Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/b4bbabdc-c45c-37f8-a60a-d220ebfebad3.roa
File:                     b4bbabdc-c45c-37f8-a60a-d220ebfebad3.roa (raw, json)
Hash identifier:          01DeMoks16zxgWFDQ4GKa5/QMueRAHYWQ/K/FdUWqeM=
Subject key identifier:   42:33:B3:EE:A2:CE:CA:2A:8A:DC:46:F1:F3:E2:DD:FC:F2:1B:BC:DB
Certificate issuer:       /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial:       010D0C9F4328584B9E07BBB3759F4067950B9980
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/b4bbabdc-c45c-37f8-a60a-d220ebfebad3.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     19257
IP address blocks:        107.150.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:bb:b3:75:9f:40:67:95:0b:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=63274bc0-0efa-4cc4-8715-5a65b07f80a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:30:7b:11:ef:20:a3:97:f4:76:ca:fe:3a:b1:
                    9d:18:03:c7:99:ec:6f:4a:57:f2:b3:86:9f:8f:c6:
                    1c:ff:e9:9d:97:51:3e:ce:8d:2c:19:fe:e1:13:11:
                    bc:bb:37:26:5b:0d:56:16:ac:02:83:b9:f1:0d:32:
                    59:37:7d:1c:72:64:d5:47:c7:7a:a1:50:e4:0c:3d:
                    7d:05:fe:fe:c1:2a:9e:2b:3f:a0:12:86:97:d9:99:
                    47:fb:6d:41:c3:de:a7:d8:a1:74:c8:cd:36:6f:85:
                    b4:52:1a:94:f8:cd:67:1e:9b:6b:b0:ae:52:8d:b0:
                    e1:11:64:10:aa:85:9e:d9:91:2d:92:3c:72:cd:02:
                    8e:39:f3:b6:8b:7a:99:3a:54:53:e5:18:4f:d7:ae:
                    df:d0:70:47:74:90:db:9e:34:0a:b7:4a:7b:88:2c:
                    94:79:83:15:d8:4d:14:ac:a0:44:73:84:2d:1f:5c:
                    d9:2d:27:55:50:b6:8e:06:b2:31:f3:bd:1e:3c:b4:
                    24:13:73:a1:9a:bd:56:67:90:85:68:70:5f:fd:95:
                    66:2f:c7:be:1e:57:fd:9a:41:e5:e6:42:31:e8:ec:
                    23:1b:92:dd:8b:74:a0:69:49:51:02:d4:4f:7f:f0:
                    bf:16:ae:72:23:70:21:48:b4:0e:43:ef:9a:24:c0:
                    be:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:33:B3:EE:A2:CE:CA:2A:8A:DC:46:F1:F3:E2:DD:FC:F2:1B:BC:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/b4bbabdc-c45c-37f8-a60a-d220ebfebad3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.150.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:b9:47:de:60:da:d2:fd:c8:01:94:9e:61:7e:8a:a1:26:b3:
         96:60:12:cf:7f:5a:8c:b3:d3:b7:c8:5c:a7:eb:ed:ec:7d:31:
         4c:bd:1a:2e:c3:b0:11:be:ba:42:c1:72:9c:81:b1:39:74:59:
         a4:34:f9:3b:f5:0d:ce:30:60:cb:ab:6a:a6:46:68:45:ba:52:
         ce:31:93:85:ad:77:36:a2:85:96:6d:35:ed:0b:7c:c7:cd:ea:
         8b:9c:d4:aa:f1:35:97:0b:41:9b:0c:e6:cb:6b:8b:e2:69:a7:
         fc:a3:dd:63:2f:c4:a9:31:94:87:54:65:52:28:22:07:fd:ff:
         cc:c4:54:bd:1a:35:51:e1:c0:20:5a:9f:0e:ac:01:28:4e:1c:
         af:25:02:af:fa:ee:7e:90:cc:8a:46:23:33:10:d9:8c:fc:fc:
         cc:6d:13:2a:f0:29:19:be:20:49:cb:54:56:91:93:1f:f8:48:
         f3:83:de:26:41:5b:36:d7:80:d1:d9:4f:41:10:17:b7:c1:67:
         99:b4:13:fe:5b:c3:31:1b:11:a1:04:29:6f:1b:32:9b:0b:bc:
         f1:40:3b:c5:92:ad:08:13:a1:19:97:67:b5:43:77:eb:f6:4a:
         b9:10:a4:da:8c:4b:e4:52:ee:85:31:5e:0a:ab:0b:e2:7f:0e:
         d0:d0:bd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 08:53:22 2025 by rpki-client