Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dcdf034d-188f-3206-97be-ba08dd8291f3.roa
File:                     dcdf034d-188f-3206-97be-ba08dd8291f3.roa (raw, json)
Hash identifier:          pVD0p5w3gpF/oRnvn+vH4CeUaE36Cg0llZqXAepPlK0=
Subject key identifier:   31:20:23:F5:B5:9D:88:A4:02:A2:48:85:CC:0D:09:1B:D6:0D:8A:E5
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F432858491ED6DCF871E8136230903080
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dcdf034d-188f-3206-97be-ba08dd8291f3.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     40065
IP address blocks:        107.148.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:dc:f8:71:e8:13:62:30:90:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=8a83a3ad-6632-49b5-a1dc-81da0d23c965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:23:37:d5:22:44:fc:58:7d:d7:08:36:11:75:
                    43:f8:fc:c6:8a:e7:af:4d:63:31:a1:38:83:f9:aa:
                    15:99:08:8a:e7:22:5d:0e:80:01:00:19:50:bf:f9:
                    93:38:be:42:35:85:16:32:13:4c:53:ac:9d:c6:c6:
                    46:76:a0:6f:03:5b:ef:11:a4:f0:52:b1:16:c7:eb:
                    2e:03:09:72:fa:49:46:fb:1e:82:2b:99:83:de:a0:
                    e8:40:20:5a:57:5f:15:80:cc:2d:22:26:71:fd:ae:
                    1a:fa:df:f2:56:c9:d9:72:0a:8c:b9:b6:2c:a9:62:
                    fc:1e:a8:f4:08:0c:78:a6:83:f4:dc:d7:06:a4:fd:
                    a7:3a:b3:3a:23:27:38:80:26:8c:3f:69:11:e4:b5:
                    8c:8e:9b:6f:a2:2b:fa:6c:c1:21:00:e4:44:34:13:
                    30:49:04:b9:f2:ec:6d:88:9a:6b:bc:5c:dd:dd:9f:
                    a4:b6:63:76:1d:c9:ce:13:a7:03:84:3e:b4:82:a0:
                    aa:ea:45:23:e1:60:01:2b:38:c1:07:56:67:a9:db:
                    3d:10:a8:06:f5:96:60:7f:3e:2b:e9:e9:8e:df:b1:
                    2f:47:62:16:cd:9b:5d:26:ff:cb:ca:78:be:bf:eb:
                    45:d5:a7:1f:10:a3:d1:38:27:d9:6c:e7:2c:e7:20:
                    95:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:20:23:F5:B5:9D:88:A4:02:A2:48:85:CC:0D:09:1B:D6:0D:8A:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dcdf034d-188f-3206-97be-ba08dd8291f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:05:b4:f4:c7:57:5f:11:65:3f:80:ca:dd:74:79:6f:6e:85:
         7d:8e:4f:3d:d3:38:bb:9d:be:d2:6b:df:b7:13:65:70:c9:ad:
         36:c3:7d:8a:14:15:e3:da:cd:87:54:4f:ea:19:5f:f9:80:61:
         2b:92:8f:be:00:41:8a:ba:97:91:db:9b:45:c9:f5:fb:31:6b:
         aa:f2:c5:7f:ea:26:d9:f4:ff:ad:d0:2f:2c:4f:27:17:df:ee:
         49:48:5e:0f:85:0a:ea:85:2d:92:60:77:d9:fa:e1:a3:3b:f1:
         e1:6b:2e:8f:e9:3a:3d:ba:2a:e3:38:8a:9c:ad:2e:7b:03:75:
         ce:97:0a:3a:b7:01:67:40:a3:22:00:30:37:57:f8:1e:e4:58:
         ad:38:97:76:30:8d:a9:e6:b8:c8:d5:41:69:90:05:7d:ac:ef:
         2a:77:56:71:97:28:f2:df:59:48:10:79:95:6b:5b:59:85:22:
         f1:47:b0:92:ef:e1:aa:90:e4:04:fe:3d:43:52:cb:4b:74:e5:
         f7:02:94:7b:50:db:ca:28:bb:57:06:3d:87:9a:52:4f:83:52:
         39:d4:fc:97:74:da:27:9c:f3:c9:49:12:aa:d6:df:bd:7e:03:
         dd:4e:28:20:cc:ba:35:56:34:b5:5c:60:94:4e:05:81:9e:84:
         e4:6c:01:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1tz4cegTYjCQMIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk
OGE4M2EzYWQtNjYzMi00OWI1LWExZGMtODFkYTBkMjNjOTY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCM31SJE/Fh91wg2EXVD+PzGiuevTWMxoTiD
+aoVmQiK5yJdDoABABlQv/mTOL5CNYUWMhNMU6ydxsZGdqBvA1vvEaTwUrEWx+su
Awly+klG+x6CK5mD3qDoQCBaV18VgMwtIiZx/a4a+t/yVsnZcgqMubYsqWL8Hqj0
CAx4poP03NcGpP2nOrM6Iyc4gCaMP2kR5LWMjptvoiv6bMEhAORENBMwSQS58uxt
iJprvFzd3Z+ktmN2HcnOE6cDhD60gqCq6kUj4WABKzjBB1Znqds9EKgG9ZZgfz4r
6emO37EvR2IWzZtdJv/Lyni+v+tF1acfEKPROCfZbOcs5yCVEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDEgI/W1nYikAqJIhcwNCRvWDYrlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvZGNkZjAzNGQtMTg4Zi0z
MjA2LTk3YmUtYmEwOGRkODI5MWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa5SgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAEFtPTHV18RZT+Ayt10eW9uhX2OTz3TOLudvtJr37cTZXDJrTbDfYoU
FePazYdUT+oZX/mAYSuSj74AQYq6l5Hbm0XJ9fsxa6ryxX/qJtn0/63QLyxPJxff
7klIXg+FCuqFLZJgd9n64aM78eFrLo/pOj26KuM4ipytLnsDdc6XCjq3AWdAoyIA
MDdX+B7kWK04l3YwjanmuMjVQWmQBX2s7yp3VnGXKPLfWUgQeZVrW1mFIvFHsJLv
4aqQ5AT+PUNSy0t05fcClHtQ28oou1cGPYeaUk+DUjnU/Jd02iec88lJEqrW371+
A91OKCDMujVWNLVcYJROBYGehORsAa0=
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:58:34 2025 by rpki-client