Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/66c3ccdc-8e6c-32e6-9299-14efbc883724.roa
File:                     66c3ccdc-8e6c-32e6-9299-14efbc883724.roa (raw, json)
Hash identifier:          jV0c3/ubYBkVffDcrvizKBCrVkCETNUWGov5dHpMj2U=
Subject key identifier:   D4:00:B8:A5:28:BA:FB:7A:87:F5:44:80:A4:E6:EA:1F:58:4A:15:37
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F43285848A29B524941DAE2D61E647E80
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/66c3ccdc-8e6c-32e6-9299-14efbc883724.roa
Signing time:             Thu 23 Jan 2025 02:00:40 +0000
ROA not before:           Thu 23 Jan 2025 02:00:40 +0000
ROA not after:            Wed 23 Apr 2025 01:00:40 +0000
asID:                     398823
IP address blocks:        107.148.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a2:9b:52:49:41:da:e2:d6:1e:64:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Jan 23 02:00:40 2025 GMT
            Not After : Apr 23 01:00:40 2025 GMT
        Subject: CN=807f537f-cca4-474d-be17-1e078aa9503b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:87:0b:20:ea:6f:ef:19:0f:e4:cd:ac:92:16:
                    df:50:3e:d7:5f:35:4e:86:34:23:c0:88:20:6f:db:
                    21:40:8e:e1:4d:10:06:f1:b5:07:6b:c4:f7:42:63:
                    e4:f0:09:f4:f1:d5:6c:8a:6c:ad:1e:99:0f:63:c0:
                    c5:10:25:a3:4d:26:a8:48:fd:fc:87:93:ad:e8:3e:
                    ec:4d:75:af:fc:16:55:ba:93:47:cf:9f:52:6b:24:
                    d8:fb:62:7d:7a:d4:2e:cf:7b:af:fe:f0:cc:c7:f4:
                    1c:2f:c0:77:f3:73:c6:e7:61:db:66:a6:54:77:8a:
                    dc:cc:04:e6:76:13:77:6c:a7:34:a6:13:92:4a:74:
                    48:fc:1e:a0:97:05:67:9f:68:59:02:16:3f:ac:78:
                    be:47:e0:29:c4:c1:c7:86:b8:95:3a:e4:58:4f:81:
                    55:29:9a:49:86:e1:a1:1d:99:35:fe:6c:a8:26:9c:
                    8d:8c:81:0b:41:90:ef:85:9a:26:b2:dd:0e:5f:a5:
                    37:3b:11:48:9e:29:41:58:06:c4:ae:9a:ec:4b:52:
                    d7:37:13:0d:ad:03:53:ca:0c:19:92:dc:7e:1c:27:
                    88:fc:09:f2:61:22:b0:24:3c:be:4f:70:a5:f0:9a:
                    70:85:aa:18:dc:9c:94:1f:8f:50:41:82:20:da:33:
                    94:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:00:B8:A5:28:BA:FB:7A:87:F5:44:80:A4:E6:EA:1F:58:4A:15:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/66c3ccdc-8e6c-32e6-9299-14efbc883724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:7a:3e:07:b1:9e:5e:10:3d:e6:16:68:df:08:fc:1d:8c:60:
         d1:22:ee:b0:6e:bb:d4:28:8b:5c:d4:ab:81:52:30:05:7a:8e:
         85:41:6b:fe:76:ea:64:f5:15:54:03:5b:fe:fb:f9:a0:83:5b:
         c9:74:8d:37:25:d8:61:ab:45:da:60:41:85:de:73:94:fe:08:
         fe:ab:5f:ba:54:da:f9:5b:e3:6a:79:6b:b8:1a:1d:93:63:06:
         3f:8b:bb:52:63:8d:a2:c2:cf:e9:1d:70:06:90:10:54:49:3d:
         6a:7d:15:35:f7:30:52:1a:ba:c6:e0:f5:66:80:01:38:08:16:
         08:cf:ce:f6:3d:85:64:6c:21:c9:3c:33:eb:4c:7d:3e:da:67:
         2b:74:76:9e:1f:f7:53:01:06:dd:45:95:48:14:64:e0:7c:8d:
         00:55:ab:8c:c7:f2:df:91:f5:3a:e8:aa:a6:72:58:fb:ea:f8:
         bb:56:dc:d8:48:e0:6e:c8:fe:fc:0c:a5:48:fe:b0:58:21:93:
         f5:22:5e:41:0e:29:64:96:da:a8:7f:fd:51:69:6c:83:a8:2a:
         03:9b:62:e9:19:e1:48:1f:ff:99:10:6b:5a:3b:8a:3c:ba:e9:
         83:f8:0c:8e:31:05:6c:ba:f0:70:ed:21:31:0d:16:6c:00:aa:
         9e:09:7b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:25:01 2025 by rpki-client