Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/b4bbabdc-c45c-37f8-a60a-d220ebfebad3.roa
File:                     b4bbabdc-c45c-37f8-a60a-d220ebfebad3.roa (raw, json)
Hash identifier:          sI3kOSE8710ohkmlXyB1SsLq06/qoS2AEFg56kBts0c=
Subject key identifier:   C4:BD:CD:2E:9B:06:41:34:29:9C:9F:9D:86:F0:34:75:7D:BD:32:85
Certificate issuer:       /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial:       010D0C9F43285849DC8FC7B2E6D87C1410370680
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/b4bbabdc-c45c-37f8-a60a-d220ebfebad3.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     19257
IP address blocks:        107.150.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:c7:b2:e6:d8:7c:14:10:37:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=5b08bbc2-b716-4655-9526-219dcd898d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c5:fd:ec:e4:d8:69:36:cc:ca:8b:8e:5b:f0:
                    1c:7b:f9:8c:97:0a:92:0e:a1:d7:c9:ef:e8:4f:aa:
                    fc:92:03:8e:e8:4b:45:c3:3a:05:53:61:ca:08:59:
                    73:cf:1d:26:d8:e3:01:e3:71:ab:bb:16:63:49:93:
                    46:d0:38:cd:99:b0:5a:6f:17:6e:71:9e:6b:74:51:
                    43:45:9a:10:ec:01:38:e2:dc:43:f0:27:08:a2:54:
                    c3:58:c3:32:81:0b:56:8c:4b:c3:a4:23:ae:0e:31:
                    6a:9d:75:27:58:fc:ac:dc:59:02:f0:c1:eb:b6:40:
                    07:bb:f8:4b:da:fd:8c:3f:a8:59:ee:34:26:40:7a:
                    e8:4a:70:79:3d:82:50:fe:2c:9b:f2:d0:51:08:be:
                    00:c4:c5:f9:29:24:4d:02:9e:79:69:b9:df:bb:d8:
                    e5:b3:b4:06:dc:7d:4f:c4:45:b6:b6:64:b2:5f:f5:
                    cc:e1:c8:08:40:ab:8e:2e:6a:ed:01:95:19:f3:db:
                    78:43:72:66:4e:90:31:8d:7a:65:ae:20:5f:4d:06:
                    93:3b:cd:94:70:be:b2:83:58:0c:51:4b:7b:51:60:
                    3e:0d:b8:35:63:54:ae:79:f5:5f:99:b5:6d:46:4a:
                    ca:ce:c0:6c:da:36:12:9c:84:ba:ae:7b:cb:70:8b:
                    06:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BD:CD:2E:9B:06:41:34:29:9C:9F:9D:86:F0:34:75:7D:BD:32:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/b4bbabdc-c45c-37f8-a60a-d220ebfebad3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.150.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:c3:a2:63:d5:61:00:7d:ab:43:d0:93:43:1f:38:75:5a:25:
         6b:2c:74:0f:b0:9b:40:6c:76:4d:dc:0c:91:29:c0:58:33:86:
         6f:6f:90:94:ff:19:b1:fb:bd:82:3d:01:f2:67:a8:a8:b3:64:
         13:07:8a:f1:be:e4:72:d3:2e:4c:43:f9:e3:e7:e0:33:c5:2d:
         bf:99:e6:aa:c5:9f:01:b6:ac:ca:75:f5:cf:f3:7b:27:57:d4:
         f4:38:b9:18:1a:5b:f6:b7:0e:99:44:16:bc:1c:27:b7:73:a2:
         1f:40:9a:6d:5b:ab:34:f5:c6:93:a5:bd:d4:da:88:1a:e6:9a:
         73:ea:06:e8:d3:4e:4e:44:8c:d4:f7:c9:45:a7:12:d0:a2:07:
         5b:56:ee:0e:24:ae:d3:59:e3:f1:c4:4e:f5:78:7f:d4:39:76:
         67:5a:c4:9d:1f:b3:f1:3f:ff:de:bc:86:5b:39:e5:a0:91:4d:
         53:86:f3:e6:4b:c9:51:d0:6d:09:3a:d1:91:64:e9:94:8c:ee:
         14:97:92:12:df:e3:df:06:2b:92:05:7b:74:94:d8:e3:65:2f:
         82:9c:5e:eb:c8:38:d5:a1:e9:fe:39:b7:fc:e8:79:4d:57:24:
         de:46:04:df:0d:ca:2e:09:74:2c:5b:51:7c:c9:97:78:83:a8:
         31:bf:40:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:50:52 2025 by rpki-client