Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/57e59a80-25de-3a88-8329-a612aabbf07a.roa
File:                     57e59a80-25de-3a88-8329-a612aabbf07a.roa (raw, json)
Hash identifier:          A5hWoMherIIXT2F6GWaCuddvGqASK57BfWFDIKTEBXc=
Subject key identifier:   D3:88:1B:4D:06:22:40:B4:60:EC:07:AA:1E:C7:AC:20:58:00:5E:9A
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F43285848A29B549FB343302D2DB450A0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/57e59a80-25de-3a88-8329-a612aabbf07a.roa
Signing time:             Thu 23 Jan 2025 02:00:40 +0000
ROA not before:           Thu 23 Jan 2025 02:00:40 +0000
ROA not after:            Wed 23 Apr 2025 01:00:40 +0000
asID:                     398478
IP address blocks:        107.149.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a2:9b:54:9f:b3:43:30:2d:2d:b4:50:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Jan 23 02:00:40 2025 GMT
            Not After : Apr 23 01:00:40 2025 GMT
        Subject: CN=10547f10-d522-498c-9618-6803a17e1503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8c:fa:ab:f1:15:11:e8:97:8b:d4:1e:e8:6a:
                    e0:b3:cd:58:6f:93:c9:36:d3:fb:9a:5d:e5:97:2d:
                    23:7d:06:7f:6b:6c:c8:d0:fd:24:c8:f8:fc:66:9a:
                    d0:8c:eb:67:18:1f:ce:12:a3:b3:80:77:24:64:6f:
                    52:9e:65:66:f4:d0:68:23:15:d0:66:33:65:9b:6d:
                    df:e3:b9:1b:7f:7f:78:25:4f:b3:81:32:75:9c:30:
                    18:82:c9:7e:08:bf:68:6f:08:cb:1f:11:e6:f6:13:
                    43:ba:85:75:ea:8e:7d:27:42:09:07:6f:46:97:b3:
                    47:99:65:02:5f:3f:e6:ff:00:51:89:f5:ed:12:37:
                    a2:77:1b:a7:a3:76:64:ca:2b:bb:88:d4:b5:a2:b2:
                    0d:af:0f:cb:1c:c3:52:d6:aa:ba:bc:42:79:1a:c1:
                    1a:10:ff:22:cd:d9:cb:c4:50:c7:f1:82:66:b8:b1:
                    63:f4:f0:db:d7:02:ee:e1:28:7e:8b:b0:14:a0:54:
                    70:6e:9f:ce:8d:c9:3d:55:8d:ec:7a:ba:98:6b:9a:
                    8e:51:c1:55:96:9f:dd:ec:d9:6c:e0:70:86:b6:08:
                    ae:a0:6e:b2:ae:0b:e2:5d:7a:b1:12:a6:f8:b3:a0:
                    cb:9d:e4:fd:ff:81:1a:78:77:2a:cd:c1:21:bc:95:
                    6b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:88:1B:4D:06:22:40:B4:60:EC:07:AA:1E:C7:AC:20:58:00:5E:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/57e59a80-25de-3a88-8329-a612aabbf07a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:cc:02:9e:26:25:55:e3:b2:0e:6d:9a:54:ab:a1:68:f7:14:
         1a:35:6a:88:51:b6:9d:f4:69:2c:5f:63:7b:41:58:cb:07:ac:
         57:f0:96:61:ed:63:5b:04:7b:f3:d1:b3:fa:55:42:62:cd:a2:
         03:a9:01:48:90:ab:1f:a2:1f:5c:4b:37:b4:9b:91:d9:71:ff:
         b5:4e:bf:d9:ca:80:0f:d5:d3:f4:71:90:d2:0c:e3:4c:f3:7f:
         75:21:ec:18:cb:8f:f2:c0:0c:b5:35:dd:ed:5e:5f:ec:99:75:
         4a:54:5c:d7:68:fb:e1:c0:2d:29:cc:60:8f:07:98:0f:b8:83:
         66:5a:92:59:32:78:ee:79:e2:b7:b4:ac:bf:35:a8:a0:de:1e:
         d6:91:44:28:de:f7:87:c3:e3:45:5d:7e:9c:5f:53:24:40:30:
         f6:ac:32:18:7d:17:ef:4c:8b:4e:a3:40:95:5a:be:1b:a9:22:
         72:07:cc:2b:bd:99:88:d3:01:ff:ab:56:14:a8:23:b6:40:cf:
         9d:93:f2:5d:7f:04:3b:c9:43:d7:6d:ec:cd:5d:ee:72:d5:74:
         6f:2b:05:7d:14:2c:ae:f4:48:53:8f:f9:1a:8d:37:00:ca:83:
         be:57:d5:dd:0f:00:c6:84:57:1a:8c:98:04:e2:d7:0d:33:62:
         e3:d8:03:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim1Sfs0MwLS20UKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk
MTA1NDdmMTAtZDUyMi00OThjLTk2MTgtNjgwM2ExN2UxNTAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooz6q/EVEeiXi9Qe6Grgs81Yb5PJNtP7ml3l
ly0jfQZ/a2zI0P0kyPj8ZprQjOtnGB/OEqOzgHckZG9SnmVm9NBoIxXQZjNlm23f
47kbf394JU+zgTJ1nDAYgsl+CL9obwjLHxHm9hNDuoV16o59J0IJB29Gl7NHmWUC
Xz/m/wBRifXtEjeidxuno3Zkyiu7iNS1orINrw/LHMNS1qq6vEJ5GsEaEP8izdnL
xFDH8YJmuLFj9PDb1wLu4Sh+i7AUoFRwbp/Ojck9VY3serqYa5qOUcFVlp/d7Nls
4HCGtgiuoG6yrgviXXqxEqb4s6DLneT9/4EaeHcqzcEhvJVruQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNOIG00GIkC0YOwHqh7HrCBYAF6aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNTdlNTlhODAtMjVkZS0z
YTg4LTgzMjktYTYxMmFhYmJmMDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa5XYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD3MAp4mJVXjsg5tmlSroWj3FBo1aohRtp30aSxfY3tBWMsHrFfwlmHt
Y1sEe/PRs/pVQmLNogOpAUiQqx+iH1xLN7Sbkdlx/7VOv9nKgA/V0/RxkNIM40zz
f3Uh7BjLj/LADLU13e1eX+yZdUpUXNdo++HALSnMYI8HmA+4g2ZaklkyeO554re0
rL81qKDeHtaRRCje94fD40VdfpxfUyRAMPasMhh9F+9Mi06jQJVavhupInIHzCu9
mYjTAf+rVhSoI7ZAz52T8l1/BDvJQ9dt7M1d7nLVdG8rBX0ULK70SFOP+RqNNwDK
g75X1d0PAMaEVxqMmATi1w0zYuPYA8U=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:06 2025 by rpki-client