Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7773995c-988e-3194-a8aa-012d94fbff59.roa
File:                     7773995c-988e-3194-a8aa-012d94fbff59.roa (raw, json)
Hash identifier:          ZC3psLpbaAgU4mrIf7aOosdD/2hO52AqaiXptWLyfzM=
Subject key identifier:   96:AF:56:B8:3F:D2:07:BB:BD:A5:DD:57:CF:0D:94:E1:08:78:4C:56
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584A612B19628150FAB020ED4230
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7773995c-988e-3194-a8aa-012d94fbff59.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     398478
IP address blocks:        107.148.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:19:62:81:50:fa:b0:20:ed:42:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=08ffe4c7-95f9-4cc0-9022-673e7ba383d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4a:af:07:40:a4:d1:04:4e:9f:e0:a6:f7:11:
                    ae:3a:0d:37:a7:2c:e3:97:c3:29:17:93:6b:0b:33:
                    69:2d:54:d8:66:70:96:34:59:95:f4:7d:f6:46:83:
                    84:0e:84:d0:ea:e6:8d:f2:9d:2a:bd:c0:1a:8b:05:
                    be:63:f7:de:40:28:af:ec:76:1c:10:42:a8:a4:96:
                    05:89:2d:81:9b:21:55:c1:95:20:04:ae:a8:8f:40:
                    66:1f:82:92:34:ae:c0:57:4f:3b:86:8d:22:f6:cb:
                    e8:0a:43:e2:cc:c5:07:df:5c:cc:46:39:7a:b0:7c:
                    ea:6b:48:48:8f:97:24:4c:38:70:e0:13:25:a9:b1:
                    d1:00:d3:2d:c5:89:e1:37:67:cd:6e:34:f4:c6:e6:
                    ed:89:70:d7:28:ea:e1:cc:47:b0:8f:08:b1:43:e2:
                    9e:cc:69:48:f4:6a:30:71:fd:52:c0:d7:c5:38:d1:
                    cd:d2:7c:9f:12:28:22:80:84:5f:5e:38:c4:64:ef:
                    99:d6:61:1c:82:5c:0f:77:c4:e4:61:93:9d:ce:b5:
                    f6:4d:60:fb:91:b6:c2:83:4e:dc:09:85:41:1f:47:
                    76:89:5a:7a:99:8b:20:6c:11:18:ca:da:4c:78:3c:
                    95:73:2e:24:27:6a:dc:06:31:8f:78:12:bf:ee:97:
                    a0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AF:56:B8:3F:D2:07:BB:BD:A5:DD:57:CF:0D:94:E1:08:78:4C:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7773995c-988e-3194-a8aa-012d94fbff59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:c1:d9:1d:d3:68:ef:34:e7:1e:18:fc:9e:1e:2c:02:0e:40:
         a1:42:9d:c8:4e:a1:af:9a:fd:ad:42:26:47:59:8d:ea:ac:8d:
         07:2f:9f:ae:39:62:7a:79:f1:b0:0b:2f:5b:55:cc:d8:d6:34:
         7e:08:e0:64:75:2d:5f:d3:87:0a:75:bc:1a:b2:97:6b:d7:d8:
         b9:cf:52:b1:5c:a2:be:f8:8c:14:9d:0c:5e:14:34:83:7c:62:
         de:e5:94:21:b9:6b:ee:18:20:12:af:be:3b:77:43:1a:de:2d:
         6b:bb:a1:43:c3:5c:a8:da:09:f9:9b:3a:75:fd:9d:96:17:58:
         2e:0e:0f:ad:c4:65:58:77:5e:bd:94:8b:24:79:62:5a:16:d2:
         57:09:49:5b:6a:c6:b7:9f:04:9b:7c:05:3b:9a:d4:96:52:e8:
         f0:8a:50:5a:63:46:c9:fe:53:69:2a:2d:ed:14:e6:3b:be:41:
         50:c1:e8:d3:98:fc:a2:a2:1d:36:09:7a:80:b3:51:79:3c:9c:
         0f:44:98:1d:3e:dd:82:a1:fd:81:d6:f8:42:aa:c2:cd:f1:03:
         fc:2d:55:a4:69:3a:70:a7:77:a9:69:1d:ff:93:11:5e:ea:f1:
         6d:8a:c9:c8:eb:2d:11:68:d9:0c:e8:45:c1:86:74:32:6e:be:
         b9:0e:92:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKxligVD6sCDtQjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk
MDhmZmU0YzctOTVmOS00Y2MwLTkwMjItNjczZTdiYTM4M2Q4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EqvB0Ck0QROn+Cm9xGuOg03pyzjl8MpF5Nr
CzNpLVTYZnCWNFmV9H32RoOEDoTQ6uaN8p0qvcAaiwW+Y/feQCiv7HYcEEKopJYF
iS2BmyFVwZUgBK6oj0BmH4KSNK7AV087ho0i9svoCkPizMUH31zMRjl6sHzqa0hI
j5ckTDhw4BMlqbHRANMtxYnhN2fNbjT0xubtiXDXKOrhzEewjwixQ+KezGlI9Gow
cf1SwNfFONHN0nyfEigigIRfXjjEZO+Z1mEcglwPd8TkYZOdzrX2TWD7kbbCg07c
CYVBH0d2iVp6mYsgbBEYytpMeDyVcy4kJ2rcBjGPeBK/7pegRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJavVrg/0ge7vaXdV88NlOEIeExWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNzc3Mzk5NWMtOTg4ZS0z
MTk0LWE4YWEtMDEyZDk0ZmJmZjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa5Q8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFrB2R3TaO805x4Y/J4eLAIOQKFCnchOoa+a/a1CJkdZjeqsjQcvn645
Ynp58bALL1tVzNjWNH4I4GR1LV/Thwp1vBqyl2vX2LnPUrFcor74jBSdDF4UNIN8
Yt7llCG5a+4YIBKvvjt3QxreLWu7oUPDXKjaCfmbOnX9nZYXWC4OD63EZVh3Xr2U
iyR5YloW0lcJSVtqxrefBJt8BTua1JZS6PCKUFpjRsn+U2kqLe0U5ju+QVDB6NOY
/KKiHTYJeoCzUXk8nA9EmB0+3YKh/YHW+EKqws3xA/wtVaRpOnCnd6lpHf+TEV7q
8W2KycjrLRFo2QzoRcGGdDJuvrkOkpU=
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:37:36 2025 by rpki-client