Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/02ff536a-435d-3dda-9965-68545f8ce02a.roa
File:                     02ff536a-435d-3dda-9965-68545f8ce02a.roa (raw, json)
Hash identifier:          EqwTq/xfkd1svDkuX2pxQhcBIWUhTp1irOqTe7JrQSA=
Subject key identifier:   F4:A6:E2:F0:50:37:BF:25:91:EC:AF:AF:51:63:E2:F5:E3:42:FC:8F
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584AFC6A6CAFC31CB76D7C917E00
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/02ff536a-435d-3dda-9965-68545f8ce02a.roa
Signing time:             Tue 26 Aug 2025 15:38:54 +0000
ROA not before:           Tue 26 Aug 2025 15:38:54 +0000
ROA not after:            Mon 24 Nov 2025 16:38:54 +0000
asID:                     398478
IP address blocks:        107.149.186.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:6a:6c:af:c3:1c:b7:6d:7c:91:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Aug 26 15:38:54 2025 GMT
            Not After : Nov 24 16:38:54 2025 GMT
        Subject: CN=5c81bef4-6fda-415f-b123-268ed45e4354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:1a:67:ca:e3:6a:75:e9:9d:74:66:95:aa:d4:
                    36:f3:23:ef:c4:41:c2:6f:8e:92:26:1d:c3:df:ac:
                    c9:49:6a:14:83:c6:3b:d5:6f:7c:88:13:2c:f1:fd:
                    96:88:8f:d0:49:3d:d5:e9:61:50:64:e0:7f:d0:4f:
                    42:3c:20:17:2d:a5:96:3b:7f:18:8a:97:fb:f7:c7:
                    de:a3:02:37:f6:c7:56:50:de:01:7c:bb:03:47:8d:
                    5a:9e:78:52:aa:6d:52:16:09:36:f3:ef:9d:9f:4b:
                    cf:e6:3a:f9:5f:10:74:0c:95:65:af:87:f9:a9:a6:
                    60:ca:ef:f0:b2:1c:cd:67:01:ec:c6:9d:d3:5e:37:
                    6e:ee:e0:33:b9:cc:d4:2e:f4:a0:7d:df:ae:a9:37:
                    8e:85:33:79:c4:f1:4e:76:f2:f6:fc:78:44:72:3f:
                    bd:af:0a:cd:6d:d1:26:4a:ee:d0:e2:6c:76:a9:e8:
                    a2:43:81:c4:53:85:96:bd:73:76:d8:1d:3c:81:62:
                    d2:f5:b6:73:74:0b:6a:e0:fc:ae:55:44:1c:cf:a7:
                    30:d6:b9:4e:3b:31:27:73:70:fa:84:2b:6c:98:27:
                    c1:a3:24:47:0d:d0:9a:86:83:89:6a:fa:f1:59:1e:
                    a4:f2:58:6f:cf:9f:e6:2e:0f:52:68:65:3e:e1:5c:
                    96:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A6:E2:F0:50:37:BF:25:91:EC:AF:AF:51:63:E2:F5:E3:42:FC:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/02ff536a-435d-3dda-9965-68545f8ce02a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:03:00:ce:b2:bc:bd:f5:08:0c:dd:03:47:71:2f:39:55:d3:
         bc:eb:1a:9e:aa:f3:0a:d7:61:76:ed:46:1b:9f:81:6f:81:78:
         f9:9f:fa:0f:ba:fd:8b:31:34:e3:c1:17:a1:52:ce:a9:ce:c5:
         0a:3e:16:4d:4c:fd:8c:a6:45:be:15:c3:9b:63:56:93:cd:c5:
         29:c1:c3:a7:59:47:f7:98:69:9f:17:43:9d:aa:e8:da:0f:90:
         fd:b5:ac:60:f8:7e:f1:75:e4:1d:ed:96:e3:96:e6:b5:ad:8f:
         3e:8a:dc:1e:b1:ce:ba:be:00:60:3b:b5:93:a1:eb:a7:bf:8a:
         83:e6:31:c2:82:15:94:8f:7d:d6:5a:af:89:bd:e7:ec:a3:c1:
         48:d2:90:91:ba:27:92:e3:d3:eb:ed:35:f4:66:2d:1e:f5:79:
         b3:23:3a:55:ca:53:4a:e7:14:2a:6e:0d:7c:88:ab:e5:64:00:
         dd:34:05:b8:77:ac:4e:b8:7e:37:32:da:51:dc:74:c0:20:2d:
         f2:94:34:3c:14:01:85:d0:4f:73:2c:aa:03:c5:59:16:b3:4b:
         4c:71:65:1b:20:a7:ed:b2:fc:e4:03:75:84:3d:81:ef:10:c6:
         a8:de:08:9f:f8:31:48:72:84:22:82:82:f2:98:fb:5e:35:78:
         c8:a0:ff:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:14 2025 by rpki-client