Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/edb23b91-d765-3a18-a66d-bbe4f8ea5fa3.roa
File:                     edb23b91-d765-3a18-a66d-bbe4f8ea5fa3.roa (raw, json)
Hash identifier:          yl1dszLxsOWEuR7w+PX9SZiJMbhE2ha3G/Ffp/0Lq/Y=
Subject key identifier:   EF:D8:D9:FE:98:A3:1D:48:E3:A2:E6:02:0F:6A:FC:DC:A7:44:6D:B1
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F43285848DEA11BBE1CBC373561C80640
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/edb23b91-d765-3a18-a66d-bbe4f8ea5fa3.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     398823
IP address blocks:        107.148.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:1b:be:1c:bc:37:35:61:c8:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=54ba6e12-1c87-43af-bde7-2b5adc6d46e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e9:c5:bf:82:53:07:1b:05:1d:55:a0:66:90:
                    58:17:34:db:90:bf:55:20:77:51:e7:2e:cf:ac:ca:
                    65:82:40:de:14:d1:9a:33:80:ea:a4:2d:29:38:27:
                    a1:c9:aa:1e:7e:55:a7:1c:5f:52:30:93:29:57:65:
                    75:6d:23:a3:ea:8c:8f:70:37:ce:7f:81:5d:87:c0:
                    ed:fa:4f:08:16:02:ae:98:aa:bd:cd:bd:91:85:90:
                    59:e6:d5:57:54:0d:7f:5a:31:ca:a9:c6:50:71:a4:
                    3a:7a:fd:d3:75:99:73:3c:a2:fb:c9:03:8f:7c:45:
                    68:a1:e6:23:34:1b:75:c1:15:c7:0e:08:fb:00:d5:
                    00:76:4a:72:26:8b:bc:8c:06:7f:7d:3c:15:df:48:
                    cc:af:9c:55:67:cd:65:a8:34:82:38:17:7e:79:87:
                    e4:1a:03:16:b6:4b:70:82:ab:1a:d8:55:e1:ec:b5:
                    44:22:ab:57:2d:22:b9:09:ff:f3:2e:ca:f0:e3:b2:
                    90:15:8a:e9:88:e3:c3:9c:f0:ed:0b:eb:db:75:32:
                    23:6e:25:8b:ce:9e:31:3c:97:52:55:6f:42:ba:6b:
                    a0:df:10:90:ec:2a:1e:bd:07:6f:46:ed:c8:e9:60:
                    5f:59:37:3f:9f:79:f1:6a:98:a5:21:94:d0:cf:16:
                    4e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D8:D9:FE:98:A3:1D:48:E3:A2:E6:02:0F:6A:FC:DC:A7:44:6D:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/edb23b91-d765-3a18-a66d-bbe4f8ea5fa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:f6:21:f0:50:9a:90:9b:ef:20:3b:64:45:88:96:9d:14:16:
         40:05:08:16:ac:e4:5a:e2:f2:6e:d0:35:e6:3e:ea:3f:33:05:
         7f:08:64:b5:78:a6:a3:e4:3f:22:d8:62:f5:ca:53:bc:c0:dd:
         1d:c0:9c:f2:ef:dd:29:23:5a:ca:10:5a:6e:f1:b9:a1:2a:d1:
         50:2c:c1:5e:6c:de:f5:bf:1e:f8:f8:49:f6:0a:04:52:7e:02:
         77:7e:e2:fb:b1:2e:a0:96:17:e6:54:56:60:a7:7d:fd:91:38:
         0a:13:5d:f3:5a:a3:f3:f0:c2:38:ed:48:f6:9c:f0:10:60:10:
         49:03:3e:e7:1d:cc:6b:0d:b9:1a:3b:81:0a:a9:d6:6c:f8:02:
         85:67:24:31:2e:2e:03:49:3c:28:35:a2:24:e1:53:04:e1:b8:
         a8:8b:a3:2c:cb:ea:ae:d4:5a:9c:94:13:1f:24:06:c1:21:78:
         a8:86:dc:14:4f:c7:f1:80:33:fc:0a:d7:eb:de:b3:66:77:cf:
         57:79:34:5a:bc:f7:26:26:05:cd:53:40:df:81:a4:ff:b5:b0:
         5a:7d:df:fe:bb:43:59:ab:30:b1:7d:c6:29:cc:d8:7c:fb:49:
         01:28:d1:3d:66:49:f3:26:26:a9:6e:8c:aa:7c:4e:86:76:58:
         9d:04:da:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoRu+HLw3NWHIBkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk
NTRiYTZlMTItMWM4Ny00M2FmLWJkZTctMmI1YWRjNmQ0NmUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuunFv4JTBxsFHVWgZpBYFzTbkL9VIHdR5y7P
rMplgkDeFNGaM4DqpC0pOCehyaoeflWnHF9SMJMpV2V1bSOj6oyPcDfOf4Fdh8Dt
+k8IFgKumKq9zb2RhZBZ5tVXVA1/WjHKqcZQcaQ6ev3TdZlzPKL7yQOPfEVooeYj
NBt1wRXHDgj7ANUAdkpyJou8jAZ/fTwV30jMr5xVZ81lqDSCOBd+eYfkGgMWtktw
gqsa2FXh7LVEIqtXLSK5Cf/zLsrw47KQFYrpiOPDnPDtC+vbdTIjbiWLzp4xPJdS
VW9Cumug3xCQ7CoevQdvRu3I6WBfWTc/n3nxapilIZTQzxZOoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO/Y2f6Yox1I46LmAg9q/NynRG2xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvZWRiMjNiOTEtZDc2NS0z
YTE4LWE2NmQtYmJlNGY4ZWE1ZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5RYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACP2IfBQmpCb7yA7ZEWIlp0UFkAFCBas5Fri8m7QNeY+6j8zBX8IZLV4
pqPkPyLYYvXKU7zA3R3AnPLv3SkjWsoQWm7xuaEq0VAswV5s3vW/Hvj4SfYKBFJ+
And+4vuxLqCWF+ZUVmCnff2ROAoTXfNao/PwwjjtSPac8BBgEEkDPucdzGsNuRo7
gQqp1mz4AoVnJDEuLgNJPCg1oiThUwThuKiLoyzL6q7UWpyUEx8kBsEheKiG3BRP
x/GAM/wK1+ves2Z3z1d5NFq89yYmBc1TQN+BpP+1sFp93/67Q1mrMLF9xinM2Hz7
SQEo0T1mSfMmJqlujKp8ToZ2WJ0E2ts=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:18 2025 by rpki-client