Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/2dda1db5-6491-3ca9-a837-a07fd3fdb3d9.roa
File:                     2dda1db5-6491-3ca9-a837-a07fd3fdb3d9.roa (raw, json)
Hash identifier:          5P0cXkeI+k5v2Zz9aMoKeUyhPKbt3iAHbfK4BuhHRf0=
Subject key identifier:   38:0E:1A:60:D6:F3:6F:F4:D6:AB:66:7E:A7:48:EB:77:9D:F1:AC:C5
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584A612B19712CFD9E89A1E9B700
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/2dda1db5-6491-3ca9-a837-a07fd3fdb3d9.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     36137
IP address blocks:        107.148.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:19:71:2c:fd:9e:89:a1:e9:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=b4f8a485-e53a-4893-b9a5-263e75e9e0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2c:5b:ac:c7:2a:c8:08:92:fa:80:ae:79:98:
                    f5:b7:8b:23:20:4e:c8:26:13:4d:32:07:51:4b:71:
                    7b:97:c1:a7:33:f6:42:1b:ee:aa:30:42:b3:ef:fe:
                    77:19:98:f5:49:42:fc:b4:57:99:e4:8a:cb:97:9d:
                    34:56:ea:fb:c5:c1:ae:84:97:89:e7:cd:c0:58:c4:
                    66:bb:25:e6:df:09:a1:48:86:06:64:f8:00:7e:17:
                    1e:da:11:bb:de:54:de:72:b9:93:61:8c:fc:28:d9:
                    59:a0:14:ef:8e:0f:0f:33:03:3b:1a:05:b8:b9:f2:
                    9d:57:59:51:01:c3:18:a8:97:5b:d7:16:7c:9b:fa:
                    76:a3:19:d0:e2:49:85:9d:78:e2:c5:0e:c8:8d:69:
                    77:3c:3e:5d:94:31:b4:82:f4:a0:34:c7:6c:30:82:
                    ae:93:17:92:c9:51:d7:1c:86:ee:77:c8:ad:80:18:
                    5c:b7:e9:73:03:f0:49:67:41:03:20:22:12:84:90:
                    ce:8e:c8:df:0b:38:3a:e7:76:ce:a2:24:db:f8:f2:
                    0d:fb:52:08:d1:36:d1:9c:8e:5c:25:70:39:cd:ed:
                    6d:cd:28:b1:f8:a1:4e:98:bc:bb:02:d7:c9:ac:aa:
                    a9:0b:85:8c:88:6c:40:79:ff:b6:06:64:03:14:48:
                    19:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0E:1A:60:D6:F3:6F:F4:D6:AB:66:7E:A7:48:EB:77:9D:F1:AC:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/2dda1db5-6491-3ca9-a837-a07fd3fdb3d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:b9:a0:8e:9e:df:88:d4:ee:14:f4:93:29:8a:6f:ca:59:ae:
         41:69:2a:d5:3a:07:fd:65:73:f4:b2:33:94:ed:12:0a:f5:49:
         3f:ba:08:38:87:f9:75:5d:ed:a6:34:af:70:c7:a6:fc:0f:82:
         a5:cc:c2:67:e5:c1:04:12:1b:3b:56:0d:2c:06:b2:20:de:b4:
         82:d4:54:6b:ab:da:78:55:71:9d:c9:e7:78:df:f6:7b:9b:df:
         61:b4:c3:d3:88:bc:90:1b:a0:9a:b5:b1:57:32:c2:8d:d3:05:
         41:56:8c:88:6d:4e:58:d6:28:f8:d8:5b:30:3b:5d:60:81:6a:
         0c:b9:29:eb:90:2e:e7:43:7e:55:54:2f:43:9f:d6:95:86:9f:
         ee:56:d7:18:80:be:54:14:14:66:76:5e:60:f3:85:ba:11:60:
         dd:44:63:c8:24:c4:a5:0b:1f:a0:b1:14:48:04:47:bc:71:67:
         b6:24:1f:81:5d:64:6e:2c:b2:c2:2e:61:86:a8:4c:cb:2e:72:
         2b:9e:41:88:83:df:25:03:e5:40:2e:56:36:2b:8f:55:6f:20:
         f2:06:03:4b:26:bd:4a:4b:ce:d3:0a:0b:cb:b7:e7:4b:54:40:
         72:16:01:08:97:83:16:60:61:54:a1:dd:be:4e:ea:40:02:99:
         54:92:63:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:07:53 2025 by rpki-client