Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/164131bd-7b45-3ec2-b716-5511a8ab5e65.roa
File:                     164131bd-7b45-3ec2-b716-5511a8ab5e65.roa (raw, json)
Hash identifier:          HK1+GLEkijrwi637MCqQWRLrPhRYbhyWxwZhXnzMLGA=
Subject key identifier:   26:FF:5D:59:03:E2:5D:AD:D9:ED:81:03:BA:C5:C8:1F:4F:0B:F3:AC
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584A612B19816B9CEF7424374B00
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/164131bd-7b45-3ec2-b716-5511a8ab5e65.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     36137
IP address blocks:        107.148.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:19:81:6b:9c:ef:74:24:37:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=c2768271-aaca-4c34-a0c6-84ca18ce9b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:24:ba:2b:a6:83:3c:86:1b:3d:94:17:7e:9f:
                    e6:42:63:97:2d:46:84:bb:e1:d6:76:8c:11:21:95:
                    b7:38:50:22:90:ce:21:95:87:e3:93:27:c8:81:43:
                    ab:82:e3:ab:00:45:bb:13:3d:0e:5c:de:96:3b:ae:
                    0c:5f:16:f5:b7:83:3b:80:68:d6:fe:75:29:84:2b:
                    03:db:29:9e:fc:6f:7f:89:19:44:cb:40:7b:52:68:
                    c4:84:e1:87:98:50:ba:ff:95:c0:c7:80:14:b2:e9:
                    89:91:9e:f6:69:12:8c:40:5a:80:4a:fe:c3:9e:5d:
                    f1:a9:66:b3:32:a1:21:03:fc:cd:ac:00:1d:b5:38:
                    08:48:95:eb:c4:0d:04:44:48:93:27:47:96:06:da:
                    f3:47:d6:4a:bd:a5:4d:c9:38:9b:25:d1:87:85:a9:
                    de:e9:43:1e:c4:63:cc:69:4c:c8:67:98:64:f2:f7:
                    84:7c:40:b1:29:6f:d8:29:6d:fa:3d:bf:18:61:00:
                    3a:a6:a1:0c:68:85:78:06:94:bb:5d:a0:a1:9c:f3:
                    eb:9e:22:8f:fb:5f:fc:58:bd:fc:f9:b9:ba:91:bd:
                    a6:0f:07:ec:c6:47:c8:a1:69:e7:f1:16:cc:48:29:
                    00:1b:ae:60:ef:74:be:81:7b:c7:77:85:3b:ca:a8:
                    c2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FF:5D:59:03:E2:5D:AD:D9:ED:81:03:BA:C5:C8:1F:4F:0B:F3:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/164131bd-7b45-3ec2-b716-5511a8ab5e65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:a5:0f:77:62:4c:2f:1d:9a:17:41:17:c8:3a:18:7d:67:64:
         5f:4e:6b:7e:68:3e:aa:fe:39:7d:29:70:14:31:81:82:ed:c0:
         8a:9b:6c:d7:93:61:f1:e2:9e:15:28:e5:46:99:1a:7f:5e:02:
         31:ee:d6:55:6c:53:7f:e4:3b:fa:3d:05:aa:e1:ff:81:c2:09:
         d4:7f:e0:d6:86:cd:4a:65:85:b2:dd:46:da:c3:7a:d1:f1:74:
         50:8c:7d:b1:c7:f4:a8:61:13:4a:46:6f:4c:df:c2:c3:58:5c:
         e0:77:62:df:b6:c8:63:61:b3:c6:82:04:74:77:21:34:e5:c8:
         89:ad:f8:2c:29:49:50:6c:bc:6e:5c:f9:d7:6c:26:b5:15:b4:
         36:63:de:20:6a:83:29:16:c0:78:a3:6e:cd:c0:ee:9d:38:50:
         4c:a1:dc:cc:0e:31:96:8c:a6:08:3c:88:c5:42:5b:9b:de:88:
         c2:d3:bc:2f:5c:7e:fa:d0:87:34:48:26:65:5e:40:dd:58:33:
         c5:b3:6f:29:5e:30:ad:64:03:05:3d:5b:94:b1:8a:db:dd:a6:
         df:36:fb:d4:f2:8b:8c:15:30:36:87:5a:87:c0:b2:57:ff:77:
         45:16:2c:26:1c:f2:dd:dc:d0:02:57:d8:59:03:ea:eb:3a:7e:
         fe:72:ff:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:08:34 2025 by rpki-client