Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/164131bd-7b45-3ec2-b716-5511a8ab5e65.roa
File:                     164131bd-7b45-3ec2-b716-5511a8ab5e65.roa (raw, json)
Hash identifier:          LC0Dq99j0kC41diOJ0eXT4eWB4VYV68wnVzj9UVxKIg=
Subject key identifier:   5F:D6:43:6D:17:2F:6E:F7:E9:BF:86:95:9D:54:83:46:CA:AC:A5:E2
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584B41E71AD630FFC839189F6D00
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/164131bd-7b45-3ec2-b716-5511a8ab5e65.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     36137
IP address blocks:        107.148.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:1a:d6:30:ff:c8:39:18:9f:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=6fe9c149-287f-46e5-82f5-1883434b1808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:17:46:b7:57:ad:56:04:d7:5f:bd:89:14:8a:
                    b9:d6:82:4a:28:ca:7c:a8:6b:df:27:50:29:6a:9d:
                    7e:52:26:a5:9c:21:72:f7:2d:f4:df:c5:c8:12:4b:
                    58:6e:7b:bd:b3:56:79:e4:07:b5:e4:8a:40:cf:f2:
                    96:9a:d7:1c:4e:8c:8f:8f:76:0c:7f:8d:b4:4f:cf:
                    bb:ee:37:80:f0:dc:88:5d:fa:3b:28:a0:17:84:27:
                    95:02:e6:a1:81:cc:50:16:9f:f7:e2:f8:bc:cd:a7:
                    a5:b3:69:5c:d6:ac:40:7b:0b:14:bf:c1:33:c9:b0:
                    13:54:4c:94:63:b1:09:94:e0:ec:a5:c4:16:cd:37:
                    70:f0:bb:cf:52:dd:c5:e6:90:32:10:03:01:82:fa:
                    6b:6b:c8:1a:a4:8f:56:b6:f4:38:91:0d:5e:6d:7b:
                    57:de:60:7f:a7:93:67:b7:18:63:e0:08:98:39:e9:
                    d0:0b:42:03:2e:48:e5:14:e8:62:88:d9:19:8e:99:
                    a3:54:a2:5c:f2:0f:54:e8:ae:3b:e6:9c:0a:28:bc:
                    22:0c:03:ab:ca:37:3c:57:e2:e4:3c:8b:dd:f7:b1:
                    07:a6:99:ea:61:ca:01:fe:8c:32:2c:be:a2:5b:04:
                    cd:07:f7:40:eb:91:ce:d3:87:bd:98:17:91:40:b3:
                    81:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D6:43:6D:17:2F:6E:F7:E9:BF:86:95:9D:54:83:46:CA:AC:A5:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/164131bd-7b45-3ec2-b716-5511a8ab5e65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:e8:b2:3e:87:ff:73:45:9e:49:f2:c5:33:b8:0f:ce:7a:a5:
         72:66:4e:2c:32:d0:2a:ff:ad:2c:2e:ee:f2:2f:31:3c:57:d2:
         37:c3:a1:78:50:95:9c:71:a2:9b:fa:a1:df:63:91:a6:c1:17:
         77:08:83:aa:24:f4:b2:c3:19:d5:cf:e1:3a:34:a4:2f:b5:9d:
         41:7d:0b:11:96:13:b3:7d:80:e4:fa:08:70:c3:0b:78:de:46:
         9f:c7:bd:63:ae:53:47:cf:f2:05:dc:38:a7:e4:a7:d4:74:95:
         26:5f:58:db:ba:07:dc:f2:fa:2d:e7:ef:d6:ee:f9:84:38:b3:
         4e:59:8d:b8:9f:ad:9d:5b:59:e1:d8:d9:7b:02:b0:a1:f3:43:
         ab:c9:a8:c9:14:cd:cc:bc:37:11:11:fe:23:c1:bb:e5:47:61:
         46:04:f5:0e:d9:f0:5f:95:a0:ca:1a:9e:58:d2:06:ed:60:40:
         02:09:fc:9c:2c:23:84:49:ce:5f:50:12:a2:f1:0f:46:9c:d7:
         e5:93:7d:3b:78:62:22:62:e9:1a:0f:a2:5e:73:de:6a:05:49:
         d0:46:da:7b:82:6a:93:aa:21:2d:7e:d4:6f:8f:80:05:2a:ac:
         ab:29:5e:3b:8c:23:67:9d:75:c6:ae:f5:33:91:f8:a9:3e:57:
         d4:cc:28:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:52:23 2025 by rpki-client