:aa:49:07:99:83:fb:97:db:83:e3:46:94:12:
                    0c:67:68:36:77:40:a5:07:be:f4:8d:94:14:ee:c4:
                    81:79:1a:2a:d0:d9:e4:60:10:0f:70:6f:fa:73:78:
                    71:50:65:2a:25:8a:45:8d:70:3d:90:43:9a:f9:e5:
                    5c:1c:ba:0f:7a:d9:1c:18:df:ce:83:ef:01:96:2d:
                    5c:69:18:a4:9c:c0:fb:ca:9c:19:eb:e9:29:72:f1:
                    6d:09:8d:c9:c0:7c:40:6d:a8:e5:2b:4a:25:b9:05:
                    b0:39:f0:7d:4e:fa:09:b5:3f:2e:1d:be:9a:0f:50:
                    f8:21:35:22:44:36:5a:ca:ef:96:c5:39:c7:b4:56:
                    f1:e2:ce:c7:13:dc:fd:7b:a7:b5:41:8c:b6:16:b5:
                    13:83:c5:e4:09:83:95:a6:bf:95:33:25:ec:9f:78:
                    c3:17:45:d2:fd:50:b0:5a:09:a1:03:65:03:2c:0e:
                    61:7c:06:7a:36:ea:0d:c2:9b:75:6e:61:a9:92:1b:
                    78:53:40:e0:a4:c5:f3:16:dc:1d:f1:28:18:15:6b:
                    3b:1d:88:d3:ac:0e:5d:28:03:d9:35:b7:6f:2f:9c:
                    3e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E8:54:F9:16:98:0C:5F:CD:B7:A2:FB:83:A0:C0:22:E5:06:BE:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/2ce96f68-8a9c-3713-b2ba-529c3fdcb5e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.150.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:2d:18:2f:eb:1b:c4:8e:14:ba:02:45:57:8a:b1:b4:88:0b:
         f1:27:b9:5a:06:3a:f7:eb:a2:b9:cc:a8:69:1e:06:32:57:38:
         bf:c9:b0:18:6a:2c:c7:69:0c:81:98:66:bd:1a:36:3b:2e:7b:
         42:ac:8a:0f:fb:0d:8b:e0:62:b6:5e:c8:1e:34:81:43:37:3b:
         aa:37:2b:9a:2b:be:ba:d4:07:3d:c0:b0:1d:0a:3d:99:b6:b0:
         e7:dc:be:17:16:ba:55:a5:34:ec:2b:0c:60:e9:b7:b4:01:e3:
         3e:c8:c8:cc:77:97:b6:73:ef:43:2a:1d:4a:4d:c2:d0:02:d5:
         34:f6:4b:22:36:fc:50:91:9f:9e:dd:16:8c:19:dd:3e:51:b4:
         e5:03:4b:02:91:1f:8f:9c:b0:f4:f2:09:94:7b:92:35:ed:2b:
         26:70:24:bb:14:11:74:5e:6e:ba:e5:4e:68:ed:49:12:15:8f:
         90:e1:97:ea:5c:64:02:32:b4:76:6d:fc:02:1d:32:97:8a:e7:
         0a:1c:6a:9a:2c:72:cc:3e:00:f8:a8:37:0f:63:00:3c:6b:0a:
         40:f8:f0:61:38:2f:7e:38:05:60:fd:d0:00:be:fa:18:b6:db:
         a0:91:6e:eb:a1:99:bb:01:e6:84:90:85:b1:1b:91:b7:ba:de:
         be:b6:1d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:22:32 2025 by rpki-client