Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a9136630-289d-3508-93cb-de139f2f1182.roa
File:                     a9136630-289d-3508-93cb-de139f2f1182.roa (raw, json)
Hash identifier:          ZOSXc/kl8efBPrqfYJ66b6uPOGvrpiF8m7xV2TXfCyk=
Subject key identifier:   32:5A:06:2D:24:80:19:E9:7F:25:DB:4E:61:83:A6:3B:9F:58:E0:E3
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584A612B18FE3E07ABC2F660C100
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a9136630-289d-3508-93cb-de139f2f1182.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     394432
IP address blocks:        107.148.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:18:fe:3e:07:ab:c2:f6:60:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=9ae10d4e-67e7-4b14-b7d2-488b3244d4c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ce:12:da:cf:d3:22:84:98:7f:46:3d:32:f5:
                    be:fb:4a:b5:86:71:f3:79:8c:0b:84:83:d2:72:e8:
                    8a:90:37:56:ad:b7:86:2b:1d:78:76:dc:1c:1b:fc:
                    2d:40:57:cf:2b:a4:05:cf:2d:16:24:eb:3f:ba:b0:
                    3f:b9:e1:d7:2e:88:5a:61:79:8d:e4:f6:a5:31:cf:
                    2e:c5:50:b7:f6:ff:73:58:1e:78:74:ae:e5:23:55:
                    81:c1:c9:15:a2:c8:6a:e2:63:4c:a5:76:ba:17:4b:
                    2f:5c:c1:db:8b:5e:43:44:e8:f5:66:db:24:6f:fd:
                    83:64:8b:f0:55:f3:a6:57:2d:b9:65:1d:8f:29:ac:
                    82:75:bf:22:0d:97:07:5a:32:28:7f:50:43:f7:11:
                    9d:ae:ad:e5:5c:69:5b:bd:9c:47:8a:23:92:83:5e:
                    1e:bb:01:4a:2d:a0:df:fa:4a:f8:60:4f:4f:28:fe:
                    02:a2:7d:43:94:20:e1:15:76:87:33:60:f3:61:53:
                    56:6b:7b:d0:6d:49:cd:dd:b1:51:41:db:90:7a:c4:
                    1c:d2:d4:83:c1:dd:e1:2b:9a:de:83:10:17:93:95:
                    5e:b6:af:59:4a:05:9c:e8:40:99:7d:b2:58:90:f7:
                    8d:a8:82:f3:9e:7b:aa:c7:6d:8f:03:ab:d1:89:b3:
                    e0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5A:06:2D:24:80:19:E9:7F:25:DB:4E:61:83:A6:3B:9F:58:E0:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a9136630-289d-3508-93cb-de139f2f1182.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:bc:be:d4:45:ad:34:07:06:d8:6f:4d:4b:f7:f1:29:da:59:
         7c:37:8d:8e:81:52:db:ab:4f:f8:ac:f1:5b:e8:4d:42:0a:19:
         b5:14:bb:41:83:c5:4b:0e:30:50:4a:8b:51:d1:97:cf:60:6c:
         bc:74:bc:50:b6:3f:3f:ae:01:9b:57:b9:86:d0:72:9f:ab:f3:
         45:db:8d:cc:1f:f9:ce:4b:01:44:5b:de:79:c5:18:12:c9:bd:
         c1:23:c0:7c:7f:f4:a4:c0:e5:5a:92:33:50:e7:48:a7:3f:15:
         f7:8f:a2:aa:89:79:76:49:f7:29:10:c0:35:fa:39:1f:e8:82:
         21:4e:c1:19:80:34:d1:72:59:1f:f0:fe:7e:2d:45:90:c1:62:
         27:77:4f:9f:a5:8b:c3:3c:94:0b:23:34:1c:5e:87:1b:fe:70:
         28:07:64:01:f5:cf:83:40:1a:bd:88:8f:6d:dd:28:80:f5:63:
         86:fa:46:32:5f:24:eb:95:30:3a:d6:88:f7:c3:2b:6d:91:ae:
         2a:41:28:85:2d:f5:ad:61:23:4a:59:17:bb:c0:f3:17:41:71:
         dc:8b:c3:17:5d:11:6f:f3:ae:21:a4:72:48:9d:11:53:2d:c5:
         88:f9:75:a8:3b:55:65:2f:4a:d7:fd:3f:fc:c6:99:83:94:8b:
         eb:7b:95:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKxj+PgerwvZgwQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk
OWFlMTBkNGUtNjdlNy00YjE0LWI3ZDItNDg4YjMyNDRkNGM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic4S2s/TIoSYf0Y9MvW++0q1hnHzeYwLhIPS
cuiKkDdWrbeGKx14dtwcG/wtQFfPK6QFzy0WJOs/urA/ueHXLohaYXmN5PalMc8u
xVC39v9zWB54dK7lI1WBwckVoshq4mNMpXa6F0svXMHbi15DROj1Ztskb/2DZIvw
VfOmVy25ZR2PKayCdb8iDZcHWjIof1BD9xGdrq3lXGlbvZxHiiOSg14euwFKLaDf
+kr4YE9PKP4Con1DlCDhFXaHM2DzYVNWa3vQbUnN3bFRQduQesQc0tSDwd3hK5re
gxAXk5Vetq9ZSgWc6ECZfbJYkPeNqILznnuqx22PA6vRibPgtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDJaBi0kgBnpfyXbTmGDpjufWODjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvYTkxMzY2MzAtMjg5ZC0z
NTA4LTkzY2ItZGUxMzlmMmYxMTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5QgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC+8vtRFrTQHBthvTUv38SnaWXw3jY6BUturT/is8VvoTUIKGbUUu0GD
xUsOMFBKi1HRl89gbLx0vFC2Pz+uAZtXuYbQcp+r80Xbjcwf+c5LAURb3nnFGBLJ
vcEjwHx/9KTA5VqSM1DnSKc/FfePoqqJeXZJ9ykQwDX6OR/ogiFOwRmANNFyWR/w
/n4tRZDBYid3T5+li8M8lAsjNBxehxv+cCgHZAH1z4NAGr2Ij23dKID1Y4b6RjJf
JOuVMDrWiPfDK22RripBKIUt9a1hI0pZF7vA8xdBcdyLwxddEW/zriGkckidEVMt
xYj5dag7VWUvStf9P/zGmYOUi+t7lUI=
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:14:06 2025 by rpki-client