Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c0b24489-852f-36e4-8bfb-88f702345814.roa
File:                     c0b24489-852f-36e4-8bfb-88f702345814.roa (raw, json)
Hash identifier:          nsEGkqCmIKVUDEANv4/v/FWKcnANYn9EAvWM7vB1hAE=
Subject key identifier:   F2:F7:1E:42:79:68:E5:F5:28:5C:17:08:B4:8A:54:D8:4F:47:24:14
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584B9E07B5EAF6320411073C33C0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c0b24489-852f-36e4-8bfb-88f702345814.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     21859
IP address blocks:        107.148.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:b5:ea:f6:32:04:11:07:3c:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=0dc3f11d-6839-42ed-95ee-ecc225860f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3c:9e:25:76:9c:1f:e0:52:b4:9d:3d:20:47:
                    dd:29:1f:f0:da:89:42:a4:49:15:df:d4:6f:74:bc:
                    91:66:8c:e9:4b:ff:1a:67:99:1d:c1:4c:b1:db:3e:
                    3f:6c:44:40:31:a4:ca:25:ec:ba:6e:fb:8e:ef:ca:
                    ab:ec:98:3b:7c:e7:bd:a3:99:87:6f:75:d1:7d:9e:
                    f8:f1:ce:69:0c:a4:04:04:75:05:c1:44:04:c4:25:
                    ba:19:9b:9d:06:3c:74:2e:aa:28:ba:99:71:c7:ca:
                    94:f3:52:d9:89:e8:01:94:e8:6c:69:fb:81:40:40:
                    f2:10:f9:1e:11:3f:21:0a:c6:72:50:9c:96:24:fb:
                    9a:a2:c5:06:97:37:4c:a2:cb:4a:56:14:aa:10:a2:
                    6a:be:20:77:c5:a7:a0:be:20:f2:62:22:41:cc:00:
                    68:9b:5c:9a:31:b4:f1:9c:b7:dc:2f:c1:e8:dd:29:
                    04:70:70:05:90:cc:ef:57:31:f8:ed:8f:d5:98:42:
                    1b:a6:aa:9f:fa:7b:98:2b:a4:60:3e:bb:50:c2:84:
                    29:e4:b4:47:87:22:9c:ed:1b:33:6d:3f:ac:19:0c:
                    0f:1c:f2:55:f6:b2:5a:6c:c6:76:a9:12:f1:77:33:
                    8f:3c:49:eb:c0:52:73:4c:ee:d0:a1:78:b8:c0:02:
                    7c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F7:1E:42:79:68:E5:F5:28:5C:17:08:B4:8A:54:D8:4F:47:24:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c0b24489-852f-36e4-8bfb-88f702345814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:3e:aa:3f:45:30:4c:da:e3:3b:d8:25:66:51:67:09:a0:9b:
         1f:9b:a5:8b:90:f3:f0:74:d1:45:8a:24:33:06:95:46:c4:89:
         55:8d:fd:df:83:2b:cc:3e:4f:62:1c:44:e9:18:11:5a:b1:fd:
         c1:fb:5d:75:53:76:6f:46:a4:ef:81:72:da:07:9b:7a:af:3b:
         3b:a0:75:c9:dc:6f:68:6b:72:66:87:f0:1c:b3:74:ce:c2:bb:
         63:cd:ab:13:77:89:38:7b:00:ad:4d:10:28:df:ac:be:4d:13:
         99:50:b2:2f:6a:3e:b2:ca:5d:27:07:b6:56:9d:31:4d:cb:29:
         c7:27:2e:b1:ea:ae:ea:f8:a7:42:48:33:7b:49:06:7d:db:3e:
         79:62:ea:47:6f:63:63:42:55:c8:7c:3e:80:6c:d4:62:70:bd:
         37:3c:91:8f:88:dd:0c:63:4b:ed:a3:bf:b1:43:2b:55:ec:78:
         27:64:22:1f:ea:51:9f:bd:5b:07:46:95:ec:38:bf:e6:dd:c1:
         23:a7:4c:4a:94:c0:0f:67:d9:9b:e3:1f:4e:67:4d:4d:a5:f8:
         d9:87:c4:9d:c9:1b:31:e3:56:a2:b6:60:c0:2a:19:d3:c7:12:
         04:43:bc:db:be:ff:0b:8b:2c:bf:12:ea:7a:3d:c2:ce:f0:a3:
         0b:46:76:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 04:49:38 2025 by rpki-client