Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4e162d8c-3e2e-345d-a5bf-9cc3266003bb.roa
File:                     4e162d8c-3e2e-345d-a5bf-9cc3266003bb.roa (raw, json)
Hash identifier:          GSlD1MkPdSpFzaMRH+EP9Iu1wyU2HjzRD5XtvhRz/dU=
Subject key identifier:   E0:2E:95:6F:59:EC:55:3D:9A:CD:BC:B9:0F:A8:A8:08:4A:C8:F5:C8
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584B0D8781560611A192030F7300
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4e162d8c-3e2e-345d-a5bf-9cc3266003bb.roa
Signing time:             Mon 01 Sep 2025 18:46:14 +0000
ROA not before:           Mon 01 Sep 2025 18:46:14 +0000
ROA not after:            Sun 30 Nov 2025 19:46:14 +0000
asID:                     398478
IP address blocks:        107.149.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0d:87:81:56:06:11:a1:92:03:0f:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Sep  1 18:46:14 2025 GMT
            Not After : Nov 30 19:46:14 2025 GMT
        Subject: CN=89c35f49-bd29-4927-9494-f65fda7eeebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9e:63:ab:bf:ae:34:45:7d:04:55:02:34:10:
                    2a:38:43:14:c0:6a:f6:b2:e7:22:40:70:2f:98:19:
                    67:f8:22:f4:d8:e2:30:9b:a7:23:75:77:d3:59:65:
                    71:32:3d:3e:a7:aa:9c:1c:3d:85:0b:ab:94:8c:05:
                    25:d6:fd:82:8c:17:14:80:fb:9a:15:5f:9f:f1:7c:
                    f3:d6:67:ba:6b:7d:64:06:72:63:43:51:8c:ca:77:
                    5a:b0:01:d8:d4:90:57:da:a8:fd:d4:ff:9c:9a:8d:
                    aa:ee:b3:b7:bb:e9:44:05:22:f8:33:ad:d8:05:48:
                    20:40:08:a9:15:55:75:01:0a:8e:5b:c3:0a:51:06:
                    f9:c4:7f:db:7e:be:05:6f:ed:3a:8b:76:70:8c:d4:
                    67:48:cd:01:e4:e4:3b:af:fe:ff:c9:c7:19:57:50:
                    5d:b3:c6:f3:d9:f3:56:52:ac:92:36:52:d6:f4:39:
                    73:8e:19:6f:5d:e8:da:b6:5e:5e:32:da:5f:24:ef:
                    f8:ea:30:50:f7:f3:d7:77:fb:26:e3:4d:dc:dc:9b:
                    86:1f:aa:a8:ea:2b:3d:4e:6a:77:71:5a:76:ef:4b:
                    32:b8:4f:be:ab:52:18:9c:16:df:f7:d5:ff:12:64:
                    34:4c:0b:15:21:32:69:56:d6:04:e6:d0:ca:70:7d:
                    b1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2E:95:6F:59:EC:55:3D:9A:CD:BC:B9:0F:A8:A8:08:4A:C8:F5:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4e162d8c-3e2e-345d-a5bf-9cc3266003bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:1e:10:d3:fb:b8:72:2d:7f:96:37:e4:a2:a0:1c:c0:44:9b:
         80:28:9e:66:34:23:03:92:98:74:f7:e6:5f:29:31:85:c2:2a:
         ff:33:54:f6:dc:30:cb:a1:71:08:36:c6:fd:cd:44:38:6a:9b:
         80:a7:4d:21:65:aa:e7:c7:d3:6e:cc:e6:63:32:11:c5:d1:01:
         76:ef:78:b2:fa:92:6c:7e:43:15:29:06:76:69:10:54:8f:96:
         fa:27:ed:bc:2f:0a:10:67:21:1b:2d:16:3f:15:67:b6:cc:bf:
         b4:13:a0:c2:3b:5d:80:aa:16:92:57:90:80:57:a2:b4:ca:d1:
         2a:35:44:98:6b:47:89:a7:cc:b1:fa:00:25:fd:99:c9:c1:6b:
         cd:7f:b9:75:29:fd:68:96:84:e0:5e:0b:e8:96:31:d4:e9:b0:
         7e:db:25:1e:6d:26:5d:f5:e4:47:92:4c:d1:42:c1:04:6e:0a:
         dc:cd:d8:ac:3c:bf:a4:cc:4d:3a:fd:6e:bc:eb:50:ef:ce:e9:
         8c:4f:f4:2f:93:93:82:dd:b5:6a:ab:c3:51:e2:6f:2d:dd:b7:
         fd:95:85:a6:aa:81:b4:1e:37:85:04:8e:d6:1e:14:65:0c:f9:
         6c:94:fa:71:f3:78:e2:e6:55:58:c4:a1:10:ff:86:54:80:0e:
         5a:d8:e0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:56 2025 by rpki-client