Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/bc5293f9-eec2-3e58-9702-949d7af46509.roa
File:                     bc5293f9-eec2-3e58-9702-949d7af46509.roa (raw, json)
Hash identifier:          hlmOiYkZrYPft5i5JZ4GFXEq8jGWECnbE4/zkaW+xBI=
Subject key identifier:   08:B0:4C:65:87:53:08:94:82:D3:D6:10:E3:3D:A5:B7:72:2D:23:C1
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F43285848AC60D6E2C8626D8B01E2B840
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/bc5293f9-eec2-3e58-9702-949d7af46509.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     398823
IP address blocks:        107.149.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:d6:e2:c8:62:6d:8b:01:e2:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=3ca455c4-aa93-42ae-8e9f-caa5b0e2c8a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:56:d6:7a:fe:5e:66:00:0d:4c:7e:19:1e:f9:
                    6b:f7:e3:01:4c:20:0a:25:b7:c6:7f:24:a5:6a:6b:
                    2d:23:6b:5b:d3:04:1a:31:1b:89:4b:30:e7:59:d2:
                    a0:20:56:b8:e3:39:44:cf:ff:d7:58:b9:7d:9c:77:
                    2a:76:35:9d:85:98:fe:b8:b8:2a:27:09:aa:06:41:
                    ab:b8:29:46:ee:ad:1b:b0:95:a9:0d:ef:b5:1f:8c:
                    d6:89:0e:2b:b0:35:70:22:d5:85:f6:5c:f2:8e:6e:
                    3d:9e:97:d5:7b:8a:7f:f8:d4:24:9f:44:ef:b6:c8:
                    d3:de:e7:b5:ff:ba:b7:e4:c1:31:61:62:6e:ce:4f:
                    1f:6f:e7:3a:7f:6e:99:06:ee:9d:e3:ea:aa:ae:41:
                    c2:44:c3:16:66:46:a9:29:7c:23:59:99:25:9d:c1:
                    99:5d:db:fb:19:58:66:75:a1:55:7c:e0:f1:a8:82:
                    1c:4a:7b:8e:2c:3b:b0:54:f3:05:f9:a2:ab:6f:fd:
                    8a:f9:22:18:93:90:45:64:ba:e9:06:c7:5f:a3:21:
                    94:9d:0a:72:25:c2:81:c9:02:92:0e:31:7a:1f:3f:
                    49:35:33:98:a9:2d:1a:0e:e6:2c:7e:86:a2:4b:3e:
                    ad:a1:d0:ea:67:91:77:29:fc:9b:19:b3:66:66:b2:
                    76:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B0:4C:65:87:53:08:94:82:D3:D6:10:E3:3D:A5:B7:72:2D:23:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/bc5293f9-eec2-3e58-9702-949d7af46509.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:66:8a:2e:11:55:27:7f:49:29:b2:8d:b8:5a:ce:14:d2:d7:
         a1:c0:52:13:16:51:fa:84:27:56:08:89:03:06:b5:7b:1b:e3:
         38:d7:62:cc:be:90:2e:10:50:ee:0b:3b:9d:8e:03:1f:bf:a0:
         9f:80:a6:de:ab:74:c5:bc:69:ea:b9:1f:e5:be:c7:3f:8b:19:
         10:a4:24:ab:ce:23:1c:cc:61:4d:1e:ce:fe:1e:e8:3a:fc:13:
         91:ec:ec:ab:aa:75:2d:0c:dd:62:d1:43:5f:18:e6:9d:71:da:
         dc:5b:87:23:c7:af:e2:a1:8b:da:2f:da:0e:44:74:c6:05:66:
         47:93:7c:71:1b:f1:18:39:37:d8:ac:77:a8:0e:65:8d:bb:e5:
         eb:fb:4d:4b:6e:32:bf:1d:80:d4:a6:67:e9:9d:02:7d:ca:ba:
         16:2a:fe:ac:27:e2:11:3d:5d:48:f4:b2:d1:14:e5:c7:96:98:
         44:09:8c:17:ed:e9:a4:e6:5f:26:4d:c5:e1:e2:6f:c4:21:59:
         92:53:a7:09:70:af:3c:84:eb:82:f3:b4:31:78:d5:ab:4b:ff:
         c2:8b:f9:e7:94:35:bf:a5:33:72:de:61:4e:f3:2c:d4:1f:8d:
         40:88:bc:34:75:57:a4:fc:52:a1:db:c3:f1:4e:01:31:59:90:
         4b:46:ed:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:35 2025 by rpki-client